Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/59868dd4-926e-3375-9d22-50a333a593f8.roa
File:                     59868dd4-926e-3375-9d22-50a333a593f8.roa (raw, json)
Hash identifier:          3LT9dcMUjbt9NAAnQo+bvldWN4wFebY7fPCE0pmM2Bo=
Subject key identifier:   17:07:2A:AC:AE:3B:DB:AD:01:E8:87:3E:D9:1E:D2:09:6C:83:26:DD
Certificate issuer:       /CN=7bbee9b1-1b33-4951-a617-ecb80d9bad99
Certificate serial:       010D0C9F432858475A76435DF5FBAE8FAE17B600
Authority key identifier: 29:22:F7:E2:F2:74:93:2B:5F:CC:A4:03:B3:FC:52:65:E7:86:C2:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/59868dd4-926e-3375-9d22-50a333a593f8.roa
Signing time:             Fri 27 Sep 2024 13:00:41 +0000
ROA not before:           Fri 27 Sep 2024 13:00:41 +0000
ROA not after:            Thu 26 Dec 2024 14:00:41 +0000
asID:                     16509
IP address blocks:        2607:9f40:69::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/7bbee9b1-1b33-4951-a617-ecb80d9bad99.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/7bbee9b1-1b33-4951-a617-ecb80d9bad99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5a:76:43:5d:f5:fb:ae:8f:ae:17:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bbee9b1-1b33-4951-a617-ecb80d9bad99
        Validity
            Not Before: Sep 27 13:00:41 2024 GMT
            Not After : Dec 26 14:00:41 2024 GMT
        Subject: CN=ea7b2f47-5419-4fdc-9599-41f8334819c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:0f:19:11:60:88:83:c7:a1:4e:7e:5d:94:9f:
                    79:3b:7d:b2:7c:06:df:a4:33:de:9c:cf:52:60:cc:
                    c3:ae:33:4c:d0:d9:ca:8a:bf:24:ad:1f:d9:00:b8:
                    76:e6:15:c8:0e:1d:32:fc:17:a5:70:33:98:fb:5f:
                    5f:3c:0d:dc:09:20:35:84:94:ab:f8:cd:40:07:65:
                    71:80:24:85:c3:be:26:76:83:10:a3:ec:1b:4a:b5:
                    a8:2e:fb:7c:33:36:80:62:d7:c6:d2:b4:df:6f:cb:
                    cd:34:d6:0e:d6:59:b6:12:79:f0:5a:4f:16:71:c9:
                    a9:8f:9f:94:85:84:f1:bc:65:32:51:b7:74:e6:32:
                    cf:a0:0f:f9:b7:69:97:68:50:5e:c2:7b:58:25:5d:
                    d2:7e:8e:95:a5:1e:7c:cd:5f:ca:d0:ad:ad:d5:57:
                    4f:a7:02:82:43:9f:26:f9:c8:1e:69:f3:f6:88:fe:
                    81:97:f3:cc:89:7f:32:bd:19:72:2a:31:82:76:77:
                    7f:80:92:7f:94:59:e3:a7:16:14:52:71:ab:65:7b:
                    32:81:78:f9:fc:dd:71:4d:d8:7b:50:92:52:6a:78:
                    8d:a3:fb:6b:6d:dc:0b:9f:a1:3f:64:41:61:87:4b:
                    1a:b4:40:02:b4:9f:a2:21:72:f4:1b:72:13:03:1e:
                    c6:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:07:2A:AC:AE:3B:DB:AD:01:E8:87:3E:D9:1E:D2:09:6C:83:26:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/59868dd4-926e-3375-9d22-50a333a593f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/7bbee9b1-1b33-4951-a617-ecb80d9bad99.crl

            X509v3 Authority Key Identifier:
                keyid:29:22:F7:E2:F2:74:93:2B:5F:CC:A4:03:B3:FC:52:65:E7:86:C2:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:9f40:69::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:07:99:de:78:11:1e:d8:15:a6:45:f7:e5:8e:20:a1:28:f9:
         43:00:d3:bd:19:90:7b:38:90:1b:7f:b3:75:e1:ff:70:72:ce:
         f9:7a:1f:bb:71:78:dc:58:c9:5e:d9:73:35:36:ab:d7:79:cc:
         0f:a5:e6:e2:82:94:25:35:46:d9:22:a2:81:fd:7b:d7:5a:ae:
         00:2f:df:d7:eb:45:1f:55:61:3b:b1:b4:07:aa:b3:91:5c:3c:
         71:12:82:a5:e4:a9:05:b0:9e:13:2a:94:ea:17:34:03:49:6b:
         e5:06:97:cb:08:e4:ab:1c:6a:08:07:b6:8d:8f:94:89:24:e0:
         2e:1c:8c:d7:1c:19:74:fb:f7:28:cd:12:0f:c5:5a:7f:b1:e7:
         d1:e0:fa:5a:05:60:f5:0a:e0:38:0c:7e:c9:c4:5d:b6:fb:88:
         56:93:09:4a:5d:35:10:f8:82:5a:31:32:d0:25:b3:1b:dd:3f:
         9f:4f:0b:15:be:1d:5f:0c:9d:31:64:99:8f:b1:b0:ca:84:25:
         96:a3:8d:fa:fc:f2:fc:a3:9c:c8:6b:38:55:ae:81:02:4f:69:
         ed:0a:9e:4d:ef:2e:a8:18:81:34:fb:a0:95:bf:58:2e:ec:9c:
         dc:db:f9:31:24:2e:21:f2:51:6f:23:5f:9b:e7:33:f1:ba:09:
         d1:81:93:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 20:58:40 2024 by rpki-client on console-fra.rpki-client.org