Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0be9cc58-6678-3921-aec5-884cb4c2f0e0.roa
File:                     0be9cc58-6678-3921-aec5-884cb4c2f0e0.roa (raw, json)
Hash identifier:          nFZd4e1DtVlmhASo26UP8jgzfkcFjEsy3m0ipUzREuI=
Subject key identifier:   EA:21:20:5E:26:B2:EA:5C:3C:32:BA:B3:DE:10:B4:BB:30:C2:6D:1A
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F4328584722A072D57518C5A9026A7480
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0be9cc58-6678-3921-aec5-884cb4c2f0e0.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     9009
IP address blocks:        2604:c980:2800::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a0:72:d5:75:18:c5:a9:02:6a:74:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=5b37d3ef-b62a-41b0-b813-0a37d296dad7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1b:b9:03:06:0c:ee:05:48:60:df:7a:6d:81:
                    b5:a1:fd:c9:ac:2c:d2:23:e8:84:20:6d:0b:ae:e9:
                    6c:e7:38:70:00:a7:2b:31:84:d3:0b:d5:b8:5b:9f:
                    b5:d4:f8:7e:1c:99:9b:94:0c:a3:f5:2a:17:64:08:
                    27:a0:ee:d3:d6:d9:ca:af:9a:15:95:6b:3a:70:1f:
                    d6:80:db:6a:0c:eb:74:bf:11:f8:64:c7:91:0c:d7:
                    27:05:64:d0:7b:b2:6c:89:72:9c:2b:c1:51:54:a1:
                    a3:05:d4:06:57:4e:4b:0d:c5:00:60:92:29:1c:aa:
                    65:8e:26:2d:65:c5:80:35:dc:c9:ab:7e:a3:4a:84:
                    3b:d9:27:42:1e:06:89:e0:06:50:ca:2b:c8:39:e7:
                    16:7b:c5:75:e7:0d:59:1d:b3:82:e0:5b:e5:6b:fd:
                    ee:02:59:19:d5:bf:4e:25:92:9e:ba:3a:44:48:d5:
                    85:f0:47:48:f1:9d:79:70:e1:55:e1:ff:b6:b3:57:
                    1d:39:42:6f:41:0d:69:6c:69:ec:c8:9b:f9:cc:37:
                    bc:16:58:9b:ac:5c:94:a8:31:c6:21:5f:a9:78:41:
                    a1:0b:0e:97:57:bb:51:3d:9b:a5:2f:43:71:08:8f:
                    a0:13:ae:13:63:59:e4:cc:8c:f5:75:64:a1:1d:26:
                    95:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:21:20:5E:26:B2:EA:5C:3C:32:BA:B3:DE:10:B4:BB:30:C2:6D:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0be9cc58-6678-3921-aec5-884cb4c2f0e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:c980:2800::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:e0:0f:1b:4a:a7:49:98:11:6c:3f:e1:3b:0e:70:db:4a:e8:
         05:3e:d1:8e:dd:82:2e:1d:e7:8f:4a:30:53:98:fd:7b:6c:11:
         cc:e4:86:1d:70:b2:33:3e:c9:91:20:b6:f3:87:6d:20:1f:93:
         b7:30:09:09:9a:ea:38:dd:df:c6:dc:87:9f:5f:19:4d:a3:f2:
         b9:ca:a5:61:e7:42:75:f8:e4:ad:81:e8:18:fc:19:7c:fb:e5:
         ab:ba:0e:92:5c:f7:af:9f:1e:cc:48:68:ed:99:f8:47:a0:45:
         74:8e:97:c8:bf:6f:1d:25:8f:fd:f6:73:67:35:cf:e9:e4:33:
         d6:f2:dc:0d:66:b2:de:e6:14:c0:19:45:9c:2b:07:19:d7:3e:
         b9:e9:d9:43:91:c5:01:f8:2d:a2:a4:e5:e6:3f:9e:2b:f4:88:
         a4:34:60:1d:9a:9b:fd:d5:63:47:d1:6f:c7:22:51:5f:0f:03:
         8f:9d:65:92:32:da:fb:93:07:a6:28:d3:e0:d5:45:a7:8c:ae:
         40:38:7a:35:43:79:4a:ee:92:02:b6:c5:09:d6:9e:b8:b6:1e:
         a1:7d:b5:f3:83:32:ef:a3:ba:2d:4c:db:8a:0b:cd:95:c1:75:
         d4:40:e2:1e:24:7e:0a:05:27:9c:f4:06:0a:a7:72:ec:c8:56:
         8e:9f:29:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:31:29 2024 by rpki-client on console-fra.rpki-client.org