Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/ceaf5b6c-7659-3afa-b35a-011fd1d7aac0.roa
File:                     ceaf5b6c-7659-3afa-b35a-011fd1d7aac0.roa (raw, json)
Hash identifier:          yBjei69jbrLhA9vf8UynPlngCT9e+UMYwTeHmLRqZtE=
Subject key identifier:   02:5A:9E:60:B8:D5:F4:3E:19:6B:06:6E:00:CA:D5:5C:7E:73:79:C3
Certificate issuer:       /CN=4d80daa5-79dc-4c2a-8879-248a3f3e339c
Certificate serial:       010D0C9F432858475283BE5194F1EFEB46E88A80
Authority key identifier: 45:24:B4:3E:8E:13:30:ED:D5:96:0D:39:A0:C5:0D:3D:96:C0:56:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/ceaf5b6c-7659-3afa-b35a-011fd1d7aac0.roa
Signing time:             Tue 24 Sep 2024 16:41:41 +0000
ROA not before:           Tue 24 Sep 2024 16:41:41 +0000
ROA not after:            Mon 23 Dec 2024 17:41:41 +0000
asID:                     14618
IP address blocks:        2607:d540:fc0::/42 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/4d80daa5-79dc-4c2a-8879-248a3f3e339c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/4d80daa5-79dc-4c2a-8879-248a3f3e339c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Oct 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:52:83:be:51:94:f1:ef:eb:46:e8:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d80daa5-79dc-4c2a-8879-248a3f3e339c
        Validity
            Not Before: Sep 24 16:41:41 2024 GMT
            Not After : Dec 23 17:41:41 2024 GMT
        Subject: CN=ab9a0053-4597-4712-a564-05dbebeef1bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:bd:39:c0:45:a2:86:60:46:33:83:ba:b5:fc:
                    2d:34:88:93:b8:72:0b:6e:22:85:67:50:aa:45:9d:
                    db:03:ab:0a:07:21:e8:17:21:98:22:0f:56:4b:fa:
                    e7:ac:65:87:ef:1f:3f:72:54:6e:38:85:50:5f:07:
                    87:80:bb:9c:89:aa:74:f5:33:ce:59:9e:78:50:ab:
                    91:f1:ad:82:3b:c0:ff:b2:f1:2a:97:b8:3c:35:1e:
                    a2:48:26:e9:84:c4:fc:6a:28:50:dd:42:75:bf:5d:
                    a8:0c:62:4d:f3:52:63:a9:fd:4d:4c:4f:47:8f:47:
                    f3:e2:76:72:ef:4e:aa:0b:a6:ff:8a:33:a5:14:25:
                    77:64:f0:ab:22:eb:a3:e0:c8:da:d9:81:04:f6:5b:
                    df:fa:dc:e6:f8:80:3d:36:dc:25:0b:dd:9b:03:b9:
                    a1:fa:f2:5c:c1:9c:75:cc:a0:d4:3f:40:0a:6d:58:
                    a9:d3:2a:87:68:e6:05:4d:d4:4d:65:f5:de:ed:8a:
                    c6:09:01:5b:d2:03:52:ab:98:fa:70:04:86:67:bb:
                    aa:51:83:a4:07:10:7a:75:5b:57:3a:1a:f3:8d:ba:
                    12:df:e0:50:22:cb:6f:d6:79:66:38:d3:6c:3d:cb:
                    b7:17:f8:9c:f1:15:90:0e:9c:98:1b:b7:74:18:d8:
                    10:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:5A:9E:60:B8:D5:F4:3E:19:6B:06:6E:00:CA:D5:5C:7E:73:79:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/ceaf5b6c-7659-3afa-b35a-011fd1d7aac0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/4d80daa5-79dc-4c2a-8879-248a3f3e339c.crl

            X509v3 Authority Key Identifier:
                keyid:45:24:B4:3E:8E:13:30:ED:D5:96:0D:39:A0:C5:0D:3D:96:C0:56:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:d540:fc0::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d4:7d:33:57:99:ff:5a:e7:dd:ae:d5:dc:65:92:db:1c:e3:83:
         df:54:3d:91:35:82:6a:b1:02:77:98:8d:0d:e6:51:b4:c2:38:
         1d:7e:9f:43:75:3a:ad:df:35:9a:2f:c2:41:09:c9:aa:08:a5:
         2f:29:15:b1:a7:e0:bc:56:fb:70:b1:34:32:16:33:91:58:b6:
         b8:63:90:85:5e:3e:15:30:77:e8:55:86:da:59:c1:73:f0:ad:
         af:92:dc:da:49:b7:40:30:81:93:2f:3f:42:7e:96:85:5d:df:
         f6:ee:47:3c:bc:f5:1b:b0:e9:97:8d:24:84:e6:fc:7a:46:0f:
         27:72:bf:f4:f2:79:c6:6a:1b:25:6e:71:8d:ec:71:5e:a1:c5:
         e6:0b:62:fa:6e:08:74:e3:52:3f:56:be:42:e4:82:bf:56:0b:
         e4:56:1c:bc:45:ee:e0:67:20:1d:96:ee:30:2c:3f:9c:16:6c:
         a0:a3:05:3c:8c:5f:cd:e6:f9:dc:a6:e8:7e:8e:5f:d8:cc:4d:
         dd:83:88:3c:b8:94:2f:f4:73:93:f8:cf:12:b4:e4:26:a9:e2:
         cb:0b:eb:c8:69:e0:d2:52:d5:08:d5:87:00:de:e3:4f:10:10:
         b9:64:93:0a:bb:e7:7c:1d:b9:90:8b:fb:59:16:aa:2b:f6:31:
         03:b6:45:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 16:05:48 2024 by rpki-client on console-ams.rpki-client.org