Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/16d0c577-bf2f-3261-80ac-c7ca5f476093.roa
File:                     16d0c577-bf2f-3261-80ac-c7ca5f476093.roa (raw, json)
Hash identifier:          ZRRnPjqKOdsR1qtcvb6kmziVBYQonyHBOY3McWMwEH8=
Subject key identifier:   E6:BC:69:30:79:A3:3C:BD:FC:D0:74:A8:71:36:8D:90:D3:23:F7:D6
Certificate issuer:       /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial:       010D0C9F432858472F307FDC29080BB7AF62A380
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/16d0c577-bf2f-3261-80ac-c7ca5f476093.roa
Signing time:             Thu 12 Sep 2024 01:00:31 +0000
ROA not before:           Thu 12 Sep 2024 01:00:31 +0000
ROA not after:            Wed 11 Dec 2024 02:00:31 +0000
asID:                     9009
IP address blocks:        2607:740:58::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2f:30:7f:dc:29:08:0b:b7:af:62:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
        Validity
            Not Before: Sep 12 01:00:31 2024 GMT
            Not After : Dec 11 02:00:31 2024 GMT
        Subject: CN=9ebcb5bc-e174-429e-b597-7504e5d32ded
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:96:2a:9b:85:a0:af:29:70:c0:3a:01:61:10:
                    5b:0d:04:3b:1d:f6:e4:84:fb:8c:4d:52:19:fb:dd:
                    10:b5:d0:0b:67:ea:fc:8d:f9:9d:11:66:d2:de:88:
                    31:c4:86:ba:ea:08:a7:a2:61:f6:b9:c7:b3:1e:78:
                    90:17:6b:7e:9b:0e:d5:ff:ab:27:4c:cb:20:99:c7:
                    08:f4:1d:de:79:1b:4b:f7:09:cd:7f:4f:b0:98:80:
                    7d:26:d3:29:28:54:cd:8f:4e:54:5c:06:36:ec:a3:
                    6f:81:ff:3e:4c:c0:1b:a5:6c:37:ac:e2:20:2e:34:
                    a2:a6:7b:f1:d7:c5:65:ac:b0:77:57:f5:7e:98:16:
                    60:9c:64:e5:e4:1b:18:cc:62:2f:de:9a:49:74:29:
                    84:10:9d:2c:ad:7c:ef:c4:5f:38:ce:2b:be:3b:d0:
                    87:ef:6b:c7:81:21:1b:b9:24:27:67:eb:87:a7:a3:
                    e5:49:64:29:bb:1a:1a:f2:37:7c:7c:0f:09:40:e7:
                    68:f6:61:3a:8e:e9:c3:d8:4a:f8:97:21:8d:74:05:
                    be:d7:88:0b:ff:4a:72:19:85:39:e3:14:77:68:c0:
                    75:c4:2a:f6:11:d3:71:94:19:88:15:df:1e:56:1a:
                    2a:62:bf:8c:b4:13:6e:b5:e7:38:2a:a5:90:44:a0:
                    bb:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:BC:69:30:79:A3:3C:BD:FC:D0:74:A8:71:36:8D:90:D3:23:F7:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/16d0c577-bf2f-3261-80ac-c7ca5f476093.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl

            X509v3 Authority Key Identifier:
                keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:740:58::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:f2:0c:cc:8d:96:8a:ed:f9:7a:94:6a:50:b8:47:59:7a:25:
         21:ea:5c:22:c8:48:03:bc:47:72:8e:86:f5:e5:d3:2c:ff:cb:
         43:51:91:e6:d1:8e:bf:a8:e3:60:1f:29:ef:3e:d4:c0:65:d9:
         00:ed:d7:17:45:f7:10:67:2a:70:1f:e8:99:e8:05:d8:88:8f:
         70:2e:05:5e:f5:d7:e2:19:be:1f:39:98:45:82:90:17:43:4f:
         73:08:3d:31:6b:72:fb:2d:42:4d:02:45:a9:95:9c:d1:4a:da:
         dd:5b:85:fd:9b:da:80:8d:d6:d8:b9:e4:67:80:af:47:b6:b6:
         4c:93:db:0a:ae:28:5e:da:55:2f:19:d2:c2:5f:28:1b:38:fb:
         6e:d7:d5:09:a2:d2:b8:85:c6:63:c3:34:a2:50:73:e9:5f:9e:
         b3:23:67:60:0e:a8:92:5e:0e:30:46:67:38:7e:1d:d4:95:8f:
         29:7c:08:69:18:36:97:52:d5:c4:ba:f0:ba:e7:75:72:b5:b2:
         0d:33:e7:14:4c:32:ec:f5:84:36:5b:9b:b3:6e:4a:19:c9:d0:
         24:53:08:5c:6c:d7:9d:0f:34:8c:27:c6:41:1e:b9:f4:dc:b7:
         2d:f3:3b:74:8e:49:87:b7:9c:6b:f9:a3:6f:74:f7:2e:3d:99:
         04:76:8c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:55:06 2024 by rpki-client on console-ams.rpki-client.org