Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/b7ba221b-48ce-3f30-a243-211b86357982.roa
File:                     b7ba221b-48ce-3f30-a243-211b86357982.roa (raw, json)
Hash identifier:          v1wgltus2IRGKZ8tcneL110WGldYXVZQsPI+jgMWRLk=
Subject key identifier:   A2:45:DE:24:D3:92:18:C9:8F:58:68:BC:C2:E2:91:E2:31:1D:83:F2
Certificate issuer:       /CN=4d80daa5-79dc-4c2a-8879-248a3f3e339c
Certificate serial:       010D0C9F4328584752835ABEE5B6A30EE302DD00
Authority key identifier: 45:24:B4:3E:8E:13:30:ED:D5:96:0D:39:A0:C5:0D:3D:96:C0:56:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/b7ba221b-48ce-3f30-a243-211b86357982.roa
Signing time:             Tue 24 Sep 2024 16:40:54 +0000
ROA not before:           Tue 24 Sep 2024 16:40:54 +0000
ROA not after:            Mon 23 Dec 2024 17:40:54 +0000
asID:                     16509
IP address blocks:        2607:d540:fc0::/42 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/4d80daa5-79dc-4c2a-8879-248a3f3e339c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/4d80daa5-79dc-4c2a-8879-248a3f3e339c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:52:83:5a:be:e5:b6:a3:0e:e3:02:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d80daa5-79dc-4c2a-8879-248a3f3e339c
        Validity
            Not Before: Sep 24 16:40:54 2024 GMT
            Not After : Dec 23 17:40:54 2024 GMT
        Subject: CN=a1e7d5d1-d4de-440b-8420-461b81853ce7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:40:22:1c:b6:d8:20:a4:75:a3:36:9c:4b:f4:
                    b2:63:83:40:49:ce:ad:5c:72:88:54:cb:e2:cc:3f:
                    aa:a6:b9:bc:92:38:6e:48:28:5e:c3:cd:3d:21:c3:
                    ff:6d:ac:18:a6:a7:9c:f3:d6:8a:c9:6a:63:15:ac:
                    76:75:37:8c:bd:67:3b:36:8f:58:22:ec:3b:02:bc:
                    5b:fa:80:11:a4:42:23:4d:f6:e6:55:c0:06:7a:58:
                    cd:bc:15:4f:a0:dd:cd:c5:31:ad:6a:57:56:be:ce:
                    57:f9:99:82:a3:3e:91:b1:d6:c3:20:c3:1e:a3:30:
                    04:10:0c:a3:01:4b:99:9a:f2:6b:85:c2:e6:df:ce:
                    8e:11:a6:fc:cc:d9:07:3b:ae:39:6a:d9:21:fa:2d:
                    9d:7f:d6:56:ac:cf:93:8b:5f:2e:58:42:6c:08:c8:
                    c5:fa:41:7c:45:11:ba:67:f0:a6:6c:03:44:36:85:
                    be:da:a7:c1:e9:00:47:b9:54:f5:cb:03:3e:f0:ae:
                    b0:ba:fc:91:6c:40:d8:97:93:7e:2e:90:25:e7:46:
                    f7:87:4d:ea:42:3a:88:0d:64:c6:47:34:a0:b5:82:
                    49:d4:9f:25:85:76:da:36:6a:34:b3:15:6f:a7:00:
                    5a:91:26:64:70:7d:19:97:ec:df:d9:86:41:bc:be:
                    38:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:45:DE:24:D3:92:18:C9:8F:58:68:BC:C2:E2:91:E2:31:1D:83:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/b7ba221b-48ce-3f30-a243-211b86357982.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/4d80daa5-79dc-4c2a-8879-248a3f3e339c.crl

            X509v3 Authority Key Identifier:
                keyid:45:24:B4:3E:8E:13:30:ED:D5:96:0D:39:A0:C5:0D:3D:96:C0:56:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:d540:fc0::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:a6:ed:b2:09:2e:5e:9f:4d:7a:1b:45:3c:50:ef:08:d6:e9:
         83:4b:fd:66:98:88:6b:08:40:e7:23:7c:d4:83:6b:b3:f9:2c:
         9d:c2:0a:22:09:c7:6d:45:26:af:eb:20:3b:f1:7b:ca:70:97:
         60:ec:ae:74:3f:2c:5e:98:e3:f6:8d:91:0b:86:b9:aa:4d:5a:
         4f:3c:d2:49:47:67:e2:5e:93:8b:1f:15:74:b7:72:91:64:34:
         a1:c4:dc:08:01:c4:43:39:8b:7b:b3:72:cd:e8:a7:c7:ec:ca:
         e8:37:25:94:00:5b:58:ab:da:f9:84:1b:5a:88:f3:6c:36:27:
         9c:94:01:30:f9:b2:d5:ec:8c:04:04:ef:cc:fd:02:44:94:5a:
         a1:85:9c:12:20:5e:ad:8b:9d:79:04:8a:54:9a:9a:c3:0a:08:
         f7:ea:a0:85:24:88:5a:3c:9c:66:30:a6:f2:d8:99:c2:af:a3:
         55:4d:c8:85:a2:12:9a:3a:7d:ee:62:c7:20:c1:50:d0:6d:89:
         e1:41:cd:0e:4d:68:21:ea:79:70:5e:29:56:53:73:0b:fe:d2:
         5f:4e:3c:d0:1b:01:d8:f0:ee:8e:cd:93:8f:fb:8f:e9:b3:11:
         3f:65:c9:83:1d:9a:d4:ca:51:94:54:4e:7f:5e:52:0c:bf:50:
         f9:dd:eb:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:35:20 2024 by rpki-client on console-fra.rpki-client.org