Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36/e4bc3223-cb7b-325a-93cf-27d74c4acd2c.roa
File:                     e4bc3223-cb7b-325a-93cf-27d74c4acd2c.roa (raw, json)
Hash identifier:          +vSN3iSPJrOQo7NR76UYvpL2LDGfczu1q5QjfYFYTZA=
Subject key identifier:   79:54:90:01:42:83:9B:78:50:A0:69:DA:B4:D4:D0:BF:6C:C4:13:C2
Certificate issuer:       /CN=6719c5f2-5819-4972-b430-9d76eb88cb36
Certificate serial:       010D0C9F43285847CD09F584A0F69637C068B4C0
Authority key identifier: D2:1B:81:45:14:AD:B5:ED:A9:8B:2D:BF:1E:FA:41:07:50:54:AA:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36/e4bc3223-cb7b-325a-93cf-27d74c4acd2c.roa
Signing time:             Thu 07 Nov 2024 14:00:39 +0000
ROA not before:           Thu 07 Nov 2024 14:00:39 +0000
ROA not after:            Wed 05 Feb 2025 14:00:39 +0000
asID:                     397735
IP address blocks:        2605:54c0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36/6719c5f2-5819-4972-b430-9d76eb88cb36.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36/6719c5f2-5819-4972-b430-9d76eb88cb36.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cd:09:f5:84:a0:f6:96:37:c0:68:b4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6719c5f2-5819-4972-b430-9d76eb88cb36
        Validity
            Not Before: Nov  7 14:00:39 2024 GMT
            Not After : Feb  5 14:00:39 2025 GMT
        Subject: CN=6b3372fe-d34f-460d-8dd3-c47e71113529
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:fa:6c:f7:0b:6c:e9:04:0f:02:14:44:fa:d5:
                    9b:e3:98:30:a5:02:ea:a4:b0:12:81:5d:51:11:e4:
                    8a:6e:e2:af:b4:ca:70:4d:5a:88:4a:17:4a:2d:31:
                    a1:a5:f8:e8:34:88:a3:b7:8e:87:17:bc:94:df:1b:
                    d3:88:34:0e:23:e9:cc:a7:b1:69:9d:92:f1:fd:11:
                    64:76:60:7d:b8:3a:ad:e8:7d:32:66:38:75:e5:a1:
                    07:eb:19:a8:cc:75:e9:c7:c5:32:21:f5:f2:41:59:
                    46:e0:43:87:5b:ab:f1:3c:b7:b2:ec:15:a9:ff:63:
                    40:53:47:7f:29:c0:84:16:5b:da:82:b2:4b:7e:5b:
                    73:ee:ce:81:d6:9f:df:c2:9c:f8:60:7c:02:39:91:
                    38:b6:31:f9:de:e8:78:c9:55:0f:fc:1b:31:8b:6e:
                    ce:77:f0:8d:4b:6e:12:a9:ac:04:6e:1e:8c:ea:d8:
                    ab:16:17:01:0e:c5:02:ff:b1:1a:c4:5e:91:dc:a0:
                    3b:9c:14:00:2c:9b:61:c3:02:57:19:34:fd:85:e9:
                    a1:1b:34:e7:df:7d:56:3f:00:1b:c4:29:2d:c9:17:
                    00:97:2f:a2:09:a4:fa:14:47:05:b5:5e:a8:b7:0f:
                    f3:1a:c7:e3:7f:06:0d:f2:a3:17:50:f7:4f:ad:14:
                    cf:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:54:90:01:42:83:9B:78:50:A0:69:DA:B4:D4:D0:BF:6C:C4:13:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36/e4bc3223-cb7b-325a-93cf-27d74c4acd2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36/6719c5f2-5819-4972-b430-9d76eb88cb36.crl

            X509v3 Authority Key Identifier:
                keyid:D2:1B:81:45:14:AD:B5:ED:A9:8B:2D:BF:1E:FA:41:07:50:54:AA:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:54c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:05:cc:85:46:dd:90:b5:17:79:53:52:cd:d5:88:1a:b3:e8:
         74:91:7e:8c:fd:49:e2:48:21:56:96:ae:ff:da:b3:93:e4:f8:
         7d:70:e5:6f:e8:99:53:42:6c:43:05:67:25:a4:80:88:75:de:
         7f:0a:7d:6a:7c:d5:bb:5b:90:06:33:19:d3:8f:b5:66:7f:a6:
         d6:31:28:8e:22:98:04:85:58:d6:2d:b1:af:ac:f9:2f:d4:66:
         20:92:50:50:7b:6c:18:6c:be:0e:0c:84:5f:83:cf:2d:7b:b8:
         5e:f5:e7:0b:29:71:c9:a3:91:ba:5c:57:02:5b:49:e4:5d:bf:
         88:fd:be:66:ca:ee:45:72:57:17:93:78:5b:7c:e7:ba:10:81:
         a1:19:8d:92:5d:b7:27:03:00:c0:de:70:a1:3c:54:07:85:00:
         da:ec:3a:a7:20:e3:07:8c:4d:3a:6e:83:78:c0:07:bb:3e:6d:
         71:7e:1d:92:36:71:27:e3:30:ff:25:e6:b5:31:21:61:88:f5:
         de:bc:92:3b:a3:8b:c5:a3:9c:d2:df:29:68:ba:48:11:bc:4e:
         d9:d2:a9:6d:a3:d1:84:d4:05:ff:70:05:d8:0c:58:b3:3b:6e:
         75:d0:76:d7:88:81:ae:c1:d6:9e:b5:52:a5:f4:5e:26:c7:1a:
         7f:0d:b4:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:07:04 2024 by rpki-client on console-fra.rpki-client.org