Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/2e34a07c-b74c-3aa4-ab19-a5965764e773.roa
File:                     2e34a07c-b74c-3aa4-ab19-a5965764e773.roa (raw, json)
Hash identifier:          qYpFZa3GBiIlkT16NrWTJKhw1vwSbRH86E0WfpvHwKI=
Subject key identifier:   31:39:ED:83:89:55:CA:C7:D8:7B:31:35:D5:FC:91:92:80:A5:C8:12
Certificate issuer:       /CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d
Certificate serial:       010D0C9F4328584789EBFCC235E2652DE85C0D40
Authority key identifier: D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/2e34a07c-b74c-3aa4-ab19-a5965764e773.roa
Signing time:             Mon 14 Oct 2024 13:00:47 +0000
ROA not before:           Mon 14 Oct 2024 13:00:47 +0000
ROA not after:            Sun 12 Jan 2025 14:00:47 +0000
asID:                     393885
IP address blocks:        2604:4a00:4000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:89:eb:fc:c2:35:e2:65:2d:e8:5c:0d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d
        Validity
            Not Before: Oct 14 13:00:47 2024 GMT
            Not After : Jan 12 14:00:47 2025 GMT
        Subject: CN=80c89723-1ecf-406e-8b7f-41a57c204777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:cc:1e:f6:08:45:1f:fe:a5:06:8b:dc:56:a2:
                    a7:9e:cf:88:0c:32:7c:d9:47:75:76:27:0a:51:04:
                    85:a2:b3:4b:c1:f9:7f:f6:19:40:c5:8c:77:b4:6c:
                    cb:b4:a4:b6:2b:28:22:61:9c:c9:ae:f0:f2:48:3d:
                    63:5e:22:e5:9d:43:6f:6b:35:7e:75:83:1e:d5:fc:
                    a2:7f:ce:04:91:4f:fd:c6:e3:ed:3c:a0:84:52:ef:
                    86:bd:d6:4e:81:14:ce:79:c1:cc:f2:77:d7:2f:6b:
                    8e:4b:bb:c5:9a:5b:00:91:71:a2:3b:df:9e:8c:b1:
                    82:f3:3d:bb:95:34:9b:03:d0:66:e7:d0:fd:1b:aa:
                    c0:83:dd:bc:d7:f7:e8:65:0d:2c:b3:36:f3:81:c2:
                    5f:a5:4b:5f:ce:f8:4b:e0:ba:1f:a3:e4:2e:fd:aa:
                    ed:fa:b3:e7:28:4c:03:ad:35:c3:18:4f:4a:9a:58:
                    c3:be:ab:57:cb:90:19:57:75:b7:f8:8f:14:3c:ec:
                    10:b6:82:03:9e:f3:10:6f:b6:5d:53:91:39:5e:6f:
                    48:99:19:e7:31:7d:bd:32:e7:38:b7:dc:d9:de:43:
                    ac:2f:f9:30:d7:1e:ee:3d:3f:d2:90:8b:a9:7d:b8:
                    a9:f4:db:7b:31:70:23:7c:32:c4:48:34:4b:02:cd:
                    9e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:39:ED:83:89:55:CA:C7:D8:7B:31:35:D5:FC:91:92:80:A5:C8:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/2e34a07c-b74c-3aa4-ab19-a5965764e773.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl

            X509v3 Authority Key Identifier:
                keyid:D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:4a00:4000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:24:97:25:34:0d:9d:02:77:40:69:5e:13:81:01:20:72:1b:
         94:eb:ae:b5:cd:f1:c9:89:b1:3f:b7:04:86:f2:f3:d4:9d:3f:
         1b:a5:04:2c:e5:17:66:22:9d:2e:52:8a:1b:09:31:4a:bb:e7:
         eb:c4:7a:60:01:45:4d:ba:b2:13:cf:89:51:02:7b:20:1e:e2:
         2a:81:ed:3a:51:0c:0c:50:3c:b9:cb:23:20:1d:81:35:0a:0d:
         83:52:00:2b:e6:59:59:cd:8e:a6:39:23:77:6d:11:6f:03:32:
         bd:64:df:54:b2:32:1d:f5:f4:b4:4c:25:d6:29:07:94:40:57:
         e8:70:a2:a9:8c:74:87:86:4f:d3:15:0f:8c:10:33:20:ae:c8:
         5a:65:8e:58:0b:d9:95:35:ac:44:b1:1b:17:a1:f3:36:eb:01:
         8a:d5:09:be:b9:c1:60:ea:98:9b:97:b6:04:a3:36:81:7f:24:
         2d:f6:0b:2a:2a:07:21:2c:fc:43:35:99:02:d7:4d:75:ce:b3:
         eb:ff:bf:fa:b3:47:5c:e3:7e:d2:3a:21:9d:df:f3:0d:c2:dd:
         a1:0d:35:6c:9d:5c:0b:54:85:56:9a:f2:92:9c:17:e0:f9:8b:
         d3:44:63:df:27:63:06:cb:bd:53:c4:9e:17:e8:15:0f:4b:87:
         52:82:b2:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:56:00 2024 by rpki-client on console-ams.rpki-client.org