Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/42446862-1602-3fe1-8bf3-b4a41f6898f6.roa
File:                     42446862-1602-3fe1-8bf3-b4a41f6898f6.roa (raw, json)
Hash identifier:          ZCBaTQJPM4txpuaMwextRr4fUbrnEU6x1h8Jh0GG9po=
Subject key identifier:   45:2F:25:15:DD:1D:82:7C:5F:BC:BB:C3:81:09:8B:61:30:DD:8B:3F
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F43285847DDCA0C006E0E6A4A39BA1DC0
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/42446862-1602-3fe1-8bf3-b4a41f6898f6.roa
Signing time:             Wed 13 Nov 2024 14:00:39 +0000
ROA not before:           Wed 13 Nov 2024 14:00:39 +0000
ROA not after:            Tue 11 Feb 2025 14:00:39 +0000
asID:                     54138
IP address blocks:        2604:c980:2400::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:dd:ca:0c:00:6e:0e:6a:4a:39:ba:1d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Nov 13 14:00:39 2024 GMT
            Not After : Feb 11 14:00:39 2025 GMT
        Subject: CN=6a30c8d7-dc4b-46c4-b6da-0522ed85b7b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d1:64:3f:ec:d5:f8:b7:05:99:e4:37:3b:00:
                    3a:f1:02:36:6e:41:64:00:b8:b5:38:ab:21:06:71:
                    5a:ed:a2:5f:b2:8d:86:75:2b:6a:45:b7:9e:23:89:
                    c0:bd:3e:7f:99:8b:40:b3:e9:94:59:73:02:5a:8d:
                    dc:d4:49:bc:4b:e3:02:17:e5:51:e4:11:e9:63:05:
                    d7:74:57:85:c2:69:89:5e:3d:38:c5:c8:e7:90:49:
                    f0:4c:b0:e2:25:b7:4c:82:4b:ef:61:b5:5c:86:12:
                    f0:e1:87:50:0a:ee:5a:c8:7b:bb:a4:fe:00:4d:1f:
                    5d:6a:c0:6e:48:cc:4c:f3:55:56:84:ba:ff:b4:18:
                    a6:f2:f7:85:eb:c3:44:18:ae:fa:84:b9:1e:0f:31:
                    74:e3:c7:96:22:e3:6c:24:14:5f:3d:d8:ee:08:02:
                    0e:fa:dd:ee:ee:90:bc:ba:7f:41:1a:32:70:34:1c:
                    90:95:f2:55:76:63:5e:1f:af:76:8f:0b:fa:ae:d8:
                    c7:52:72:b4:2f:6b:b7:79:62:e5:d3:24:e8:cd:fe:
                    18:bd:db:22:66:a4:8d:8a:a5:33:be:24:04:3f:97:
                    a3:da:df:06:b9:ce:ba:4e:0e:d8:13:1b:18:f6:aa:
                    eb:30:f7:b9:fa:23:91:30:52:46:d9:be:0e:91:5d:
                    54:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:2F:25:15:DD:1D:82:7C:5F:BC:BB:C3:81:09:8B:61:30:DD:8B:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/42446862-1602-3fe1-8bf3-b4a41f6898f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:c980:2400::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:06:94:ec:d3:81:79:c6:79:d8:ba:98:bc:5e:f2:23:bf:9d:
         7d:76:c6:5c:fd:99:2b:2a:8b:dd:44:df:3e:b4:ff:c1:54:49:
         e1:57:7f:f0:c9:7f:26:63:97:c9:d4:0c:12:ce:78:7c:e4:20:
         dd:ca:09:a7:53:0b:df:db:b5:e7:c7:0f:80:53:a6:f3:5c:bc:
         c7:62:63:e3:5e:a9:06:eb:71:87:e6:1d:8b:d2:ed:8b:27:78:
         24:c2:c8:5c:5b:d6:96:a7:44:49:96:f9:a7:b9:ac:74:8f:89:
         a2:27:75:6b:82:b9:50:dd:60:41:b3:c9:d5:a2:60:e0:76:f0:
         e9:85:dd:a5:75:f4:cd:1d:f2:5b:c8:28:1b:ba:fa:82:55:9f:
         d3:22:9b:37:36:eb:df:64:94:08:c4:54:26:50:10:15:3d:5c:
         6c:ac:19:b0:e6:23:99:78:85:87:bf:5e:5c:33:bb:0e:ce:a0:
         01:86:5a:9e:d3:08:5e:ed:fb:44:21:79:7e:08:15:1a:55:0a:
         bb:e5:84:54:94:a5:64:10:f0:e9:56:ef:9f:a7:60:a8:b7:42:
         10:c9:0f:30:34:83:bc:37:cf:81:31:29:d7:24:fb:7b:92:8b:
         dc:ad:6c:45:74:c6:c7:14:6a:3b:6e:14:27:ae:1c:35:b0:e9:
         ec:75:53:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:35:19 2024 by rpki-client on console-ams.rpki-client.org