Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/e6309d19-9dce-3fc2-b5e3-fab65c32657f.roa
File:                     e6309d19-9dce-3fc2-b5e3-fab65c32657f.roa (raw, json)
Hash identifier:          Uya66T4rz0h3xJjRSwd5D3jqaZwpnx0gNotOVwepRYc=
Subject key identifier:   AF:23:F0:B4:2D:04:C3:48:4E:71:50:F0:90:4F:B1:56:1B:CE:54:D1
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F432858472405CAC9C5687CFC70604F00
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/e6309d19-9dce-3fc2-b5e3-fab65c32657f.roa
Signing time:             Sun 08 Sep 2024 01:00:31 +0000
ROA not before:           Sun 08 Sep 2024 01:00:31 +0000
ROA not after:            Sat 07 Dec 2024 02:00:31 +0000
asID:                     11537
IP address blocks:        2001:468:ef01::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:24:05:ca:c9:c5:68:7c:fc:70:60:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Sep  8 01:00:31 2024 GMT
            Not After : Dec  7 02:00:31 2024 GMT
        Subject: CN=3cbf5fe6-74ba-43f8-88f7-ee3ab28ea5aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:07:e7:9e:7f:76:62:bc:51:1f:40:9e:cb:ef:
                    6a:70:80:25:ec:f7:c7:4a:03:9e:ea:b4:5e:13:25:
                    91:2c:1c:93:b7:d7:59:03:c1:ed:e9:58:c2:68:c4:
                    29:19:3e:33:20:9a:58:1f:ec:fc:54:6c:20:50:72:
                    ec:d6:db:cd:89:da:86:c4:2c:df:56:c4:1c:97:25:
                    28:70:dc:a8:ef:de:e4:e4:90:41:73:95:5a:5b:ca:
                    c0:92:66:76:b8:e1:e9:5b:84:51:35:f6:a7:8b:c1:
                    d8:14:32:6f:98:63:4a:fe:4f:1e:1e:57:6d:1d:43:
                    99:46:c2:de:dc:bd:73:f6:a6:5d:54:08:ee:f7:e7:
                    39:1e:94:35:c2:26:26:65:10:20:66:d4:3f:0c:e5:
                    b3:ab:25:b0:e0:39:a7:35:41:bd:dc:59:d7:33:44:
                    79:14:c4:5f:89:55:8e:bc:24:76:7a:98:0e:eb:44:
                    f0:57:ea:24:d1:7c:52:a5:0d:11:0d:a1:e0:1b:bb:
                    0b:dc:0c:3c:6f:89:6f:11:9f:ba:82:63:d9:c0:eb:
                    d3:41:cb:19:2d:1c:cb:e3:93:33:fd:77:0e:c6:36:
                    48:a7:df:4c:4b:16:e9:06:2c:86:84:2a:fb:05:74:
                    75:7b:cd:cc:72:32:ea:01:66:51:bf:0e:6a:98:ec:
                    56:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:23:F0:B4:2D:04:C3:48:4E:71:50:F0:90:4F:B1:56:1B:CE:54:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/e6309d19-9dce-3fc2-b5e3-fab65c32657f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:468:ef01::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:08:b7:de:e4:24:99:f1:5a:24:fe:f8:7e:48:95:25:4d:a4:
         9a:0f:e5:e0:c6:35:97:f9:96:38:bd:6e:3e:c9:b1:af:d3:7a:
         d8:0e:00:a3:5f:9a:79:0b:fe:c6:39:56:30:45:5f:d5:09:8a:
         b1:d0:18:82:52:00:59:b7:bf:98:c8:5b:33:be:fb:60:9f:7c:
         2a:c9:a6:44:f8:3f:f8:9b:b0:6f:f5:20:1b:40:9f:cf:5d:7a:
         a9:49:ca:bd:39:cc:5e:d9:ce:73:20:b6:b3:5d:74:60:a0:02:
         63:55:9f:53:70:bc:c0:3f:e9:35:6c:8d:8a:34:7a:e3:24:1a:
         33:c8:88:ee:01:87:61:86:fb:ab:a7:ac:3b:61:00:9d:83:f4:
         10:3e:34:bc:53:16:1f:e2:7a:9e:8d:ad:cd:57:6e:4a:26:75:
         78:e7:84:08:cb:c6:5b:f0:e1:7e:1c:b1:81:fb:a8:ce:b8:b9:
         e7:54:d6:30:53:00:83:d9:d8:47:b4:0c:80:f9:86:42:ee:96:
         7c:85:1c:37:6b:e2:0d:43:1e:e1:c8:db:d1:81:b5:9a:b7:c8:
         eb:8c:b5:78:20:57:77:4b:d9:7f:26:1f:29:0b:8e:f7:8e:ca:
         f6:d0:4a:97:5b:dd:3f:f8:c3:58:d7:e9:c5:ed:6b:f8:bc:cf:
         a2:a7:f5:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:20:06 2024 by rpki-client on console-fra.rpki-client.org