Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ad2a7143-8e7e-3ae3-996f-e6e8f2f8a115.roa
File:                     ad2a7143-8e7e-3ae3-996f-e6e8f2f8a115.roa (raw, json)
Hash identifier:          aHJqWDoXrqt8vx+IkubeNlBOAMI09PyqaawbAxv5ZzA=
Subject key identifier:   74:C0:00:DB:9C:67:BE:DA:84:A3:BF:80:0C:04:CB:27:CB:71:27:6D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584731FB3F6E203CAD55616A2F80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ad2a7143-8e7e-3ae3-996f-e6e8f2f8a115.roa
Signing time:             Fri 13 Sep 2024 01:00:32 +0000
ROA not before:           Fri 13 Sep 2024 01:00:32 +0000
ROA not after:            Thu 12 Dec 2024 02:00:32 +0000
asID:                     7016
IP address blocks:        2603:2986:8000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:31:fb:3f:6e:20:3c:ad:55:61:6a:2f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 13 01:00:32 2024 GMT
            Not After : Dec 12 02:00:32 2024 GMT
        Subject: CN=ce5a66c4-7081-49e7-984d-cd6e7e23e5e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ea:4c:99:31:29:c9:ec:ca:86:81:ab:eb:63:
                    ee:4b:b9:6c:53:3b:35:65:ba:78:e2:39:e2:f3:fe:
                    5b:9a:3c:2a:10:75:26:e5:d1:cd:0b:a6:c4:57:2f:
                    4a:1b:76:ec:d9:d8:4b:30:9e:f5:d7:2b:05:7f:4c:
                    64:96:87:99:b2:4e:39:e7:30:cf:8f:36:85:d7:a7:
                    76:15:d4:e3:45:27:6a:7d:10:47:fd:4a:cf:d6:02:
                    d3:0e:19:94:61:e1:f2:77:b4:79:eb:64:24:34:46:
                    1f:45:e3:46:37:fc:9a:7f:75:c2:c0:eb:1c:66:61:
                    40:8b:e9:e1:4b:13:7f:e6:72:26:d9:e6:16:85:5c:
                    dd:a2:46:db:06:81:e4:60:79:92:2e:eb:15:47:89:
                    de:95:b6:97:e3:af:02:a0:97:dc:73:41:32:5b:f3:
                    3e:af:5d:df:4b:85:11:15:78:5d:7e:6f:98:e4:85:
                    34:0e:44:c2:00:8c:fc:2a:f5:3d:13:f5:0a:ce:31:
                    73:9c:dd:b5:8a:47:59:e7:f1:6e:9e:4d:39:52:f2:
                    80:5d:5c:2f:d1:da:a1:d2:0a:df:d4:2c:cf:53:fc:
                    92:01:46:e8:fb:5a:8e:34:cb:48:ba:ca:75:39:7c:
                    0b:32:13:8d:31:c8:6f:8a:0e:61:e6:be:24:b8:49:
                    29:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:C0:00:DB:9C:67:BE:DA:84:A3:BF:80:0C:04:CB:27:CB:71:27:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ad2a7143-8e7e-3ae3-996f-e6e8f2f8a115.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:2986:8000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:fa:c8:f4:7f:a5:e3:19:bf:d0:70:19:a1:1a:2d:64:74:65:
         fe:1e:8e:3d:8d:64:c6:3a:53:72:65:a5:bb:f4:16:83:ae:ff:
         e3:8e:18:29:78:55:2b:60:2b:6a:57:76:e3:85:89:de:a8:84:
         bb:4a:33:c2:7e:f3:f8:76:25:7d:94:2b:f2:ea:5a:e7:3e:d2:
         3d:80:dc:5c:39:7c:d9:50:22:a3:45:db:f7:44:b9:cf:34:dd:
         13:e0:bc:c7:d6:ee:84:ed:1a:dd:7a:90:18:c2:63:65:52:1b:
         68:39:b1:1a:a1:24:12:46:b8:fa:31:91:77:c8:d0:4b:5f:05:
         56:cd:5d:d6:ca:cf:16:08:ac:50:d7:4c:39:b3:cf:d3:98:11:
         b3:e3:e3:43:8c:9e:9d:30:22:aa:15:2b:e8:71:f2:a2:8e:52:
         d5:ce:c1:c5:c1:18:8e:43:e6:db:95:40:74:a6:40:5a:18:ba:
         da:f5:ed:ee:07:ad:d0:bc:ba:fa:27:a7:d8:8b:4d:da:88:ef:
         b4:b7:aa:4a:e2:3a:ae:2d:1e:3a:3b:18:a2:77:fa:2b:12:ee:
         e9:05:93:41:6c:2c:90:86:62:72:d2:23:cf:20:2f:be:fa:87:
         a5:bb:a9:6b:93:68:b8:bc:7e:ee:4e:65:a4:6e:a5:66:93:86:
         58:18:c2:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 05:11:08 2024 by rpki-client on console-ams.rpki-client.org