Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c264ed0-521b-453b-b8f6-85ab4d47c967/1daa9c96-6c77-3e9b-8931-9c894798cfc9.roa
File:                     1daa9c96-6c77-3e9b-8931-9c894798cfc9.roa (raw, json)
Hash identifier:          TUAHYFmf3yYQkHnyln8vlrSrW5P8CCWcOMFteP5fV5I=
Subject key identifier:   A9:8D:BE:96:FC:DD:E6:F9:15:1E:D3:47:19:AB:77:BB:37:1C:25:AF
Certificate issuer:       /CN=5c264ed0-521b-453b-b8f6-85ab4d47c967
Certificate serial:       010D0C9F43285847DC64AF26422B0324F9967C00
Authority key identifier: 9F:28:CD:08:1C:CC:44:29:16:B0:7C:6D:18:9B:2E:B9:E6:02:4F:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c264ed0-521b-453b-b8f6-85ab4d47c967.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c264ed0-521b-453b-b8f6-85ab4d47c967/1daa9c96-6c77-3e9b-8931-9c894798cfc9.roa
Signing time:             Wed 13 Nov 2024 02:00:28 +0000
ROA not before:           Wed 13 Nov 2024 02:00:28 +0000
ROA not after:            Tue 11 Feb 2025 02:00:28 +0000
asID:                     55230
IP address blocks:        2604:c580::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c264ed0-521b-453b-b8f6-85ab4d47c967/5c264ed0-521b-453b-b8f6-85ab4d47c967.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c264ed0-521b-453b-b8f6-85ab4d47c967/5c264ed0-521b-453b-b8f6-85ab4d47c967.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c264ed0-521b-453b-b8f6-85ab4d47c967.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:dc:64:af:26:42:2b:03:24:f9:96:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c264ed0-521b-453b-b8f6-85ab4d47c967
        Validity
            Not Before: Nov 13 02:00:28 2024 GMT
            Not After : Feb 11 02:00:28 2025 GMT
        Subject: CN=019847fd-419a-4034-a87f-12635627c3ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:07:ec:68:f3:02:9d:17:82:f2:c3:d3:75:c7:
                    b4:43:6a:91:a3:12:aa:49:b2:95:cb:62:76:da:6d:
                    03:09:b7:7e:92:5c:88:32:75:f4:54:60:34:1a:e3:
                    aa:f7:df:9d:ac:8b:db:64:02:f0:c6:e8:0d:0e:36:
                    a0:b5:07:5d:fb:3c:02:00:c6:61:5a:7d:12:6b:05:
                    18:ab:85:37:4a:16:4d:91:d0:86:f9:4d:6b:b2:fd:
                    76:a7:0d:b1:fb:f4:3e:9b:93:2d:82:79:20:54:62:
                    66:4e:83:b1:60:77:67:0a:2e:39:7d:99:0c:79:df:
                    15:24:cf:1b:8a:e4:94:7c:f6:b6:52:83:d8:6e:c3:
                    69:a1:92:93:7e:54:cd:28:37:2e:b0:2b:b0:ed:d5:
                    4f:5d:6e:e5:2c:05:7b:e9:a1:1f:68:57:75:1c:38:
                    ed:ba:1e:7a:e1:83:4f:0c:c8:4b:d6:26:56:94:a7:
                    d0:d9:f7:77:d9:d3:71:ec:49:10:b1:e6:8e:c5:83:
                    0a:3b:0e:0a:84:db:37:f3:d0:2a:c4:7c:6d:f6:84:
                    68:a6:33:1c:41:41:ae:7b:06:79:ac:62:77:56:09:
                    d5:1a:d2:f6:1c:1b:3a:f0:75:02:7c:f2:9b:04:3b:
                    30:a9:71:92:0a:ce:a7:0f:16:de:6c:a0:8a:3b:5d:
                    ed:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:8D:BE:96:FC:DD:E6:F9:15:1E:D3:47:19:AB:77:BB:37:1C:25:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c264ed0-521b-453b-b8f6-85ab4d47c967/1daa9c96-6c77-3e9b-8931-9c894798cfc9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c264ed0-521b-453b-b8f6-85ab4d47c967/5c264ed0-521b-453b-b8f6-85ab4d47c967.crl

            X509v3 Authority Key Identifier:
                keyid:9F:28:CD:08:1C:CC:44:29:16:B0:7C:6D:18:9B:2E:B9:E6:02:4F:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c264ed0-521b-453b-b8f6-85ab4d47c967.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:c580::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:d9:b8:a5:5d:a3:68:ee:39:72:72:98:d5:12:31:70:48:3f:
         82:db:0c:32:8d:a3:9c:a9:40:db:73:07:d7:49:ea:9a:02:e0:
         4e:65:8c:07:dd:b6:11:b1:2b:5a:9e:d8:c0:be:23:5c:e2:ad:
         e2:b9:2f:00:00:de:29:71:bb:4b:c2:06:8e:ae:9e:70:a4:fc:
         41:da:03:47:9d:25:6e:c9:db:36:25:38:90:51:f4:c1:4f:3e:
         61:82:11:a2:a5:96:04:7f:42:0f:b7:a2:d2:e5:23:32:46:2e:
         54:3a:a9:7a:dd:f6:60:4a:ca:51:0f:f5:1f:8a:65:f9:42:04:
         30:09:e9:c2:1e:bb:63:be:52:9a:27:83:ec:ba:ec:52:86:2c:
         97:24:4e:81:86:71:64:d1:09:d0:72:9a:38:c6:69:a2:c9:7c:
         a4:97:4d:c7:a0:1d:2b:73:60:1b:18:82:ed:9c:aa:c0:fc:b4:
         9a:3e:ba:ae:49:0f:e4:2d:ca:3f:2a:19:9f:b0:20:26:68:fb:
         ce:36:f2:a9:e8:0f:e5:36:7d:b3:00:86:35:f8:88:15:eb:39:
         6f:fd:ac:e8:d6:ce:60:5c:9e:4f:49:aa:5f:6b:57:b8:dc:b5:
         a6:b8:71:60:33:88:d8:22:08:3c:82:ce:2b:8c:a2:1f:52:a7:
         2a:41:33:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:02:13 2024 by rpki-client on console-ams.rpki-client.org