Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/61c67980-cfcb-322a-b73b-a645727858ef.roa
File:                     61c67980-cfcb-322a-b73b-a645727858ef.roa (raw, json)
Hash identifier:          r6nIuNo2pdGS/fGl/laWgu4UFlv2b3X0vgxz7Fj11N4=
Subject key identifier:   67:62:15:D6:2D:C5:D2:74:8C:86:4D:0C:98:19:3C:44:18:AC:9D:19
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9E51AA44F2B0878077DF80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/61c67980-cfcb-322a-b73b-a645727858ef.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33287
IP address blocks:        2603:204a:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9e:51:aa:44:f2:b0:87:80:77:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=5bd95784-7e8c-443e-a3d0-aadcb69abc5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:a8:f6:d7:3d:3c:9a:86:7f:52:6e:fd:9f:5e:
                    ee:8c:4a:bf:51:0e:07:9d:e2:dc:3f:f0:f1:c5:41:
                    1a:c7:fa:07:7b:e6:32:28:ed:33:5d:5f:e8:6c:94:
                    25:2c:1c:4d:c3:29:93:5f:3d:71:26:9c:08:39:3b:
                    0c:62:8d:ed:7a:43:52:24:5c:61:1d:c1:c6:83:e5:
                    5e:ae:d9:80:3a:32:c2:8f:a7:f4:3e:bf:76:5c:cb:
                    61:9b:da:27:94:37:56:3d:0c:05:06:f5:7a:1c:8e:
                    fd:c1:6d:49:44:ee:c9:26:0e:90:1b:7a:0d:37:7b:
                    3a:65:89:16:76:c9:ca:e2:44:a8:07:bc:57:5e:84:
                    8f:7d:a2:af:dc:db:52:0f:02:40:ec:3a:59:95:e6:
                    05:43:bb:bb:08:da:21:43:0d:f2:00:27:bf:3f:79:
                    39:a4:e2:bf:3f:79:91:83:a4:60:d2:23:3b:e4:02:
                    41:95:73:3e:b6:3e:ce:24:52:93:6f:81:00:2c:11:
                    16:8c:a4:fb:88:41:2a:c1:18:a3:a8:f0:d8:a2:9e:
                    50:df:18:94:e2:db:e8:33:0c:74:0b:3a:0b:ee:55:
                    3d:8b:2f:f5:06:78:07:e2:78:cc:17:46:80:f5:bd:
                    6b:e3:ac:cc:6d:6f:77:3b:d1:a6:8f:92:3e:b0:35:
                    47:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:62:15:D6:2D:C5:D2:74:8C:86:4D:0C:98:19:3C:44:18:AC:9D:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/61c67980-cfcb-322a-b73b-a645727858ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:204a:4000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:70:5a:81:df:82:d9:7f:ff:00:1b:20:dc:d6:42:14:08:83:
         be:bc:06:f5:83:6c:da:df:09:61:f6:f3:32:12:9a:cb:90:87:
         65:57:d6:8a:5d:2b:e5:7d:64:45:a5:90:f4:35:5f:eb:66:68:
         28:8c:ca:98:76:a7:0b:e4:4d:7a:47:d3:96:e3:cb:a7:f9:81:
         5a:d5:84:41:a2:6c:73:16:3b:04:2b:52:43:45:00:13:16:1c:
         f4:d7:68:83:ae:04:28:6f:c8:50:6d:93:af:17:bf:5a:76:51:
         81:2d:d4:7a:29:07:18:2a:4f:92:f8:c5:4a:24:5d:b9:8e:f4:
         c9:87:be:05:3e:1c:b7:1f:de:57:b1:8f:51:76:af:6d:ce:05:
         94:04:36:18:4a:bf:26:ff:1e:84:f5:f1:db:88:d9:2a:1b:8f:
         4e:12:3c:85:41:80:34:cf:08:59:25:e9:65:91:89:de:1d:f3:
         73:cb:f5:22:ba:f7:de:27:13:b7:36:7e:cf:fb:35:69:6e:db:
         c3:8b:1b:2b:67:89:c9:3e:e8:b3:a0:06:7b:17:e4:2e:19:85:
         48:6f:ad:c8:84:a8:9a:55:9b:05:7c:27:2f:4d:4c:68:ba:a4:
         ca:cf:2c:b8:2c:91:df:1c:55:17:c0:9c:35:5b:7b:f0:27:5f:
         d9:c3:72:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:26:11 2024 by rpki-client on console-fra.rpki-client.org