Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/5fa88a4f-d46f-3b7c-b32c-5ad7078b3c5b.roa
File:                     5fa88a4f-d46f-3b7c-b32c-5ad7078b3c5b.roa (raw, json)
Hash identifier:          jrAq8YjBmhmxJrCB4mfO9+lETeweNWkDXkGvDtigj3M=
Subject key identifier:   9F:14:98:77:6B:44:3B:08:00:EC:2A:4D:5E:EC:19:6D:28:D5:94:ED
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F43285847A4156E078DE7D83477DCFF00
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/5fa88a4f-d46f-3b7c-b32c-5ad7078b3c5b.roa
Signing time:             Wed 23 Oct 2024 21:55:42 +0000
ROA not before:           Wed 23 Oct 2024 21:55:42 +0000
ROA not after:            Tue 21 Jan 2025 22:55:42 +0000
asID:                     62651
IP address blocks:        2604:ea80:3000::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a4:15:6e:07:8d:e7:d8:34:77:dc:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Oct 23 21:55:42 2024 GMT
            Not After : Jan 21 22:55:42 2025 GMT
        Subject: CN=f81bb3a5-2296-41f8-9168-ef8ba3aa5ba5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:c1:5f:56:2a:7e:f3:69:3b:00:3f:e1:df:78:
                    8f:87:28:f2:36:ab:5b:be:3b:61:7b:a4:be:68:60:
                    68:fd:fb:20:3b:17:12:d4:b7:e3:0b:49:a1:b3:09:
                    c0:e1:e6:0f:e5:d2:83:d5:2f:c1:d9:5c:4c:e2:da:
                    ca:47:e1:f0:75:48:0e:98:25:9e:42:01:49:4e:11:
                    c3:2f:77:ea:7f:12:59:5f:e0:fb:a4:95:42:f3:65:
                    33:e4:11:eb:46:8f:e6:86:0a:0a:34:94:19:be:22:
                    de:32:26:b3:36:b9:9a:ff:8a:e5:24:b8:81:3a:80:
                    1c:12:5a:c9:4a:83:82:cc:ec:9d:ad:16:02:fb:98:
                    c2:d8:71:0d:7f:0b:80:be:cb:a6:21:87:31:aa:b2:
                    09:af:8a:42:7d:85:7c:da:30:46:f6:97:04:53:5b:
                    0c:12:ed:03:02:78:9c:a4:0f:c7:1b:9b:8f:2f:c9:
                    93:23:66:45:0a:9c:25:aa:09:a2:5c:dc:bd:1d:98:
                    24:36:1a:ad:3f:e8:14:af:3e:be:db:68:29:32:ca:
                    20:26:58:09:7d:8d:f5:c9:d8:84:e6:ee:71:4a:0e:
                    10:e5:3d:b3:7f:54:d1:7b:34:c6:93:09:ab:5f:56:
                    7d:bd:ee:09:9b:57:75:32:55:41:57:29:87:b4:89:
                    26:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:14:98:77:6B:44:3B:08:00:EC:2A:4D:5E:EC:19:6D:28:D5:94:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/5fa88a4f-d46f-3b7c-b32c-5ad7078b3c5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:ea80:3000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:9f:d5:3b:86:d5:36:af:ed:a9:0d:cf:d0:ef:1a:58:74:f0:
         31:6f:ed:6f:63:b5:b1:19:07:9e:7a:65:7b:2a:54:df:19:16:
         91:7c:a0:94:d0:2e:94:6c:55:e2:02:7f:9f:98:91:08:73:d9:
         96:3e:3f:b0:d4:bc:13:48:ea:19:1f:7c:ad:ed:a7:e8:9d:68:
         0a:d7:58:50:b9:04:41:be:bd:b2:03:e9:a2:c4:67:cf:68:c1:
         d2:86:2e:15:4e:1a:d2:12:f7:38:35:ef:cb:b7:e2:f2:f1:04:
         fc:b2:2b:6c:a7:75:20:16:20:b8:38:83:da:9f:1b:75:17:89:
         0c:e2:60:4f:a0:2a:20:bf:45:9a:08:c1:94:e6:59:f6:a3:76:
         2f:f9:47:8c:e0:d3:d7:cf:04:ea:a7:2d:4a:80:c9:bc:cf:2e:
         e4:8b:ea:6d:01:d6:0d:8d:2c:89:0c:34:77:ac:4c:4d:c9:14:
         87:f1:13:da:8b:1f:ec:83:97:08:3b:a2:38:c2:49:bf:a6:b8:
         1b:cd:ad:55:8c:49:f6:91:71:29:75:68:08:76:bd:0b:1b:84:
         f2:6a:13:52:bc:3a:cf:ba:43:a6:99:b7:69:a9:e4:39:3b:1b:
         89:05:1b:70:db:b8:b9:99:68:00:13:f0:97:17:d3:36:5f:90:
         d7:9c:ef:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:39:37 2024 by rpki-client on console-fra.rpki-client.org