Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7b295d15-86f9-3c12-9b30-f89f5b39b713.roa
File:                     7b295d15-86f9-3c12-9b30-f89f5b39b713.roa (raw, json)
Hash identifier:          Nwig7gwRQUVa/tgK/LDUZwz2f6x1x2INCH1hPmRX56c=
Subject key identifier:   EA:40:A5:D3:92:11:E1:42:5B:0C:1F:F6:4F:2D:73:0B:66:AA:E1:62
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C7F1E60756E73835837100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7b295d15-86f9-3c12-9b30-f89f5b39b713.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     33662
IP address blocks:        2601:2c7:c000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c7:f1:e6:07:56:e7:38:35:83:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=0baecba7-4ae6-446a-b308-8d35211a3f1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:36:51:cc:fc:c0:26:d1:94:d0:7e:8d:44:3f:
                    65:08:a0:27:11:36:52:9b:00:b9:31:b5:75:6a:32:
                    72:1c:32:58:59:a6:5c:83:a9:c1:d6:69:ac:c1:1c:
                    df:37:59:a5:7e:cf:c9:98:d7:f1:58:17:e6:cc:f1:
                    d6:b2:44:77:cc:90:21:82:ae:cd:83:7f:34:a8:13:
                    46:01:82:1e:35:65:1d:cb:fc:43:4f:f7:fc:e1:66:
                    57:12:30:ae:db:db:62:6b:41:34:e1:3f:6f:17:55:
                    5f:56:52:b3:b2:84:15:92:42:2e:92:b1:80:18:3d:
                    86:02:f7:a4:d6:30:fe:43:b7:24:1c:16:34:78:71:
                    bc:74:1c:51:21:83:ac:38:8f:b5:2b:66:c1:17:31:
                    8a:e7:c6:80:5e:6f:ea:5b:63:9c:b9:7e:ad:23:cc:
                    1b:b2:05:43:19:7f:84:12:e3:07:ba:6b:16:3b:5f:
                    82:d2:32:a9:bc:08:d6:88:23:5a:d4:86:55:1f:1e:
                    d1:b7:bd:16:e7:2a:16:c7:f4:89:c6:ff:7c:42:17:
                    89:68:6a:b7:c2:56:9e:05:b2:81:a8:a7:e9:a7:66:
                    81:d6:bf:52:6f:50:ec:78:84:b6:f0:50:f2:e8:d9:
                    dc:e6:18:c7:83:f7:0d:c3:88:69:39:6a:09:b5:32:
                    28:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:40:A5:D3:92:11:E1:42:5B:0C:1F:F6:4F:2D:73:0B:66:AA:E1:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7b295d15-86f9-3c12-9b30-f89f5b39b713.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:2c7:c000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:1b:2a:08:e1:d0:2d:02:e6:15:4c:ee:ef:e6:10:4c:44:1f:
         d6:82:4f:47:7a:f9:ba:6e:7a:56:b7:d8:c0:be:3c:76:9c:9a:
         f9:fe:ff:77:16:20:5d:72:8a:67:d2:fa:12:3a:2b:75:a7:df:
         f0:37:61:b4:bb:22:8f:74:6b:77:f5:93:3f:5e:26:a6:3a:70:
         09:57:6c:5a:74:ef:e7:59:ee:52:4b:73:d6:ec:c8:9a:29:c0:
         4f:c8:7c:41:d5:61:7c:fb:a6:ca:0d:a7:7e:22:6a:db:db:72:
         3b:01:64:bd:e0:33:3e:5c:04:39:4c:b6:b1:f0:b7:d7:3f:04:
         21:36:ad:c4:b0:69:21:e3:52:36:31:6d:04:ab:2b:86:48:ab:
         3f:ba:cf:42:52:d1:03:b3:82:23:29:3c:ec:52:60:cb:2f:34:
         4e:88:00:58:3a:2b:64:0e:8a:4b:c0:f1:94:a4:1e:63:7f:c8:
         c1:f7:24:a7:62:9a:e8:bc:ae:ed:cd:b2:a0:b0:9a:db:54:6c:
         ac:d9:28:a2:c8:f2:c4:23:77:62:64:e2:fa:df:c1:3c:9b:5f:
         d2:80:0e:b6:44:c4:66:1d:d6:29:ef:51:c2:24:d0:99:ac:7c:
         83:2c:bd:f1:85:60:e7:5b:23:7c:27:25:bd:89:33:16:02:d0:
         5c:bd:d2:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:39:11 2024 by rpki-client on console-fra.rpki-client.org