Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/61971812-78c9-30bb-a30b-5e5b1ca3855d.roa
File:                     61971812-78c9-30bb-a30b-5e5b1ca3855d.roa (raw, json)
Hash identifier:          mMA+bv0/j/myLSRmHP2eeXBH61D6ipq8xOGGevrKIXQ=
Subject key identifier:   F2:84:73:A0:A4:0F:FC:4D:BD:AC:20:C0:FF:6D:D2:27:79:B6:B4:5A
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F43285847F2BA3071CF50A444CBABF200
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/61971812-78c9-30bb-a30b-5e5b1ca3855d.roa
Signing time:             Thu 21 Nov 2024 02:00:38 +0000
ROA not before:           Thu 21 Nov 2024 02:00:38 +0000
ROA not after:            Wed 19 Feb 2025 02:00:38 +0000
asID:                     62651
IP address blocks:        2604:c980:400::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f2:ba:30:71:cf:50:a4:44:cb:ab:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Nov 21 02:00:38 2024 GMT
            Not After : Feb 19 02:00:38 2025 GMT
        Subject: CN=9a73fdca-1272-4236-ad98-71fbe68ff6cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:42:c0:22:aa:f0:2b:e1:05:84:e0:02:f9:b1:
                    a8:6f:c7:e5:c0:cf:25:ad:fd:6f:c7:9b:77:b2:b7:
                    65:de:66:4b:6f:71:8b:e1:83:5b:3c:a2:43:b0:cb:
                    50:50:f9:0d:1f:f8:69:6b:7f:ed:85:f7:38:d0:1e:
                    5d:f6:f4:08:8b:25:4b:45:ef:34:de:81:e2:37:cb:
                    e6:d0:95:68:25:a7:a4:31:8f:df:9b:0c:e1:59:61:
                    59:95:5d:37:5c:1a:8b:70:65:a0:90:f7:e8:55:a4:
                    2e:ef:b6:ed:9e:9c:5d:20:97:bc:af:7b:f8:c8:a5:
                    13:7e:b6:79:ca:0d:8b:06:5b:cb:0d:58:d3:4f:b2:
                    3a:ca:f2:ec:40:b4:35:5b:ef:f2:3f:cf:bd:5a:01:
                    1c:1b:88:96:4d:ac:a4:2b:24:dc:5d:a8:63:e3:00:
                    3c:18:b6:92:63:dc:80:d7:5b:d3:44:7b:8c:a8:3f:
                    d1:59:53:78:78:d3:a0:24:b1:f8:56:6c:3b:ba:58:
                    a3:22:5f:bf:09:08:64:a4:fd:61:8e:08:2a:54:71:
                    52:9a:04:33:96:f6:f0:fc:4a:63:bf:5c:aa:46:c5:
                    21:70:b9:d1:ef:98:5b:a5:ed:fb:6c:17:76:f9:05:
                    93:7a:07:08:08:f6:a6:05:36:98:80:20:66:c3:98:
                    1b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:84:73:A0:A4:0F:FC:4D:BD:AC:20:C0:FF:6D:D2:27:79:B6:B4:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/61971812-78c9-30bb-a30b-5e5b1ca3855d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:c980:400::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:5a:6d:ec:2b:b1:1c:0e:a4:0f:44:f0:62:02:38:f7:ac:d3:
         4f:63:81:2d:b2:fc:8d:7a:51:7c:72:92:ef:70:94:e3:9d:d1:
         85:06:f0:79:a2:b5:da:55:78:b8:36:3f:9a:6a:41:cd:d9:c8:
         6a:92:61:09:ee:98:d0:62:92:1a:59:7e:e3:9b:d9:f1:1b:80:
         a3:88:28:21:9a:7f:75:53:0c:c1:f8:b0:85:7e:0e:50:d2:59:
         c3:41:f9:1f:85:87:c2:1e:e9:e3:01:ea:e8:d9:7a:36:df:43:
         02:e4:16:c9:29:fb:af:fa:8a:09:34:0b:8c:1a:24:ef:e7:be:
         df:c7:f3:ba:11:81:6e:b7:fc:39:e6:71:ae:39:5a:d9:56:0f:
         3d:89:22:7e:4f:d7:82:b4:40:c6:36:58:e1:ad:8b:c0:d0:d4:
         01:22:f6:1a:4e:85:c6:ca:5f:b5:c8:80:1e:88:34:7f:40:b1:
         fb:2c:43:14:6b:66:2a:96:03:8d:9a:03:f3:cb:7d:36:dd:f8:
         5e:f3:da:81:0c:93:a5:c5:4e:c5:eb:1c:f3:9a:95:07:31:ed:
         0b:f5:6c:60:93:44:9f:4d:83:b2:ba:45:93:10:ac:77:84:0f:
         f4:c6:c4:7b:a4:00:38:33:7a:0a:d2:ee:17:24:d9:cf:1e:bb:
         40:5f:66:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:39:37 2024 by rpki-client on console-fra.rpki-client.org