Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/7aff9897-1698-329b-9320-a0c99cd37822.roa
File:                     7aff9897-1698-329b-9320-a0c99cd37822.roa (raw, json)
Hash identifier:          A9r7Ndj0Ih5MMu85S0Na6Cc/1LpXzQR/EYp35lGO+mg=
Subject key identifier:   26:03:84:53:BB:D7:2F:B8:17:0F:C3:0D:23:FA:67:48:67:0C:29:75
Certificate issuer:       /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial:       010D0C9F432858478CB690C04BE4541B7766CD80
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/7aff9897-1698-329b-9320-a0c99cd37822.roa
Signing time:             Tue 15 Oct 2024 13:00:47 +0000
ROA not before:           Tue 15 Oct 2024 13:00:47 +0000
ROA not after:            Mon 13 Jan 2025 14:00:47 +0000
asID:                     394285
IP address blocks:        2606:a100::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8c:b6:90:c0:4b:e4:54:1b:77:66:cd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
        Validity
            Not Before: Oct 15 13:00:47 2024 GMT
            Not After : Jan 13 14:00:47 2025 GMT
        Subject: CN=6e8b1cf2-51bb-44e7-b51c-0bbc46c75b02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f3:63:4f:13:3e:37:b0:13:a8:72:e2:39:e2:
                    53:2c:8e:05:63:bf:5e:6d:8d:be:60:4d:f2:cf:e2:
                    f9:29:28:a5:c6:0f:8a:3a:3e:f5:a5:ab:3c:a5:fb:
                    d6:5e:ce:77:a6:f1:99:7d:6c:87:97:ef:f9:58:9b:
                    a3:be:ba:fe:d9:cb:a6:60:fb:56:3e:bb:bf:38:05:
                    cc:ad:3c:fa:ff:3a:55:9c:13:5e:b4:00:90:41:75:
                    fd:cb:39:a0:1f:8f:cc:f5:2a:e5:07:b4:9f:bc:fc:
                    b5:20:3e:07:79:32:d7:98:db:42:49:c5:1e:cc:6a:
                    4a:68:56:8a:ba:9c:66:86:2b:c6:b0:bb:d5:22:a2:
                    79:f1:93:88:96:b7:6f:92:71:c6:ce:c8:ff:26:8b:
                    03:b4:3c:5c:e1:08:c5:78:8f:8c:26:7c:33:0a:79:
                    f2:2b:47:57:20:d0:b9:f9:a6:fd:41:c1:8f:ef:98:
                    a4:b3:f5:e2:07:28:d7:f8:ec:a1:5e:00:42:e6:e2:
                    88:b5:08:f3:b1:73:3d:9f:d7:b7:ae:6a:d9:d9:f7:
                    56:e3:d1:66:a8:8d:9e:96:e9:8d:57:c9:0e:11:3a:
                    be:a3:d1:88:fb:8f:07:d9:e0:ac:39:31:8b:02:4e:
                    02:bd:e6:4e:b4:59:b4:9a:08:c8:2e:3f:e4:23:10:
                    8a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:03:84:53:BB:D7:2F:B8:17:0F:C3:0D:23:FA:67:48:67:0C:29:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/7aff9897-1698-329b-9320-a0c99cd37822.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl

            X509v3 Authority Key Identifier:
                keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:a100::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:f7:b0:34:fa:a5:f5:75:53:cb:c7:1c:ce:4e:0f:ed:01:fa:
         77:dc:37:f4:8e:28:f3:d9:1d:5a:c5:ae:c0:eb:87:95:b5:be:
         1c:84:b6:b5:e6:d8:c7:a0:68:b9:1a:16:c1:de:b2:cb:65:0d:
         7d:c3:da:b2:3f:f2:30:64:9a:92:72:e4:1c:93:d9:ca:ab:62:
         6e:be:30:cb:6c:3c:6c:1f:25:6d:c8:73:d7:63:2c:47:01:84:
         12:92:e8:e7:28:57:f8:e4:c7:71:bd:51:95:df:fe:70:c5:8c:
         6e:7f:22:6c:c7:c0:34:8f:e3:74:89:49:99:20:b8:e0:a6:18:
         9f:29:00:24:f3:ad:a5:31:94:e3:52:95:f1:9e:49:f8:ec:99:
         04:88:54:72:95:60:0b:8d:10:fa:12:6a:45:1a:a4:55:e0:75:
         e8:85:9f:ce:b8:e0:6e:71:43:62:12:ab:28:a5:96:b6:72:b8:
         72:c1:1d:d1:ae:1c:f7:8a:d4:97:dd:2f:6b:a8:39:10:bd:2d:
         5c:1a:6a:d5:ce:b8:cc:ad:53:60:b9:94:00:30:58:84:77:2b:
         87:a7:4d:37:af:ad:51:8b:c8:96:65:72:6a:2f:89:3d:1d:11:
         d0:46:4a:ae:b9:d1:f5:c8:17:57:1b:ef:49:32:7e:4a:91:ff:
         2b:1d:f5:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:39:34 2024 by rpki-client on console-ams.rpki-client.org