Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/25dfc76c-b579-36f8-95b3-a1b22bcff809.roa
File:                     25dfc76c-b579-36f8-95b3-a1b22bcff809.roa (raw, json)
Hash identifier:          K+w04/u1+XrqtaDPYo1axYl5Psxpt3xLufsprQ+YlAo=
Subject key identifier:   EF:F7:8C:26:79:78:A2:66:C4:8B:44:ED:A5:19:34:77:FB:48:E6:F3
Certificate issuer:       /CN=2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f
Certificate serial:       010D0C9F43285847792BB60ECE226CEA76580D00
Authority key identifier: E7:C3:4D:92:13:BD:90:DE:BE:98:53:B6:75:61:97:86:5B:27:46:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/25dfc76c-b579-36f8-95b3-a1b22bcff809.roa
Signing time:             Tue 08 Oct 2024 13:00:40 +0000
ROA not before:           Tue 08 Oct 2024 13:00:40 +0000
ROA not after:            Mon 06 Jan 2025 14:00:40 +0000
asID:                     0
IP address blocks:        2001:504:100::/48 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:79:2b:b6:0e:ce:22:6c:ea:76:58:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f
        Validity
            Not Before: Oct  8 13:00:40 2024 GMT
            Not After : Jan  6 14:00:40 2025 GMT
        Subject: CN=ceb918af-305d-48c2-9664-b64687efbdd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:92:06:9e:c0:e4:cc:85:8d:09:f7:af:74:8e:
                    d8:85:08:20:1c:9c:22:34:0b:44:8b:d1:31:43:f2:
                    60:50:d5:32:bc:f8:d6:99:96:a9:df:8b:4b:f2:d4:
                    4e:8b:72:db:1d:72:6a:aa:ed:88:62:9a:46:43:ac:
                    87:6b:d7:b6:97:f4:40:ca:17:16:a0:c4:3d:67:7a:
                    13:53:52:77:e4:80:09:b4:0c:38:0b:09:63:b0:ab:
                    4d:6b:77:e8:28:32:7a:c5:09:3e:7e:8e:88:9e:34:
                    5f:24:14:3e:b8:c8:b9:1e:28:3a:85:1d:d6:8e:d3:
                    51:9a:0b:ff:74:a3:99:5a:7c:02:e3:3e:3d:6c:e3:
                    07:92:f5:c0:10:09:8e:ca:f9:c3:33:7b:e5:b9:dd:
                    52:27:69:5d:76:2a:ce:4c:78:b2:a2:0b:7a:6b:e3:
                    89:12:15:4b:f1:b6:16:f1:68:01:69:17:50:5d:7e:
                    a0:85:06:e4:74:66:0c:6f:c9:92:53:83:af:04:ec:
                    23:4e:a2:65:84:29:64:a5:9c:a5:e2:d0:81:17:da:
                    8a:0a:80:ee:6f:56:b0:aa:b8:ab:54:38:e4:14:ec:
                    fc:d0:4a:65:8e:c4:e2:ec:9b:1c:63:28:2a:96:f0:
                    48:7c:af:b9:dc:67:17:73:ca:93:46:f6:2b:61:c8:
                    b1:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:F7:8C:26:79:78:A2:66:C4:8B:44:ED:A5:19:34:77:FB:48:E6:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/25dfc76c-b579-36f8-95b3-a1b22bcff809.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.crl

            X509v3 Authority Key Identifier:
                keyid:E7:C3:4D:92:13:BD:90:DE:BE:98:53:B6:75:61:97:86:5B:27:46:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:504:100::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:a4:02:a7:92:b3:d8:2e:b7:be:3e:2b:8a:ba:5c:91:45:69:
         bf:bc:b0:2a:6e:1c:1e:95:8d:20:7c:b6:8d:23:a1:cd:34:9b:
         31:14:2f:74:d0:94:8a:f7:eb:86:86:1e:b2:9c:04:58:36:d1:
         cb:c3:d5:35:a4:c8:c2:3f:ce:5d:d4:3d:9c:63:8f:dc:f9:3a:
         4f:cf:84:17:ac:b1:28:d1:ae:57:9e:fc:cf:e8:bb:8a:db:6c:
         af:39:b5:e9:23:39:dc:ba:72:69:0a:bb:97:b8:2a:fe:c8:25:
         bc:ae:e0:0a:f2:cf:83:f7:b8:3d:e9:56:66:fd:73:dc:b9:74:
         21:62:73:83:78:dd:ed:c7:3c:20:2e:a7:bf:13:1a:e0:ec:62:
         0f:f3:b1:0b:89:e7:cc:7d:0d:d9:d7:4e:0b:e6:35:ed:2a:19:
         fd:d4:61:56:61:75:33:ef:86:bd:34:69:4d:5f:b0:25:b8:84:
         f2:b5:2f:83:0a:c2:23:ea:32:aa:9e:73:81:2b:32:36:9e:df:
         f5:38:a7:37:39:3c:79:47:45:39:a4:a9:a7:d8:6f:2c:fd:9c:
         fa:94:bf:65:54:01:6c:d9:13:0f:a5:17:4e:e9:01:29:6d:3e:
         69:7f:41:fa:9f:1a:78:22:89:5d:88:22:9a:78:31:39:31:af:
         cc:9f:82:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:30:26 2024 by rpki-client on console-fra.rpki-client.org