Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/f7d21d96-d256-3aab-9e7e-57e21046fd47.roa
File:                     f7d21d96-d256-3aab-9e7e-57e21046fd47.roa (raw, json)
Hash identifier:          LnlKwyw973B92aPXID4PqERCJAd4oO2CcRuPy6cGR6U=
Subject key identifier:   5B:0F:00:6C:9F:97:5E:AC:24:6D:4D:3F:53:49:D8:33:29:2E:10:96
Certificate issuer:       /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial:       010D0C9F43285847CA3F7771523951610E2A1480
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/f7d21d96-d256-3aab-9e7e-57e21046fd47.roa
Signing time:             Wed 06 Nov 2024 14:00:41 +0000
ROA not before:           Wed 06 Nov 2024 14:00:41 +0000
ROA not after:            Tue 04 Feb 2025 14:00:41 +0000
asID:                     9009
IP address blocks:        2607:740:35::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ca:3f:77:71:52:39:51:61:0e:2a:14:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
        Validity
            Not Before: Nov  6 14:00:41 2024 GMT
            Not After : Feb  4 14:00:41 2025 GMT
        Subject: CN=836adf2f-4f04-470e-819b-f4511b3f5a86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:9b:0b:d8:6f:91:1b:ff:de:5a:c8:22:2c:24:
                    a0:96:2a:92:cc:4d:fd:c5:6c:f0:d8:b2:ba:d6:82:
                    20:77:4c:92:b4:c9:e1:0a:6a:09:88:e9:2e:7c:57:
                    1e:3d:4a:7e:13:79:b4:8f:31:a4:4a:e4:d4:0c:2f:
                    06:25:de:d4:59:84:92:66:0d:6c:e2:36:aa:67:d7:
                    53:90:0f:f9:f3:0f:ef:31:64:c0:14:dc:83:ea:f4:
                    c5:ae:e6:a8:76:e3:bf:56:fb:d1:b5:a6:e2:e1:d1:
                    63:44:43:27:a9:72:2d:2d:c0:95:4e:f1:52:16:92:
                    09:6d:3f:b4:5e:2d:14:32:6a:b9:52:23:66:e5:79:
                    4f:2b:6f:7d:b7:2c:68:96:9e:47:08:58:85:36:8a:
                    89:a8:09:3f:21:fa:56:fc:76:63:5e:5f:12:84:c5:
                    df:8d:8f:57:e8:b9:8e:34:8f:ed:11:42:b1:67:48:
                    ca:8d:ba:44:8f:cb:7a:51:df:a8:80:b8:52:bc:77:
                    4a:81:2c:ee:29:ba:0c:67:fd:be:48:1f:93:e6:d9:
                    d5:34:a5:63:fc:a1:38:12:d2:0e:0e:39:23:48:e2:
                    c4:27:4b:80:ed:0b:57:a0:d3:22:98:4b:83:71:76:
                    fe:06:4d:7d:40:13:a8:30:9e:d6:ce:7a:36:88:52:
                    2c:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:0F:00:6C:9F:97:5E:AC:24:6D:4D:3F:53:49:D8:33:29:2E:10:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/f7d21d96-d256-3aab-9e7e-57e21046fd47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl

            X509v3 Authority Key Identifier:
                keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:740:35::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:56:dd:08:3f:30:84:1e:a9:9d:df:5a:d8:73:c4:a9:d0:d1:
         af:f3:54:4c:cd:fe:cc:f5:c4:c5:f5:d7:e4:9b:29:14:0a:14:
         af:18:32:70:97:f1:7d:29:cb:e7:ce:05:a5:78:7b:34:15:4a:
         ba:6f:7b:fc:b2:ed:99:ce:19:62:b0:5e:b7:88:90:46:e6:51:
         5c:72:c3:09:b2:2e:9b:75:71:db:3e:23:e1:fd:75:6d:9b:0c:
         cb:a7:d2:ca:5b:b7:b3:a7:d6:d8:8a:12:19:7c:aa:3d:4f:42:
         e6:8e:1a:c0:02:85:12:7e:89:33:d5:13:46:bd:5e:2d:f4:fd:
         53:c9:8f:35:59:0d:f6:4d:91:57:96:29:ee:99:70:64:e8:d3:
         08:e7:21:98:33:71:6b:bc:b0:8b:1b:3a:c0:6e:b4:c8:2b:72:
         e9:a0:8a:ee:13:d0:98:b2:1a:99:2f:69:2c:bd:31:49:5b:44:
         0a:08:fd:86:ca:61:d4:4c:47:4d:f7:93:9d:49:c3:e5:49:03:
         e8:60:a4:1b:6b:56:ad:27:f0:7d:dc:df:26:81:73:71:e0:7e:
         2d:00:3d:10:23:d4:5c:51:33:9a:8e:ba:8a:4e:b5:f0:c4:23:
         3f:52:18:49:52:74:f7:04:2a:29:95:6e:45:3c:86:14:62:32:
         0c:71:61:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:30:00 2024 by rpki-client on console-fra.rpki-client.org