Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a2235d90-d905-4ef7-9447-870904044658/11d908fc-bc25-34ad-bf81-bad94a354c28.roa
File:                     11d908fc-bc25-34ad-bf81-bad94a354c28.roa (raw, json)
Hash identifier:          ftaYXHh2gK5U6layKDTeUbVyten1N6m3BHbHeBEWLhE=
Subject key identifier:   80:E8:80:28:2B:6B:4C:3B:E9:D0:36:BD:E1:7C:0B:B4:45:7E:85:83
Certificate issuer:       /CN=a2235d90-d905-4ef7-9447-870904044658
Certificate serial:       010D0C9F4328584754E0EB19548B440D58A231A0
Authority key identifier: 12:9D:20:82:1C:89:AE:7B:FE:2D:45:F0:6A:9E:F2:78:8B:0C:1A:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a2235d90-d905-4ef7-9447-870904044658.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a2235d90-d905-4ef7-9447-870904044658/11d908fc-bc25-34ad-bf81-bad94a354c28.roa
Signing time:             Wed 25 Sep 2024 13:00:41 +0000
ROA not before:           Wed 25 Sep 2024 13:00:41 +0000
ROA not after:            Tue 24 Dec 2024 14:00:41 +0000
asID:                     16509
IP address blocks:        2607:5ac0::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a2235d90-d905-4ef7-9447-870904044658/a2235d90-d905-4ef7-9447-870904044658.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a2235d90-d905-4ef7-9447-870904044658/a2235d90-d905-4ef7-9447-870904044658.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a2235d90-d905-4ef7-9447-870904044658.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:54:e0:eb:19:54:8b:44:0d:58:a2:31:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2235d90-d905-4ef7-9447-870904044658
        Validity
            Not Before: Sep 25 13:00:41 2024 GMT
            Not After : Dec 24 14:00:41 2024 GMT
        Subject: CN=81658da3-2448-4087-ba49-4dc515b6e18b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:5d:b4:01:0d:01:6c:ff:5c:ea:ee:5f:57:05:
                    2c:23:3d:cb:22:8d:37:e0:16:0e:60:e4:98:ec:e6:
                    24:c5:15:6e:e6:87:5e:a7:d6:5e:2c:5f:78:5c:96:
                    6f:20:cb:90:88:f5:55:41:fc:8b:8d:28:31:2e:88:
                    cd:b4:4a:be:d5:22:5d:23:8a:ee:88:2a:0a:3a:20:
                    55:f6:c5:3d:a5:14:8a:9b:05:d2:51:52:56:e0:84:
                    0b:f7:27:0c:c6:8c:05:d9:bd:bd:b7:ed:7e:a5:82:
                    86:81:a5:cf:72:3b:a5:f1:de:64:63:09:e4:0f:ec:
                    35:34:12:5d:5b:99:bd:44:eb:ff:e6:90:cb:0e:e9:
                    3f:dc:33:f1:b8:0e:a9:4a:03:76:29:e2:2e:68:07:
                    76:1d:ae:20:c1:29:0d:67:3c:f4:c4:16:ef:e4:1f:
                    e8:cd:a6:10:85:e2:74:11:67:16:09:8c:23:43:26:
                    cc:15:d9:8d:11:b8:50:95:d2:11:82:89:92:13:b9:
                    79:2e:78:92:0c:c3:7e:6d:08:36:69:e5:c6:8c:b9:
                    8a:c3:36:dd:cf:01:49:80:1b:06:45:e2:33:5d:5c:
                    94:7f:ea:64:6f:03:6e:e8:26:bf:90:47:fb:5c:e6:
                    47:8d:eb:99:ad:6c:4b:5c:49:7c:45:0d:99:19:11:
                    74:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:E8:80:28:2B:6B:4C:3B:E9:D0:36:BD:E1:7C:0B:B4:45:7E:85:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a2235d90-d905-4ef7-9447-870904044658/11d908fc-bc25-34ad-bf81-bad94a354c28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a2235d90-d905-4ef7-9447-870904044658/a2235d90-d905-4ef7-9447-870904044658.crl

            X509v3 Authority Key Identifier:
                keyid:12:9D:20:82:1C:89:AE:7B:FE:2D:45:F0:6A:9E:F2:78:8B:0C:1A:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a2235d90-d905-4ef7-9447-870904044658.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:5ac0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:23:18:a3:87:d4:2e:2f:2b:41:40:22:97:b6:db:05:d0:85:
         40:0d:6d:27:f7:58:96:7d:2a:9c:4e:48:88:e5:1a:b8:76:e1:
         3b:c4:0f:1d:4c:4f:7b:8e:aa:0e:05:dc:e9:cd:22:5b:e5:fd:
         a9:27:76:b9:ab:11:d7:55:9e:e9:cb:57:6a:92:0d:ae:5c:06:
         32:7c:89:45:6e:9f:9e:3c:28:78:5d:72:cf:4b:05:35:81:8c:
         6e:58:4e:74:86:6e:79:f0:f6:66:8f:6c:60:5c:5f:1e:7e:8c:
         ae:21:db:48:98:dd:4f:82:ea:03:09:72:c9:0a:77:5d:32:bb:
         36:95:fb:95:ba:6e:7c:9f:74:d7:46:29:13:5e:d9:4a:a9:e9:
         b0:63:4a:05:96:b5:ae:8b:43:eb:e9:c4:1b:ac:2c:22:0e:7c:
         4f:bd:43:94:db:8d:11:d9:36:6f:45:3a:59:28:07:07:4a:c3:
         f2:fd:f8:90:5a:a7:55:c0:6a:ae:2a:97:ee:26:0e:71:5a:72:
         21:a7:35:b5:40:9c:b2:92:9a:1a:0b:73:81:14:5c:f4:20:42:
         0e:2b:91:b9:e7:33:a2:fe:49:14:ef:27:f1:2b:bb:ff:76:a6:
         ba:74:28:bc:15:6a:85:fd:be:26:9a:bc:af:fb:70:fa:6f:59:
         7a:ff:f6:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:35:26 2024 by rpki-client on console-fra.rpki-client.org