Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/2d066b72-4060-30eb-b5ac-a6583c7d483d.roa
File:                     2d066b72-4060-30eb-b5ac-a6583c7d483d.roa (raw, json)
Hash identifier:          VGUhWO2df5Hr47ejrfioloCXYC/AtycmTZnk+75cMRk=
Subject key identifier:   7A:EE:86:B2:B8:3D:27:CA:77:B8:EC:90:AF:20:69:9B:CF:49:08:F3
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F43285847D6CF45EE2680AB19D42E5C80
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/2d066b72-4060-30eb-b5ac-a6583c7d483d.roa
Signing time:             Mon 11 Nov 2024 02:00:27 +0000
ROA not before:           Mon 11 Nov 2024 02:00:27 +0000
ROA not after:            Sun 09 Feb 2025 02:00:27 +0000
asID:                     11055
IP address blocks:        2604:7a00:ffc0::/43 maxlen: 43

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d6:cf:45:ee:26:80:ab:19:d4:2e:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: Nov 11 02:00:27 2024 GMT
            Not After : Feb  9 02:00:27 2025 GMT
        Subject: CN=ea196e4c-d5c3-495c-9f4e-2acaede9ad3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:33:7b:a6:9b:e6:f0:e5:c9:28:88:93:72:b0:
                    eb:1a:3b:23:9b:69:22:a3:a7:64:c1:ae:60:1b:e6:
                    13:8f:a4:ef:55:63:8d:77:70:9f:43:c3:48:dc:54:
                    3b:99:b7:f4:5a:36:0e:33:8d:fc:80:c5:d7:e1:a5:
                    55:50:a4:bb:4d:f2:c0:12:9a:b2:33:7a:47:0f:ae:
                    42:e6:1a:e4:be:ff:e5:31:14:f2:28:e1:f5:db:78:
                    2b:fb:ce:a8:6b:e3:88:ed:41:28:b0:45:a0:93:79:
                    e9:64:92:95:03:ec:ff:2f:f7:f0:62:fb:1e:15:d6:
                    6b:f6:3e:8b:2d:b7:68:33:82:01:2a:4f:3d:92:5d:
                    e5:a4:a7:2b:b1:e2:56:16:83:d3:a6:4d:3e:17:71:
                    19:57:96:9e:d9:1e:33:d3:aa:b5:e8:76:55:62:e5:
                    fb:96:35:ea:76:2f:96:4a:7c:61:66:46:4d:ac:1e:
                    8e:41:4f:4b:50:f5:be:c0:a9:ac:c6:d3:fe:48:50:
                    6a:1b:39:5a:f5:b9:29:d1:90:51:9b:a5:81:15:30:
                    f4:6e:d5:83:60:68:41:4d:f1:07:21:b3:41:83:e3:
                    df:cf:fc:96:61:73:30:da:24:12:34:df:d2:2f:32:
                    d6:29:79:f6:e0:26:90:38:b6:55:cc:b1:6e:ea:de:
                    e1:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:EE:86:B2:B8:3D:27:CA:77:B8:EC:90:AF:20:69:9B:CF:49:08:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/2d066b72-4060-30eb-b5ac-a6583c7d483d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:7a00:ffc0::/43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:a3:0b:ea:b9:23:d3:6d:91:ee:60:d6:b8:81:c8:46:0f:6a:
         d8:23:83:93:97:24:33:28:7c:89:30:7f:e7:0f:6e:30:b6:96:
         9c:e1:08:a4:56:90:aa:18:98:9d:a8:41:e5:c8:db:b5:5a:9e:
         48:35:87:f3:84:79:45:b6:2b:42:4f:19:36:d6:2c:3d:fc:b9:
         8d:23:79:58:f4:09:62:c9:85:5d:8b:10:83:de:ed:40:1a:97:
         d9:9b:9c:60:28:7d:4e:8a:b9:ba:5a:93:ad:92:79:af:f4:e1:
         91:bf:59:9e:f9:d6:26:39:3f:e0:32:c9:36:b6:ab:2e:3d:d4:
         c6:9c:a2:3b:80:da:8f:38:fa:a2:5b:09:e8:bc:bd:9e:5f:c7:
         48:8d:fe:c5:14:b9:c3:d8:ed:54:81:dc:77:2a:58:c7:db:91:
         da:b9:d8:48:ad:14:c0:18:5b:5c:1f:4e:26:8c:73:f5:eb:9b:
         2a:0b:12:6f:fb:61:f2:07:7e:8f:14:5d:fd:60:3a:da:0b:07:
         18:62:62:93:85:7f:5e:45:2a:4e:08:7c:41:08:2d:23:87:b5:
         ed:54:8d:e9:c9:73:57:b1:38:26:c7:5f:36:f1:e4:73:8b:6a:
         9d:4e:31:a0:55:87:00:40:f1:5e:ee:59:3c:b9:28:94:69:2f:
         80:c6:83:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:37:45 2024 by rpki-client on console-ams.rpki-client.org