Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/47475c8f-4405-3784-975d-ad58e0bb7c4e.roa
File:                     47475c8f-4405-3784-975d-ad58e0bb7c4e.roa (raw, json)
Hash identifier:          8A+GX7yPS13CBVfSAl/xLVXtAueg+vsS0V8ge4FLHb0=
Subject key identifier:   05:27:F1:4D:66:6B:39:A9:E6:B9:73:63:7C:44:D1:8E:56:F1:4A:98
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9F007347F1C62D2A116480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/47475c8f-4405-3784-975d-ad58e0bb7c4e.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33287
IP address blocks:        2601:48:c000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9f:00:73:47:f1:c6:2d:2a:11:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=067143c3-c3a7-462a-a926-f63d4467ccb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:00:2e:c4:1a:32:18:3b:d8:97:03:48:98:f6:
                    52:67:60:91:e7:f1:71:6b:c5:bb:77:05:97:c6:bc:
                    e9:95:91:36:cd:f2:4f:ff:0f:f4:be:96:aa:67:b9:
                    69:96:ab:57:db:48:4e:06:df:7a:9f:c7:e7:4f:a7:
                    a6:fd:f8:9e:b2:f5:aa:19:9d:10:e9:d9:64:f2:93:
                    c3:f6:d1:b9:4f:93:24:1c:da:66:04:8d:fa:4f:58:
                    d5:52:ea:a0:33:ae:37:48:18:5c:19:29:20:96:4e:
                    c3:cc:3a:78:c1:d1:ca:23:50:3e:33:1a:f4:f3:1c:
                    07:5a:e0:28:79:4e:f0:46:67:0d:87:f0:58:e0:2c:
                    4f:ee:52:d6:0c:83:df:77:94:9d:97:b5:d6:1f:a6:
                    a7:73:f6:79:12:9f:d0:43:41:b8:f2:f5:57:76:6e:
                    e3:91:b0:ed:e8:5b:2b:36:64:fd:c9:70:39:d4:dc:
                    12:e2:b2:a2:81:ed:b8:5a:61:e1:1e:04:d2:75:f4:
                    25:6c:4f:05:f2:ce:84:ea:3d:f4:5f:e3:3e:35:b7:
                    94:e4:17:c4:38:84:5f:56:4f:21:4b:7e:3d:61:45:
                    2f:12:50:ba:ef:5b:ca:0d:80:e7:9a:e3:76:af:86:
                    24:0d:cc:7e:fb:c5:28:10:a8:ae:cc:d3:9f:1f:9a:
                    50:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:27:F1:4D:66:6B:39:A9:E6:B9:73:63:7C:44:D1:8E:56:F1:4A:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/47475c8f-4405-3784-975d-ad58e0bb7c4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:48:c000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:24:f3:43:9e:db:61:d3:44:19:f8:a8:ce:e5:3b:4b:f0:9a:
         38:dd:da:f0:85:b1:b4:be:a0:83:92:0b:2b:24:ae:31:61:f1:
         c0:42:65:b3:1f:07:a1:96:26:a8:21:11:fd:f1:84:fc:5a:90:
         98:8e:4f:6b:06:13:90:e5:1e:59:2d:0e:45:b8:a8:20:c2:76:
         52:d0:67:2b:3b:f0:e5:c2:62:a9:49:b4:1c:93:b4:3f:7d:8b:
         73:bf:3a:79:87:85:fb:33:1e:2e:47:51:b5:04:d8:9d:3e:71:
         d5:7e:8c:4b:ab:97:e8:a7:24:be:8b:62:9c:26:72:df:06:b3:
         90:55:48:11:cb:5a:54:ae:c7:28:86:18:b1:21:f4:a0:76:d3:
         9b:4d:a5:a8:aa:68:b9:82:4c:f4:f0:91:0c:e0:45:ff:34:ca:
         39:d3:9d:42:be:97:fc:53:fc:85:1e:74:aa:55:ee:d9:8f:ad:
         7f:86:20:c5:eb:ac:52:3d:79:cc:a4:51:4a:ff:72:6a:a1:c9:
         da:35:42:bb:08:01:e9:ee:cc:d1:14:23:09:2d:52:00:3f:9b:
         fd:3b:75:6f:bb:2b:7c:de:cf:4a:92:15:ba:41:28:ff:78:fe:
         d1:74:98:ad:7f:30:bc:06:9f:cd:d2:c0:e5:93:1f:de:0f:eb:
         d1:95:99:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:54:19 2024 by rpki-client on console-ams.rpki-client.org