Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/43eb6277-29ec-3a31-bacc-b593c68920d9.roa
File:                     43eb6277-29ec-3a31-bacc-b593c68920d9.roa (raw, json)
Hash identifier:          gy3NvnOu9smkT9cy6JGWWJFKhIBE8kjAbu74Sdxp4h8=
Subject key identifier:   94:F4:0F:BB:CB:FB:E7:B0:2C:A1:69:59:61:18:4F:8B:FE:5F:E5:CC
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F43285847B53153F1694B101BDA173A80
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/43eb6277-29ec-3a31-bacc-b593c68920d9.roa
Signing time:             Wed 30 Oct 2024 01:00:32 +0000
ROA not before:           Wed 30 Oct 2024 01:00:32 +0000
ROA not after:            Tue 28 Jan 2025 02:00:32 +0000
asID:                     62896
IP address blocks:        2605:4a8f:fff0::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b5:31:53:f1:69:4b:10:1b:da:17:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: Oct 30 01:00:32 2024 GMT
            Not After : Jan 28 02:00:32 2025 GMT
        Subject: CN=e4f3e4b8-d944-4b59-9e06-6502607dce44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:a8:ac:59:df:e6:c8:c2:e6:ab:73:2d:64:40:
                    fa:70:05:08:01:7c:95:f9:78:02:5d:d7:ca:10:9c:
                    41:72:a4:c0:89:06:89:b7:b5:62:39:99:66:aa:95:
                    45:08:eb:56:74:ef:bc:21:0c:37:f1:72:57:9a:dc:
                    6c:52:68:d7:b5:f8:fa:21:bd:b5:50:c0:42:cf:19:
                    ad:75:4e:d2:7e:77:4b:14:a4:e8:1b:95:1e:99:db:
                    ca:27:6f:de:1a:22:bf:42:e2:75:6e:34:99:95:a8:
                    ca:e7:5b:e2:bd:30:31:41:b1:10:18:f5:e3:73:2d:
                    57:60:03:dc:e6:7e:92:74:89:47:be:04:e7:b8:83:
                    b6:f0:09:ed:e2:e6:c7:01:5d:38:f3:1c:8f:a8:6d:
                    da:bc:04:20:06:6a:a7:88:22:cf:af:6e:0a:cf:81:
                    77:ad:53:93:ce:c7:6b:6f:ab:1a:c5:a9:ab:d6:10:
                    5d:83:96:5e:86:bf:2f:fd:2e:ed:ea:21:98:71:71:
                    df:3f:c1:97:25:cd:cb:37:ec:3b:00:d0:fa:86:e9:
                    d6:42:cd:88:e0:47:0f:e2:01:86:55:85:cc:94:25:
                    3d:92:87:6b:f9:64:b9:d5:1d:1d:db:1a:c0:18:73:
                    c3:76:3c:63:e6:a9:4c:15:d5:6d:71:d7:86:a7:eb:
                    ac:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:F4:0F:BB:CB:FB:E7:B0:2C:A1:69:59:61:18:4F:8B:FE:5F:E5:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/43eb6277-29ec-3a31-bacc-b593c68920d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4a8f:fff0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:98:d4:80:21:e6:a8:19:82:c4:75:84:c7:46:3b:06:d6:0c:
         ee:1f:c6:d0:40:76:d3:ea:01:fe:fd:86:7a:d1:2a:4a:16:40:
         68:13:60:5e:f9:a6:41:fa:05:c9:e2:ff:8e:5c:52:0b:74:2f:
         16:cd:13:0a:89:98:cc:8b:18:51:d1:e8:ca:4d:81:b6:29:35:
         a8:83:e7:f7:2e:b3:5d:f5:42:b0:2d:74:52:22:85:30:11:d1:
         e0:ed:b6:eb:ee:36:6a:65:21:8c:3e:30:ec:89:f5:9a:02:19:
         52:de:0e:76:90:42:92:71:2b:e8:cb:14:a3:43:be:45:8d:a3:
         ab:a2:98:bb:02:91:5a:eb:7f:bf:cc:70:f5:81:66:31:96:4f:
         ca:0a:a6:76:54:72:0e:9d:b2:8d:2d:08:fe:39:b9:87:11:67:
         93:07:09:e2:29:66:e4:16:ad:09:9c:e8:67:f8:fc:12:17:e0:
         5f:6f:b1:32:c2:8e:b1:4f:18:16:80:8e:d6:f5:1a:9c:82:34:
         98:4b:6b:1d:77:61:a8:ac:bd:83:bc:7b:27:72:ef:27:d5:f8:
         81:f7:f3:68:70:8c:ca:f0:34:f4:7b:fa:bd:64:be:a9:66:76:
         8b:68:3d:f1:ef:66:77:31:f5:af:80:a0:91:44:9c:2d:3d:82:
         36:a0:e6:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:23:03 2024 by rpki-client on console-fra.rpki-client.org