Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/848b9ae8-d7ac-3369-860a-393414a97d6d.roa
File:                     848b9ae8-d7ac-3369-860a-393414a97d6d.roa (raw, json)
Hash identifier:          /CYqBozRcjlwgvJxmBsVvS6fRnKw60P2tvjtzIXu5+I=
Subject key identifier:   47:BF:41:89:32:F7:FE:40:77:69:2F:8F:4B:6B:39:01:8F:55:56:25
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9EA980120123B8CE7FC900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/848b9ae8-d7ac-3369-860a-393414a97d6d.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33659
IP address blocks:        2603:301b:1e00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9e:a9:80:12:01:23:b8:ce:7f:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=ec7fe8d3-7bec-4992-9f4f-47d06bf5a30c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c6:36:84:8f:6b:f6:4b:85:d7:b8:4d:67:6c:
                    b8:dd:93:6f:1e:07:a1:62:78:65:5c:0a:91:01:02:
                    ff:e1:4b:a4:31:92:5e:d9:8e:e7:4e:01:f8:6d:53:
                    c4:b6:e0:1b:b3:fb:d4:cb:c2:a5:90:a5:be:27:1d:
                    b7:50:8c:47:31:7c:cb:89:35:67:73:ec:da:cb:e0:
                    9a:0c:be:8f:3f:f7:7e:bb:a8:a3:1b:78:6d:b7:0a:
                    6f:f4:e0:71:a7:b0:56:d6:4d:e6:67:64:63:ad:34:
                    42:c8:c0:0c:df:42:53:11:40:01:95:c2:95:b4:fb:
                    76:da:2f:56:6a:cf:14:27:e8:1c:4b:eb:e1:a2:91:
                    8f:3f:75:5b:3a:22:5f:a5:68:be:2b:ae:63:87:fe:
                    65:19:d5:77:b2:76:86:db:3e:fd:6a:b8:26:c4:09:
                    aa:56:27:4d:84:d0:01:c0:fe:80:e6:76:f5:94:17:
                    5b:9f:0b:7a:7e:f9:15:9a:d0:3d:87:ec:47:b0:c4:
                    e0:fd:f9:2c:76:b9:d1:fe:96:c4:40:d2:da:1a:72:
                    7d:1a:51:f7:06:51:94:fd:e9:5a:eb:30:4a:0a:76:
                    a6:72:99:db:7e:86:7a:73:77:82:0d:0d:ff:b7:db:
                    de:fb:76:8c:6c:e7:6a:9e:2e:22:ed:77:b6:19:f1:
                    d9:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:BF:41:89:32:F7:FE:40:77:69:2F:8F:4B:6B:39:01:8F:55:56:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/848b9ae8-d7ac-3369-860a-393414a97d6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:301b:1e00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:d6:c3:1a:ab:1a:7d:a6:3b:f4:fb:e6:7b:4e:36:a3:96:0f:
         f0:12:92:f3:c1:ce:98:3c:05:70:27:1f:b0:e0:98:43:1f:da:
         2c:10:bf:07:e3:01:2c:52:17:af:ab:ba:48:31:d2:2b:02:5e:
         05:b2:32:5b:f2:1e:1f:3e:96:a0:a5:78:01:31:55:c4:08:df:
         16:75:da:45:6e:ff:ec:9b:fd:ed:25:c6:77:b3:a7:6f:84:c9:
         30:d4:02:9a:31:ee:93:63:c7:0e:89:fe:ae:1a:f7:fb:63:24:
         2d:eb:40:9e:cd:e4:51:66:e1:fb:ad:d2:a6:94:f3:2d:4a:a2:
         d2:bc:e1:1a:c8:7e:cd:46:98:d7:23:35:f6:1d:46:27:a5:11:
         0e:07:73:78:c9:9d:37:d6:48:bb:f3:1b:dd:98:b5:42:76:5f:
         c7:03:f4:3c:c4:9a:ed:e6:66:cb:d0:d0:06:60:e2:93:16:fb:
         8e:1d:f0:19:e2:6b:74:2c:f7:f7:94:18:2d:93:1f:76:d5:85:
         b7:e3:2d:df:3a:bb:2d:48:ca:c1:3d:c2:8d:57:57:26:2c:ac:
         b1:eb:a0:9d:8f:5b:17:be:3d:21:76:a7:fd:e5:98:aa:89:18:
         f4:0a:42:62:eb:d7:06:66:5c:99:c6:1f:08:84:35:01:9a:8d:
         91:3f:ce:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:09:08 2024 by rpki-client on console-ams.rpki-client.org