Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/9dd3a97c-9d6b-3e7f-a1f4-4204fce9e02a.roa
File:                     9dd3a97c-9d6b-3e7f-a1f4-4204fce9e02a.roa (raw, json)
Hash identifier:          R8oIeHUmALiIqUj5gTyqj+/Qw5i4BD0ixZV+nyCrhjA=
Subject key identifier:   09:35:94:61:1F:3E:67:4B:16:36:FF:77:62:59:F4:05:6A:2C:2B:12
Certificate issuer:       /CN=5aba4b7a-de7b-4e84-b913-a1bedbe58f9a
Certificate serial:       010D0C9F4328584750B0A6773CF18B902D85FB00
Authority key identifier: 96:54:64:3A:B0:1D:88:A5:4E:80:EF:54:9E:33:2E:CF:5B:A3:59:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/9dd3a97c-9d6b-3e7f-a1f4-4204fce9e02a.roa
Signing time:             Tue 24 Sep 2024 01:00:31 +0000
ROA not before:           Tue 24 Sep 2024 01:00:31 +0000
ROA not after:            Mon 23 Dec 2024 02:00:31 +0000
asID:                     22413
IP address blocks:        2604:f140::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:50:b0:a6:77:3c:f1:8b:90:2d:85:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5aba4b7a-de7b-4e84-b913-a1bedbe58f9a
        Validity
            Not Before: Sep 24 01:00:31 2024 GMT
            Not After : Dec 23 02:00:31 2024 GMT
        Subject: CN=1850b1df-98d5-4e28-858b-e1be32a41300
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:e9:d9:86:01:21:0a:7f:a0:4f:1d:3f:c2:c0:
                    93:db:fc:a5:8e:d7:ae:5b:15:04:cc:49:66:cb:7f:
                    f1:d5:ce:86:9e:11:7a:95:44:8b:41:71:5b:6a:6e:
                    9d:c9:51:b6:01:21:dc:38:32:ac:7c:6a:39:34:29:
                    8a:35:84:68:b5:ac:92:a8:45:17:9e:59:e4:bd:04:
                    51:f3:23:18:fa:a3:ff:46:28:3b:22:8e:74:e0:d0:
                    9e:76:0f:9b:3e:93:d4:94:26:12:9b:02:68:50:f3:
                    0e:77:3a:a6:fe:83:06:73:b0:6e:92:40:3b:f2:ae:
                    c4:0d:ae:dc:ca:5b:ff:e8:97:a8:01:c7:fd:d1:f5:
                    ca:9f:d6:5d:1a:11:39:ef:f4:4e:bb:4a:95:e7:e0:
                    fc:aa:65:2f:51:36:02:6f:c7:70:58:ed:37:49:62:
                    7c:8c:eb:e7:31:26:a4:b7:5d:d0:01:ad:d6:d5:4b:
                    af:e6:a2:95:2d:93:5b:ce:68:d2:2f:10:60:84:c0:
                    7b:9d:57:b3:ce:34:20:a7:66:c3:67:01:2c:ec:8d:
                    19:27:9c:1a:23:8d:ee:91:e2:19:66:ab:87:4e:45:
                    2a:63:f0:f7:a8:40:34:83:e6:d4:8f:94:8a:78:5c:
                    49:93:28:2e:ae:d9:53:84:95:39:67:3b:90:82:d8:
                    48:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:35:94:61:1F:3E:67:4B:16:36:FF:77:62:59:F4:05:6A:2C:2B:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/9dd3a97c-9d6b-3e7f-a1f4-4204fce9e02a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.crl

            X509v3 Authority Key Identifier:
                keyid:96:54:64:3A:B0:1D:88:A5:4E:80:EF:54:9E:33:2E:CF:5B:A3:59:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:f140::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:8f:5f:a3:99:d9:ef:f2:e5:f5:0f:cd:16:ff:94:09:6c:a0:
         85:09:3a:e5:89:b3:3f:80:45:7f:0c:1e:65:19:19:55:0a:44:
         54:e6:14:81:53:42:08:75:1e:c7:66:14:6a:74:87:d6:df:12:
         c2:1d:47:77:73:9c:69:2f:47:94:78:5e:83:25:26:c6:23:57:
         ba:17:af:fb:40:bf:b2:d5:2f:4c:72:13:16:7e:2e:df:dc:65:
         59:3c:c0:28:c2:d9:52:3a:89:b2:74:cd:6e:47:77:5b:51:91:
         ed:3f:3a:7f:9e:dc:21:39:c9:48:10:86:2d:fd:c6:7e:f5:06:
         7c:3a:d8:fe:6a:65:85:a9:98:00:63:c0:9d:37:24:60:50:54:
         b6:f2:df:e5:29:06:d8:fe:b1:02:a5:48:78:5b:c7:68:cf:f2:
         b2:db:c7:42:f5:19:7c:7e:c6:cc:3d:3f:c2:35:d9:aa:e5:62:
         63:de:d5:a6:97:94:9c:a5:42:9f:43:0b:de:60:43:5d:01:22:
         56:de:39:28:04:d0:c8:d7:3b:a9:12:17:0c:3f:f3:d9:99:20:
         2d:0d:46:e9:7f:d2:4b:b0:e7:11:27:81:87:88:bd:fb:c9:45:
         eb:4e:c6:f4:cc:65:ab:7b:96:fb:35:4e:ea:84:e7:f6:e6:3d:
         1b:cf:64:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 15:59:16 2024 by rpki-client on console-fra.rpki-client.org