Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8d614da6-6693-3b11-b590-e9ec34958ac8.roa
File:                     8d614da6-6693-3b11-b590-e9ec34958ac8.roa (raw, json)
Hash identifier:          AQ5ipiwl1WzEktyX3dbmd8rpr3wt1iu/YN4ObTlKFxQ=
Subject key identifier:   C9:3C:7E:A0:32:5F:47:CD:EC:8D:DF:6A:67:5D:1B:AA:FF:7B:10:48
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9BABDAC23A7C2217F97200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8d614da6-6693-3b11-b590-e9ec34958ac8.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33491
IP address blocks:        2603:300a:1600::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9b:ab:da:c2:3a:7c:22:17:f9:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=a8497a34-d450-47d2-9bf7-913ba0772833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:25:e1:87:05:0e:55:c9:0f:b6:a1:fe:94:d9:
                    2b:b0:d5:09:66:76:1d:f3:11:29:bb:c5:a8:72:f0:
                    0f:7d:d8:3a:f6:3e:03:d1:05:5e:e8:cf:fd:91:ce:
                    ed:6d:9a:57:70:f3:15:0a:9c:7b:5d:aa:9c:a7:93:
                    04:f3:41:aa:68:09:54:e7:0b:af:6c:d1:0f:85:23:
                    ea:0f:48:19:25:27:ee:b6:62:3f:b8:b1:ba:ec:1b:
                    bc:01:c0:44:fb:06:cc:58:a8:58:4d:c0:d6:bc:be:
                    23:84:11:2b:c1:02:6d:6a:3e:2c:bb:bd:1a:5f:12:
                    a5:10:2c:de:95:a9:f2:b9:41:00:58:2d:89:90:60:
                    c7:cf:63:89:8f:52:18:8e:5c:84:46:af:90:ce:ce:
                    df:9b:5a:d5:da:5b:14:29:9d:4d:d8:9e:1e:17:00:
                    84:f4:a4:c6:a8:91:57:bf:1f:6a:03:8f:71:a0:6a:
                    62:72:cb:e1:e9:29:e3:01:88:cb:fa:8c:ca:1b:56:
                    06:34:a7:4d:83:e4:98:17:2d:bd:88:8a:83:2a:dd:
                    0e:90:22:09:5a:ee:de:22:fa:97:6b:79:2f:6d:ce:
                    84:59:8d:b0:c7:ae:42:08:31:ea:ff:c1:97:8f:c4:
                    82:fb:d0:4a:ce:2e:c5:5c:b0:50:05:d9:a9:7d:3d:
                    ba:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:3C:7E:A0:32:5F:47:CD:EC:8D:DF:6A:67:5D:1B:AA:FF:7B:10:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8d614da6-6693-3b11-b590-e9ec34958ac8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:300a:1600::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:57:ff:5e:51:d6:a4:98:5c:48:d8:09:26:e6:e9:9b:1e:6a:
         96:83:77:e7:25:f2:df:02:69:b8:87:ed:78:26:5c:4c:38:db:
         55:33:eb:8b:2a:99:0a:5b:07:53:8d:41:33:44:45:2e:a1:09:
         df:44:92:7b:b9:87:16:46:61:b3:ed:84:a6:db:cd:cf:55:15:
         2c:53:67:8a:7c:0d:1f:18:2a:9e:31:42:7b:ab:d5:99:93:61:
         be:c4:d0:f1:b3:db:1f:31:d8:03:bb:b4:d6:18:6f:41:db:b3:
         d5:26:3c:0b:3c:17:b3:7f:44:b4:4d:86:e8:b1:a8:01:05:b1:
         73:03:8f:08:fa:3f:46:6b:63:04:99:23:1e:64:49:6e:00:1b:
         09:f7:cc:86:ee:97:b8:72:a0:39:8b:10:0b:fa:ef:04:bb:ac:
         26:5a:9d:3a:1e:0e:39:17:ea:6d:b0:3b:e9:0a:27:a8:6b:03:
         15:be:9f:dc:29:bb:7a:4b:dd:d0:d9:f5:eb:6f:b0:6c:d2:98:
         b2:45:29:6e:89:01:0b:2a:91:d8:93:40:3c:04:b2:f9:5c:69:
         b8:7b:cd:6f:4e:c4:0c:51:84:55:b6:74:68:89:c4:fd:10:0c:
         6b:33:28:12:3e:5a:1e:d9:bb:00:50:af:27:d2:93:8f:a2:43:
         97:5b:b2:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 15:21:18 2024 by rpki-client on console-fra.rpki-client.org