Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f/e3ed2319-0a50-3776-9dbe-a5edd2a06292.roa
File:                     e3ed2319-0a50-3776-9dbe-a5edd2a06292.roa (raw, json)
Hash identifier:          HDPdZjFR7LQsWumSM/VFckOpKps6YPLBJxkZxiYdEK0=
Subject key identifier:   40:C2:46:A3:15:FC:0A:CA:D2:43:35:68:CC:96:3F:86:61:DC:C0:83
Certificate issuer:       /CN=ec23d019-d079-49df-94b6-ad79d138e90f
Certificate serial:       010D0C9F43285847CFD4A776B90C4273064D3FA0
Authority key identifier: 7B:45:19:0A:67:71:07:CE:9A:BC:4B:A6:4F:63:DD:81:75:A4:BA:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f/e3ed2319-0a50-3776-9dbe-a5edd2a06292.roa
Signing time:             Fri 08 Nov 2024 14:00:39 +0000
ROA not before:           Fri 08 Nov 2024 14:00:39 +0000
ROA not after:            Thu 06 Feb 2025 14:00:39 +0000
asID:                     210527
IP address blocks:        2606:7540:f010::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f/ec23d019-d079-49df-94b6-ad79d138e90f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f/ec23d019-d079-49df-94b6-ad79d138e90f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cf:d4:a7:76:b9:0c:42:73:06:4d:3f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec23d019-d079-49df-94b6-ad79d138e90f
        Validity
            Not Before: Nov  8 14:00:39 2024 GMT
            Not After : Feb  6 14:00:39 2025 GMT
        Subject: CN=c83bffc8-e142-4e23-95e8-6d84eef6d03b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:4f:e4:80:01:bc:b4:21:c4:fc:c0:21:31:ac:
                    87:a2:cd:04:05:fd:a9:8a:6c:58:27:ee:dc:35:f1:
                    ab:71:ac:d6:ed:f8:77:6d:68:3a:4d:74:bd:10:62:
                    4f:52:58:91:75:0b:16:66:0a:77:1c:0d:dc:65:04:
                    9e:07:9e:87:f8:53:f7:10:44:ca:83:aa:18:65:60:
                    02:56:1e:ff:c8:55:98:c0:44:69:7d:6a:3f:0e:b8:
                    2a:83:18:e7:c1:dd:2f:bd:88:cc:22:c6:dd:b1:9f:
                    65:0f:ad:f0:e6:fd:e7:b2:89:76:3a:f5:ad:7e:20:
                    1b:34:23:1e:16:f3:10:4e:0a:ac:1e:84:7a:8f:0c:
                    f6:c1:85:f5:f4:d8:86:ee:18:f7:1e:74:a6:14:60:
                    a3:a7:7e:57:62:9f:9d:26:69:66:be:bf:03:1f:76:
                    3c:77:7c:0b:9c:9e:c7:9f:cc:d9:32:24:e9:3c:6b:
                    a6:71:b7:6a:30:a1:35:d3:d3:a0:5a:8e:8c:23:d8:
                    11:c6:68:35:15:e3:af:c1:de:83:b9:bb:3b:0b:91:
                    f9:0d:bf:50:0b:68:c7:2e:59:fb:15:08:2e:53:c0:
                    46:ea:f6:e9:85:70:9b:ee:18:8c:ad:d9:7a:16:41:
                    f0:fd:a7:81:f8:b9:52:7b:d6:39:0d:59:59:66:ee:
                    43:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:C2:46:A3:15:FC:0A:CA:D2:43:35:68:CC:96:3F:86:61:DC:C0:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f/e3ed2319-0a50-3776-9dbe-a5edd2a06292.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f/ec23d019-d079-49df-94b6-ad79d138e90f.crl

            X509v3 Authority Key Identifier:
                keyid:7B:45:19:0A:67:71:07:CE:9A:BC:4B:A6:4F:63:DD:81:75:A4:BA:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7540:f010::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:88:92:ff:88:60:f8:d5:9e:bd:59:be:17:29:55:84:9e:a3:
         78:0c:b3:b4:11:e4:3e:56:bb:6d:c5:e9:8e:55:55:53:93:db:
         1d:6c:e0:09:31:f3:b7:7d:63:fb:e4:98:64:61:5b:bb:0f:3b:
         e2:0b:21:51:68:81:2b:fc:3b:da:94:ec:ee:96:12:5a:9a:80:
         10:39:98:d2:87:71:48:fa:6a:4b:53:88:d6:eb:f7:e9:d4:c3:
         cd:b8:57:ec:ed:eb:c5:57:e4:75:9f:47:87:03:89:60:a9:b8:
         6a:20:f5:07:31:79:1c:a3:b3:87:f8:04:5e:bd:32:b5:82:b0:
         82:1f:31:4e:e7:b6:39:08:a4:2e:5c:9a:27:79:b9:ce:65:75:
         22:cc:1e:1b:ab:34:47:9a:20:b4:a7:7c:a8:04:d8:17:54:af:
         ae:a2:77:db:1e:d7:78:55:43:16:25:75:d1:f7:d7:24:e9:fc:
         2d:39:5a:3e:6d:47:d0:c7:75:76:f7:5e:0a:e0:f3:84:50:65:
         3e:67:5c:70:4f:67:34:fd:dd:d1:7c:54:bc:7b:61:1b:63:5b:
         82:fb:62:cf:cd:e4:59:00:10:3e:cf:4a:20:06:22:0f:65:f3:
         7c:42:13:c6:2d:f4:db:fc:95:11:d3:f0:f2:30:15:80:75:41:
         e3:f3:6e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:00:54 2024 by rpki-client on console-fra.rpki-client.org