Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3c1943ae-d428-3b22-b844-011dccee15e7.roa
File:                     3c1943ae-d428-3b22-b844-011dccee15e7.roa (raw, json)
Hash identifier:          b21nT7QaquEWECNjq6NfKO5wmgVXfUrN1q3AsFuMTfM=
Subject key identifier:   B4:7F:C2:C9:B3:15:20:10:8D:F4:D3:E4:6B:9A:96:85:08:5A:D3:04
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F432858473B5D4B3CF62176033FD82380
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3c1943ae-d428-3b22-b844-011dccee15e7.roa
Signing time:             Sun 15 Sep 2024 12:00:00 +0000
ROA not before:           Sun 15 Sep 2024 12:00:00 +0000
ROA not after:            Fri 19 Dec 2025 05:00:00 +0000
asID:                     13335
IP address blocks:        2606:4700:4035::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3b:5d:4b:3c:f6:21:76:03:3f:d8:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Sep 15 12:00:00 2024 GMT
            Not After : Dec 19 05:00:00 2025 GMT
        Subject: CN=55d24790-dc51-4f69-a83b-ad464cdea215
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:09:a2:e0:c0:7c:85:74:3e:24:cc:fa:1e:90:
                    28:b5:c7:e3:15:f7:23:07:f6:f7:62:00:3e:f6:b2:
                    29:f6:69:ff:dc:c2:10:97:7f:5c:ec:d8:9c:51:46:
                    ec:f1:19:3e:2d:4b:9d:38:e7:f0:53:8c:0a:3d:17:
                    01:2c:fe:ba:77:4b:eb:37:44:dd:a9:09:2c:32:c6:
                    fa:d3:cf:69:47:38:6c:dd:d7:1e:cf:be:f7:87:ab:
                    f8:fb:be:2b:d0:3c:6c:f9:25:6e:79:aa:65:6f:80:
                    d0:4b:fb:8d:f5:a7:18:79:21:c8:16:5a:fa:80:c9:
                    d7:b8:28:02:ef:2e:1b:ea:04:89:28:91:9a:8d:ad:
                    de:1c:46:dc:79:28:14:85:3b:d5:34:8f:80:fb:40:
                    6e:88:3d:a8:91:ba:e2:9f:b9:fa:66:44:62:79:97:
                    5e:33:33:cd:f6:bd:ab:2d:23:65:cf:6e:95:a4:6d:
                    2e:78:2c:07:4e:d9:1e:f6:76:7f:8c:21:87:48:98:
                    cc:00:ea:1b:66:c0:20:c8:fa:97:91:79:4c:e0:0f:
                    33:bf:3f:6a:ad:08:8e:6a:68:84:f3:b7:5b:72:98:
                    3d:8f:17:59:b9:5d:86:5a:ae:3d:62:28:21:4a:d0:
                    97:80:ed:6e:7e:1c:ee:e2:ff:50:27:64:ce:75:76:
                    85:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:7F:C2:C9:B3:15:20:10:8D:F4:D3:E4:6B:9A:96:85:08:5A:D3:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3c1943ae-d428-3b22-b844-011dccee15e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4700:4035::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c8:4f:3b:11:ca:18:cf:b9:fc:fe:49:d5:29:76:61:df:3d:e2:
         7f:7e:11:d4:d1:a4:c4:0b:5e:6c:ef:bd:24:1b:e7:3b:ac:7a:
         f6:41:83:14:2d:9f:3a:c5:74:27:b4:f6:44:7b:48:c6:a2:87:
         9f:3e:66:06:a9:59:66:3a:82:ab:af:6b:84:a9:68:3e:bb:0c:
         d6:54:5d:91:83:9d:72:d6:62:15:87:72:e5:b1:c7:c5:21:c7:
         5b:05:43:8c:62:9a:41:c2:df:1a:35:a1:22:2d:99:56:d1:d2:
         bc:a2:ce:54:62:24:3c:38:f8:35:04:ab:f5:ae:b9:fe:2d:93:
         98:b1:cb:1e:39:35:13:a3:bb:eb:a2:1a:5e:87:4b:ee:0e:65:
         8b:9f:6e:0f:06:5e:82:f6:ff:41:78:84:f0:6d:e5:b1:d2:0e:
         ae:92:b7:e1:27:bf:0b:ed:50:db:4e:a4:96:a6:1a:c4:60:91:
         02:8f:6b:18:aa:9c:5b:58:0e:eb:8f:1c:53:06:6f:eb:a1:f9:
         f2:7f:ca:16:bf:94:15:d3:1e:d2:35:90:86:9c:45:d9:b8:20:
         9e:37:0f:94:c6:75:56:27:7a:36:3e:36:35:5a:fa:26:c4:fa:
         88:0d:11:e5:6b:ad:43:fb:aa:7b:a0:3c:0a:4f:a2:aa:1c:93:
         26:ce:a7:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:01:02 2024 by rpki-client on console-ams.rpki-client.org