Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e780065-6b4a-42e5-ba6a-2cc340001aa7/fe8a86c7-fcf2-3d23-9999-54a57a7229b2.roa
File:                     fe8a86c7-fcf2-3d23-9999-54a57a7229b2.roa (raw, json)
Hash identifier:          M9bSI7L/J20zbKJ9raa+89Y9QcGx1H4ZfFQNz6bxvTk=
Subject key identifier:   4A:9F:9E:DC:80:7F:65:C7:B0:63:AE:86:89:1B:96:C5:12:EA:41:B7
Certificate issuer:       /CN=1e780065-6b4a-42e5-ba6a-2cc340001aa7
Certificate serial:       010D0C9F4328584789EBF5AE898BC48B7EE7B700
Authority key identifier: EA:AC:32:BC:04:72:09:79:83:73:10:B1:70:78:31:B0:9D:CF:46:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e780065-6b4a-42e5-ba6a-2cc340001aa7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e780065-6b4a-42e5-ba6a-2cc340001aa7/fe8a86c7-fcf2-3d23-9999-54a57a7229b2.roa
Signing time:             Mon 14 Oct 2024 13:00:47 +0000
ROA not before:           Mon 14 Oct 2024 13:00:47 +0000
ROA not after:            Sun 12 Jan 2025 14:00:47 +0000
asID:                     11736
IP address blocks:        2607:f558:1c00::/40 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e780065-6b4a-42e5-ba6a-2cc340001aa7/1e780065-6b4a-42e5-ba6a-2cc340001aa7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e780065-6b4a-42e5-ba6a-2cc340001aa7/1e780065-6b4a-42e5-ba6a-2cc340001aa7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e780065-6b4a-42e5-ba6a-2cc340001aa7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:89:eb:f5:ae:89:8b:c4:8b:7e:e7:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e780065-6b4a-42e5-ba6a-2cc340001aa7
        Validity
            Not Before: Oct 14 13:00:47 2024 GMT
            Not After : Jan 12 14:00:47 2025 GMT
        Subject: CN=33c24590-b62d-4470-803c-4e07ec18b887
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:40:2f:5f:b7:42:73:9a:29:c6:cf:85:b1:9c:
                    fe:b1:b0:bf:32:28:f8:70:c2:63:76:5e:9d:a7:fb:
                    9a:a9:21:d5:01:16:49:d1:2b:a4:30:e9:ea:1a:42:
                    ea:d7:92:f5:fc:79:8d:b1:0f:c0:8e:2c:6f:7a:b6:
                    93:ae:88:15:cd:c1:53:ee:c2:1c:c4:e2:23:57:37:
                    4b:a8:32:cc:2f:61:0a:cf:19:25:da:21:78:f8:56:
                    d5:9d:28:bf:b3:28:10:9d:64:87:78:7b:6b:fb:0c:
                    0f:0c:43:a8:a8:09:f6:5e:50:b4:53:a1:18:ca:c9:
                    36:fa:d8:1c:a5:c7:03:ba:91:69:e7:8c:fa:27:4a:
                    19:d2:6f:74:1a:c6:19:b7:d0:f1:49:ac:65:4b:3c:
                    23:73:62:ee:09:81:12:9a:09:fa:2f:53:be:c5:36:
                    d0:91:34:6f:16:fd:c5:44:3e:ae:ec:f6:1f:ab:73:
                    df:61:35:e8:1d:ad:ae:1c:3f:64:24:70:49:55:80:
                    9d:4e:e8:2b:b2:96:3a:a8:ec:47:08:e3:e3:e9:f9:
                    df:94:a0:a0:52:84:a2:80:b7:c5:ef:b1:b0:ef:1e:
                    20:7e:ab:71:a5:5b:a9:5b:ff:fc:9c:01:34:89:db:
                    f3:96:9c:48:e8:cc:ce:b7:d5:af:48:2f:54:02:98:
                    38:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:9F:9E:DC:80:7F:65:C7:B0:63:AE:86:89:1B:96:C5:12:EA:41:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e780065-6b4a-42e5-ba6a-2cc340001aa7/fe8a86c7-fcf2-3d23-9999-54a57a7229b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e780065-6b4a-42e5-ba6a-2cc340001aa7/1e780065-6b4a-42e5-ba6a-2cc340001aa7.crl

            X509v3 Authority Key Identifier:
                keyid:EA:AC:32:BC:04:72:09:79:83:73:10:B1:70:78:31:B0:9D:CF:46:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e780065-6b4a-42e5-ba6a-2cc340001aa7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f558:1c00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:84:81:9b:07:8b:43:36:0c:c2:3f:c2:a3:11:ab:da:03:ab:
         7f:6c:cf:21:8e:7e:b9:ca:58:0f:af:98:c7:4a:bd:59:ee:89:
         c3:80:1c:8b:29:cf:2a:ae:36:02:1b:45:a9:b2:fb:3c:20:18:
         ce:6a:a5:23:fe:68:93:0e:db:8e:18:23:4b:23:f8:30:1f:07:
         94:e4:9a:49:9d:ce:fe:41:2c:5c:60:bb:a7:57:1b:31:cd:7f:
         bf:ac:ad:a7:d2:08:23:56:66:b0:95:d3:d6:7b:74:36:72:30:
         c2:29:f3:be:b0:9f:98:d9:1a:97:83:62:5c:b2:44:90:66:2e:
         93:0c:d0:16:4b:bb:05:84:2b:e5:fc:ab:35:ff:ac:99:d0:12:
         a8:86:ee:e5:a4:23:51:5c:69:9d:76:23:d1:eb:a3:a2:01:dd:
         22:18:13:0c:b6:14:fe:f3:b8:4e:de:08:b2:df:5a:f2:38:d4:
         93:18:c8:af:2d:5d:7a:d8:80:83:25:5d:d8:b0:79:b1:03:3e:
         79:15:9f:ef:52:56:34:93:6c:6c:e8:8c:27:5f:ab:d5:8e:54:
         32:b6:0d:6c:10:b0:4c:d0:df:09:07:ff:74:10:64:49:b9:90:
         76:29:25:20:14:34:d2:0d:ea:56:2e:d2:2e:9a:91:23:66:8b:
         77:6d:ce:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:20:48 2024 by rpki-client on console-fra.rpki-client.org