Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/66671d8e-d946-3018-a32d-f3a3d3c928dc.roa
File:                     66671d8e-d946-3018-a32d-f3a3d3c928dc.roa (raw, json)
Hash identifier:          EqdGr33MRqzAV/zfyGSvQaamGPqCTREJgub99An1lG0=
Subject key identifier:   F6:40:1C:6C:59:3E:CB:8F:25:53:A4:FE:90:DD:5A:8D:A4:FD:1A:6B
Certificate issuer:       /CN=7bbee9b1-1b33-4951-a617-ecb80d9bad99
Certificate serial:       010D0C9F432858475A76439C517F9B0CB8651F00
Authority key identifier: 29:22:F7:E2:F2:74:93:2B:5F:CC:A4:03:B3:FC:52:65:E7:86:C2:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/66671d8e-d946-3018-a32d-f3a3d3c928dc.roa
Signing time:             Fri 27 Sep 2024 13:00:41 +0000
ROA not before:           Fri 27 Sep 2024 13:00:41 +0000
ROA not after:            Thu 26 Dec 2024 14:00:41 +0000
asID:                     14618
IP address blocks:        2607:9f40:35::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/7bbee9b1-1b33-4951-a617-ecb80d9bad99.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/7bbee9b1-1b33-4951-a617-ecb80d9bad99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5a:76:43:9c:51:7f:9b:0c:b8:65:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bbee9b1-1b33-4951-a617-ecb80d9bad99
        Validity
            Not Before: Sep 27 13:00:41 2024 GMT
            Not After : Dec 26 14:00:41 2024 GMT
        Subject: CN=14da7fd1-176c-4000-9dbc-ffa7839126e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:74:0d:a9:b4:d7:9f:0f:90:f3:ca:64:c0:50:
                    90:c9:0c:7a:5a:75:10:c2:e0:49:7c:09:4c:57:9c:
                    d6:95:3c:93:2c:53:ff:96:c5:08:75:39:ff:1c:19:
                    02:1c:d5:57:64:e1:74:fb:11:e8:05:fa:d4:c0:1f:
                    4a:e6:80:3b:ae:9b:2e:63:75:3a:09:87:72:ce:4f:
                    e6:e8:a5:57:47:a0:22:29:76:4d:54:26:fb:82:07:
                    30:11:ab:62:a0:a5:29:1b:fb:4d:2b:43:b6:ac:be:
                    ff:bd:a7:3e:af:6d:06:93:d4:f6:d0:f3:f2:76:f2:
                    da:f3:35:b4:c9:b5:3a:cd:20:a3:5f:2c:49:b2:95:
                    35:fd:00:01:bf:f1:e2:8c:a5:a2:7d:89:4c:ed:33:
                    32:9d:57:81:03:ab:b0:b2:a4:7c:c3:fd:2b:f0:37:
                    df:74:48:e5:a0:1d:e5:fd:e4:e5:8e:e0:ba:af:48:
                    28:68:53:53:1c:f4:3c:4a:77:a5:5e:2e:f5:3c:7e:
                    93:b8:0a:79:85:ab:f7:b0:1b:fa:f0:d4:e5:55:4d:
                    70:34:7d:37:c2:3b:c8:dd:c5:c2:b2:02:f5:3e:3b:
                    ac:e6:4b:54:08:c4:8f:58:f1:29:77:99:f8:2b:36:
                    7f:4d:d6:fa:50:52:53:ab:f7:1d:e5:6c:4c:11:ab:
                    96:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:40:1C:6C:59:3E:CB:8F:25:53:A4:FE:90:DD:5A:8D:A4:FD:1A:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/66671d8e-d946-3018-a32d-f3a3d3c928dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/7bbee9b1-1b33-4951-a617-ecb80d9bad99.crl

            X509v3 Authority Key Identifier:
                keyid:29:22:F7:E2:F2:74:93:2B:5F:CC:A4:03:B3:FC:52:65:E7:86:C2:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:9f40:35::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:46:d2:cf:36:7c:ef:75:24:59:77:8e:ca:2e:56:01:fd:92:
         f4:85:99:7c:ef:18:23:3a:0e:86:7a:ce:f3:29:9a:aa:a8:9f:
         2e:1d:a0:12:c2:91:5d:e3:a8:ce:50:2c:6f:15:06:c7:b0:0d:
         b3:7c:ee:a7:22:42:38:c9:3d:de:41:22:a6:0a:45:59:b0:6c:
         6a:78:df:2d:55:2c:ce:42:ee:16:81:4f:58:da:8c:01:18:95:
         24:e4:b9:95:56:53:4e:14:ac:ad:aa:b0:b7:c1:ad:7e:ec:24:
         80:35:ae:2f:12:7d:66:e8:4d:41:78:3f:08:c8:27:9b:10:32:
         b4:72:8f:e0:27:83:c9:38:d8:0c:5e:f2:cd:b2:19:75:50:fe:
         00:21:9d:50:95:f7:4e:fe:19:25:19:75:a5:cf:07:ae:22:5b:
         fd:e2:f8:0f:12:db:86:7f:e6:89:88:13:82:31:d4:15:54:fb:
         dd:d7:3f:e4:63:65:9d:91:4d:73:c0:08:0c:d8:73:52:9c:8f:
         ca:37:25:d4:4f:e9:2e:a8:db:e2:2b:7c:c9:e5:84:c9:ce:27:
         c1:c3:6d:61:92:9f:a8:44:ed:02:71:9b:6f:d8:8f:62:06:71:
         04:9b:52:6a:a6:7f:e3:a3:ea:6e:05:2b:0d:21:90:b5:b3:0e:
         a4:35:42:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:05:46 2024 by rpki-client on console-fra.rpki-client.org