Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/c090b3b8-860c-3590-89f4-cdcee08adef5.roa
File:                     c090b3b8-860c-3590-89f4-cdcee08adef5.roa (raw, json)
Hash identifier:          YTBqj6Mj/zsuhsimu4nwmNSNu/X8MiYLm8ixVfugx/4=
Subject key identifier:   58:4E:BE:65:FF:92:03:00:55:04:EF:AB:85:A1:38:FC:54:7E:61:7F
Certificate issuer:       /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial:       010D0C9F43285847600BA72705EF9A2553F98250
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/c090b3b8-860c-3590-89f4-cdcee08adef5.roa
Signing time:             Sun 29 Sep 2024 13:00:41 +0000
ROA not before:           Sun 29 Sep 2024 13:00:41 +0000
ROA not after:            Sat 28 Dec 2024 14:00:41 +0000
asID:                     16839
IP address blocks:        2606:3600:140::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:60:0b:a7:27:05:ef:9a:25:53:f9:82:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
        Validity
            Not Before: Sep 29 13:00:41 2024 GMT
            Not After : Dec 28 14:00:41 2024 GMT
        Subject: CN=8f9b4493-890e-4e26-a4e0-266af189b7a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:38:92:67:53:56:6f:1d:50:2f:22:81:8c:dc:
                    f2:53:85:1f:95:33:ad:c7:ea:f6:cc:04:09:39:88:
                    21:fd:ad:6d:8d:d7:a2:ad:28:16:95:dd:03:d8:a3:
                    7d:58:dd:fe:ae:5d:40:d9:fa:f0:e1:b4:af:e4:70:
                    5a:a0:80:b8:3a:8e:76:ba:94:7b:dd:62:7b:95:ea:
                    5c:4f:45:5a:ea:84:24:1f:2c:30:0c:a0:89:8b:02:
                    4b:24:89:8a:55:3a:a4:e5:3e:91:99:6b:d1:fb:95:
                    5c:33:72:98:82:ce:39:bc:ce:e6:79:7b:30:be:dc:
                    78:71:4d:48:4d:61:d0:dd:22:08:6a:4c:35:b2:a2:
                    33:0a:a6:85:41:34:cf:ea:d8:2b:cf:b6:6f:98:e1:
                    80:45:7d:53:be:3f:f7:2b:93:35:23:0a:63:d6:91:
                    98:53:89:33:9d:19:4a:15:13:51:83:2d:fc:86:8d:
                    8f:e4:cc:05:01:1a:05:eb:99:40:5e:57:af:64:ac:
                    49:d8:f6:08:5e:a9:9e:7a:6f:b3:8a:c3:f5:0f:dc:
                    17:ff:d3:21:1d:4d:f7:ec:38:0e:dd:ff:db:ff:1d:
                    4f:1e:27:6c:f1:5a:dc:89:9a:89:38:d7:9b:8e:9a:
                    85:32:06:d8:7d:53:a1:24:ce:2d:04:3b:b3:47:77:
                    be:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:4E:BE:65:FF:92:03:00:55:04:EF:AB:85:A1:38:FC:54:7E:61:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/c090b3b8-860c-3590-89f4-cdcee08adef5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl

            X509v3 Authority Key Identifier:
                keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3600:140::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:a7:8f:83:97:40:33:30:b0:a2:33:70:0e:32:f1:83:23:cb:
         a6:ea:d0:70:c3:f6:97:bf:26:7a:1d:47:87:7d:72:d3:9a:de:
         35:2f:4f:6b:ee:be:38:92:64:b8:96:35:e0:8d:b6:6e:06:9f:
         53:2c:9d:ff:d0:60:7d:3b:f7:6a:12:7c:30:5a:89:92:68:73:
         db:60:8f:d8:41:75:d1:6c:49:22:4f:bb:74:fc:3e:46:60:99:
         f8:5c:88:06:22:64:d9:82:14:2f:6c:e8:78:a4:48:23:ce:fb:
         f2:74:9c:eb:98:7d:83:d4:42:89:8d:b8:d5:1e:7f:d1:91:a6:
         7f:2c:dc:58:8a:bf:76:9a:72:b4:54:59:0d:2b:f6:6b:50:5c:
         16:15:66:f5:2f:82:0d:29:2e:a6:ca:80:c8:a9:8c:e2:3a:2f:
         be:f8:6a:8d:62:11:c4:2e:83:23:af:ab:f3:2b:d1:5e:01:c9:
         24:96:ca:78:b8:3f:74:cc:97:95:85:56:50:19:51:0e:e5:16:
         ce:75:e2:7c:09:ab:ff:82:e5:d1:e8:3b:6b:b8:d3:59:e1:0f:
         20:61:21:25:38:23:70:13:29:81:e3:a4:74:a1:47:03:5b:ed:
         d1:26:c6:10:e7:e1:9f:b7:a2:70:ac:a0:a0:4a:48:b7:a2:e0:
         0a:fc:41:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:23:06 2024 by rpki-client on console-fra.rpki-client.org