Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/423c792a-aec0-33ab-aaca-ea6545d77459.roa
File:                     423c792a-aec0-33ab-aaca-ea6545d77459.roa (raw, json)
Hash identifier:          BqzVc7L25joxENOCmB0NfoZV9Fbxsa79PHsOaxfKR2w=
Subject key identifier:   04:3A:8E:3C:B6:E3:42:50:35:79:CB:47:12:94:94:22:FA:9B:D3:F8
Certificate issuer:       /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial:       010D0C9F432858478CB6917A39AFAA4918115A70
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/423c792a-aec0-33ab-aaca-ea6545d77459.roa
Signing time:             Tue 15 Oct 2024 13:00:47 +0000
ROA not before:           Tue 15 Oct 2024 13:00:47 +0000
ROA not after:            Mon 13 Jan 2025 14:00:47 +0000
asID:                     394285
IP address blocks:        2606:a100:c000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8c:b6:91:7a:39:af:aa:49:18:11:5a:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
        Validity
            Not Before: Oct 15 13:00:47 2024 GMT
            Not After : Jan 13 14:00:47 2025 GMT
        Subject: CN=c7069948-0758-434a-8afb-65383678ff73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:68:76:81:26:8a:1e:a2:e0:0f:60:b2:f1:5c:
                    fa:55:c7:85:b9:74:e2:06:6c:b6:6a:87:f3:63:79:
                    a7:ab:a3:33:bb:97:f1:52:41:64:8f:f3:b8:15:54:
                    08:0a:b2:a1:0d:95:50:84:3c:96:cd:bf:d9:a0:6c:
                    5f:be:69:83:19:41:7e:d1:e9:57:1f:70:e6:15:22:
                    52:61:66:ce:46:52:6c:a3:4c:5a:5e:71:39:48:58:
                    57:98:25:44:8d:79:80:9a:1a:4d:48:f9:3b:32:de:
                    00:54:56:a6:1f:a5:14:20:f6:d5:3d:18:8b:34:5c:
                    b6:a5:f6:c5:27:1b:2a:14:5a:98:24:09:76:3b:4f:
                    7b:ea:67:9d:46:c6:16:c5:45:f9:8b:da:64:e9:93:
                    67:00:29:89:e0:0b:dc:78:e1:8c:6c:8e:b9:1b:82:
                    18:85:21:3a:82:13:a4:0c:ce:d1:39:97:78:52:78:
                    c1:a5:0d:d8:6d:4d:a4:e1:0c:67:70:13:f8:3f:3c:
                    d7:48:2a:d3:80:9c:00:e1:4d:16:d3:b7:42:8d:20:
                    bb:c5:47:97:ec:58:1c:ff:c8:06:4a:c7:ea:7a:26:
                    ce:32:3c:47:50:d8:7d:0e:72:fd:d9:9b:ca:1a:6b:
                    05:9d:6e:99:ad:a3:b2:24:8b:a4:d7:40:a3:5a:e4:
                    af:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:3A:8E:3C:B6:E3:42:50:35:79:CB:47:12:94:94:22:FA:9B:D3:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/423c792a-aec0-33ab-aaca-ea6545d77459.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl

            X509v3 Authority Key Identifier:
                keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:a100:c000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:02:30:4b:7a:d1:4c:0b:3c:35:79:be:b4:8b:8f:9e:7e:e0:
         ce:b7:6b:f7:71:58:1b:78:11:d7:25:b5:fa:54:53:a3:88:0e:
         f2:da:bc:32:6d:4e:22:a4:fb:67:94:ce:21:e2:c1:14:31:3c:
         6c:e5:fd:3b:c2:b2:12:dd:37:bc:0d:0c:ec:68:5c:48:8e:be:
         34:41:f3:47:98:0f:fb:51:6d:a4:16:e7:ad:dc:59:8f:0b:1a:
         df:fb:49:fb:0c:35:6d:99:b4:1c:fc:d3:db:f7:89:ea:6e:e8:
         92:85:ff:61:27:ad:8a:aa:ac:ba:42:d3:4f:5f:88:32:e7:8e:
         d5:ea:c7:eb:f9:6d:0e:f9:ea:52:7d:45:a3:1d:70:98:13:a4:
         f1:9d:e5:0b:ac:80:1a:2c:6f:fe:bf:fe:24:29:3a:19:31:5f:
         d2:ed:da:a0:20:ae:3b:d0:65:82:f3:18:c8:ce:3d:bd:e2:0d:
         c6:e7:0e:cb:1c:d5:12:c1:fd:00:fe:de:cc:5f:5a:b2:d5:64:
         fd:bf:1c:c5:e7:5e:1a:47:3d:f3:6c:56:6b:03:2c:00:36:3c:
         87:a2:4f:73:8d:87:5c:c4:ed:7f:85:db:f4:4f:c3:45:52:62:
         f3:3d:09:0d:eb:78:9a:d4:5e:ba:09:1c:02:d3:46:9d:c6:62:
         9a:9a:3e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:55:53 2024 by rpki-client on console-ams.rpki-client.org