Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9050ef3e-b452-35c5-96eb-f1e7cbeeac2e.roa
File:                     9050ef3e-b452-35c5-96eb-f1e7cbeeac2e.roa (raw, json)
Hash identifier:          hGZUxklxHI9H1RYOjzfOAllCJh5v2fA8UFbY/Fwq7TI=
Subject key identifier:   9A:41:C8:F2:6A:44:8E:93:52:24:9B:5E:50:BA:D1:83:E1:A1:33:A2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C6811FAAE9A3DE21A60400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9050ef3e-b452-35c5-96eb-f1e7cbeeac2e.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     7015
IP address blocks:        2603:3005:6c00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c6:81:1f:aa:e9:a3:de:21:a6:04:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=2ec3f52c-66e7-4459-890d-b52b8373c5e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:9c:91:51:c0:7e:a4:33:b2:4f:1d:ef:5e:91:
                    f1:0f:8f:2d:09:d8:e7:5f:7a:99:d4:2c:9b:f6:f2:
                    0b:6d:99:c4:e9:f1:11:97:30:14:59:79:29:3e:26:
                    79:ea:9a:50:7b:35:bf:6e:75:e9:3e:da:a4:d6:cf:
                    c2:4f:c8:f1:fa:16:d0:20:45:ba:d2:b8:78:f9:29:
                    05:33:ca:4a:1a:74:71:b3:a3:3b:1a:91:60:91:c7:
                    43:cd:34:b0:48:bb:d8:cb:0b:13:77:20:7b:3b:df:
                    4f:38:14:03:7c:47:df:a7:24:f7:82:96:e8:ce:60:
                    f0:52:65:8f:3f:a0:7f:36:22:b9:ff:10:2e:1b:d6:
                    f6:3d:e0:50:31:30:ba:df:36:53:11:a9:95:57:52:
                    b6:44:48:70:02:1c:28:98:10:bc:c0:27:25:02:50:
                    52:2a:c0:8b:7f:85:f3:c8:4c:d9:1d:be:e4:69:81:
                    bb:1d:07:ef:23:60:1b:2c:6b:33:82:1f:b7:b4:72:
                    31:8d:af:01:f1:22:49:09:2a:0b:e7:ca:fa:6d:92:
                    66:9e:2a:c3:b9:ac:70:0e:39:1a:0b:c2:55:d4:25:
                    37:49:79:cd:7f:f9:d6:83:06:6c:56:06:f1:d7:1f:
                    dc:0e:0b:54:d4:9f:ca:71:3f:61:fd:53:e6:39:4b:
                    02:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:41:C8:F2:6A:44:8E:93:52:24:9B:5E:50:BA:D1:83:E1:A1:33:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9050ef3e-b452-35c5-96eb-f1e7cbeeac2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:3005:6c00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:94:bd:61:97:21:3e:cc:f4:4e:94:04:e5:a0:28:3f:4b:d9:
         69:75:d5:2e:02:49:db:55:a1:38:31:ac:da:59:6f:60:4d:13:
         eb:be:17:13:c5:81:56:5d:9f:b7:e0:0c:f1:23:57:92:5c:c1:
         05:c3:8b:b7:e0:4c:4b:d8:4a:60:f5:ab:5b:2e:8d:8b:84:36:
         8c:c4:80:4b:a3:6c:91:eb:c1:90:ce:7d:ab:16:6a:86:25:a5:
         d8:d5:ff:ed:02:2f:13:38:20:5b:a9:46:97:15:d4:b2:b7:f0:
         88:21:3d:8f:f1:2d:a4:f1:28:52:e8:cb:df:09:8c:95:4b:54:
         6a:62:a2:20:61:dd:f9:ad:42:4b:df:c0:5b:ea:25:65:71:3e:
         77:7b:22:1b:87:30:70:66:8d:fd:28:28:fd:64:a6:b1:b2:dc:
         7c:3e:94:92:e6:c9:1f:0b:9a:22:38:82:1a:05:86:c7:dd:bf:
         49:f6:f8:e6:28:89:19:51:7e:5e:37:22:8e:a3:a0:74:89:93:
         1c:ca:e9:2f:73:f7:2d:cf:8a:4c:80:ea:2b:7a:99:95:ad:6b:
         c8:9f:86:61:95:60:09:22:8a:d0:aa:f6:19:3e:b0:d4:82:c0:
         bb:f2:9a:98:b6:41:9c:67:1e:d9:c2:e2:e3:e0:b7:70:23:32:
         da:85:26:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:29:58 2024 by rpki-client on console-fra.rpki-client.org