Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/6a4d0d92-4c86-322c-919b-40f107affca4.roa
File:                     6a4d0d92-4c86-322c-919b-40f107affca4.roa (raw, json)
Hash identifier:          EDz9gCVUM8yuGp/Q9lNlS6Vg/IOwUN2S7mcfQV86ogg=
Subject key identifier:   AC:75:0A:6B:B6:F2:CB:61:D5:3B:49:CA:AA:8C:BB:3E:2B:AA:B9:1D
Certificate issuer:       /CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
Certificate serial:       010D0C9F43285847AB6C04297099CF4E0E48E8E8
Authority key identifier: 8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/6a4d0d92-4c86-322c-919b-40f107affca4.roa
Signing time:             Sat 26 Oct 2024 13:00:42 +0000
ROA not before:           Sat 26 Oct 2024 13:00:42 +0000
ROA not after:            Fri 24 Jan 2025 14:00:42 +0000
asID:                     140096
IP address blocks:        2604:d6c0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ab:6c:04:29:70:99:cf:4e:0e:48:e8:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
        Validity
            Not Before: Oct 26 13:00:42 2024 GMT
            Not After : Jan 24 14:00:42 2025 GMT
        Subject: CN=454aa15f-7e92-40e8-a242-271a36750f09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:69:a9:7f:aa:af:9e:59:84:9f:18:d8:40:3f:
                    90:da:7c:98:e8:0e:06:3b:f0:b8:b0:d2:ce:d3:46:
                    ce:48:53:eb:39:85:cd:88:1d:10:f1:4b:4b:04:85:
                    8c:7a:4f:1a:d0:32:0c:ad:2d:66:67:94:c3:33:c2:
                    d9:08:85:b4:07:17:37:3a:58:ab:95:fc:0e:dd:a6:
                    6c:37:d6:9f:a4:88:37:b1:1d:8b:e6:6c:55:ef:59:
                    1c:61:d3:82:ef:86:42:7e:97:98:18:e2:5f:5a:39:
                    0b:12:26:7f:06:38:1a:94:fa:f4:35:64:9b:d8:01:
                    d3:05:00:aa:34:1a:af:0e:c7:e0:89:d7:f0:68:90:
                    0b:7e:c4:60:ce:28:8a:b4:21:02:c3:d5:97:fa:10:
                    b6:41:ff:6a:3c:2b:bc:07:eb:18:b2:f7:63:d4:5b:
                    94:c3:cd:11:0e:ac:58:32:a0:fa:2b:a0:78:a7:4e:
                    8f:38:cb:f1:66:eb:a1:5f:56:e1:6c:53:91:f6:29:
                    90:aa:b6:ea:d0:0a:b4:99:be:36:5d:e8:6c:f3:e9:
                    ee:0f:ba:ae:29:8d:63:82:a9:06:ae:1f:ce:da:41:
                    34:f4:10:2b:57:e3:cf:e9:50:80:c6:1a:e6:13:23:
                    98:55:4a:06:a9:eb:94:e4:f9:b7:95:b2:4a:cd:07:
                    9b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:75:0A:6B:B6:F2:CB:61:D5:3B:49:CA:AA:8C:BB:3E:2B:AA:B9:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/6a4d0d92-4c86-322c-919b-40f107affca4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl

            X509v3 Authority Key Identifier:
                keyid:8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:d6c0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:b3:7b:b7:66:b4:d6:83:0a:5e:9f:77:d3:3b:35:8a:b9:90:
         d2:f5:d7:a2:45:3c:a3:af:39:b7:90:bd:3f:8c:de:21:ff:ea:
         5f:9a:6b:42:55:0b:bc:96:73:d9:d7:c6:1a:cf:af:6f:b8:85:
         57:f7:85:0b:f1:bd:c0:d5:22:10:9e:d9:55:5a:6c:bd:4e:91:
         6f:66:92:24:de:49:b4:61:fb:8d:8e:78:78:78:c9:8c:01:26:
         f1:e8:ae:c6:a0:61:c3:86:43:08:58:73:15:7b:1a:67:e4:e5:
         03:94:49:d8:54:cf:ca:99:fc:82:e0:f6:aa:c7:21:01:13:07:
         02:7a:c5:70:b0:e8:22:74:7e:8d:8e:06:2c:5b:cc:fb:e7:fe:
         3c:8e:ca:92:93:81:46:9e:d8:e8:c1:25:a8:94:99:28:e2:50:
         f2:e5:1f:4e:39:92:c5:e8:5b:88:b8:90:5f:06:64:be:ba:26:
         50:d0:ea:28:8b:f5:44:2d:6c:8a:51:f8:93:c9:a6:54:03:e7:
         80:aa:e1:f3:e8:98:ee:a5:c9:63:6d:e3:c5:6d:9d:7b:f0:aa:
         fc:12:8d:0b:eb:ca:b0:24:27:ec:94:b1:52:2d:53:8a:18:99:
         61:b5:94:aa:53:cd:05:2b:88:e9:31:70:16:ca:70:61:e8:2c:
         e4:bc:10:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 01:26:37 2024 by rpki-client on console-ams.rpki-client.org