Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/112b9ff8-31bc-4ba4-b852-11826fa336d5/1167dd4d-e095-33cd-88d8-ff6090bb6d13.roa
File:                     1167dd4d-e095-33cd-88d8-ff6090bb6d13.roa (raw, json)
Hash identifier:          x3u6BQpddtjmUnzsgAWBgeYvHHwQ8gNHnah2V7g9lUI=
Subject key identifier:   36:6F:96:BE:7D:38:7F:1C:38:7F:BD:7F:21:8F:0B:8E:61:CE:83:61
Certificate issuer:       /CN=112b9ff8-31bc-4ba4-b852-11826fa336d5
Certificate serial:       010D0C9F4328584757CF7F7060FB08AD717ACB80
Authority key identifier: 88:24:CE:9B:C9:2F:15:68:37:5D:8A:4A:21:97:9D:E0:38:F7:39:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/112b9ff8-31bc-4ba4-b852-11826fa336d5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/112b9ff8-31bc-4ba4-b852-11826fa336d5/1167dd4d-e095-33cd-88d8-ff6090bb6d13.roa
Signing time:             Thu 26 Sep 2024 14:13:22 +0000
ROA not before:           Thu 26 Sep 2024 14:13:22 +0000
ROA not after:            Wed 25 Dec 2024 15:13:22 +0000
asID:                     53566
IP address blocks:        2606:dd80::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/112b9ff8-31bc-4ba4-b852-11826fa336d5/112b9ff8-31bc-4ba4-b852-11826fa336d5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/112b9ff8-31bc-4ba4-b852-11826fa336d5/112b9ff8-31bc-4ba4-b852-11826fa336d5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/112b9ff8-31bc-4ba4-b852-11826fa336d5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:57:cf:7f:70:60:fb:08:ad:71:7a:cb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=112b9ff8-31bc-4ba4-b852-11826fa336d5
        Validity
            Not Before: Sep 26 14:13:22 2024 GMT
            Not After : Dec 25 15:13:22 2024 GMT
        Subject: CN=7d889557-da2a-4aa3-a761-a31473da7827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:75:c6:7c:de:9e:7b:20:69:83:47:1a:21:5b:
                    76:31:a3:fd:e6:c2:59:e5:ed:9f:c3:4b:c2:c0:dc:
                    bd:f7:72:c4:5a:6a:e4:31:19:e0:e8:2f:4f:56:b8:
                    00:00:8f:58:90:f4:28:fa:08:a3:ae:f1:e2:08:a7:
                    92:3b:ec:e0:8a:60:06:d0:69:86:f3:bb:f3:57:6b:
                    c9:78:1e:5f:cb:d1:5d:99:07:35:47:24:24:e9:e4:
                    70:42:4b:6f:1b:f7:8d:25:ad:d3:23:f4:0a:54:5e:
                    cf:97:66:ae:83:78:f0:2a:f9:61:94:04:6e:cb:8c:
                    b7:6b:70:22:e6:29:5c:a1:aa:f9:6f:22:74:9b:d6:
                    3f:5e:0c:16:9f:95:08:db:dd:52:69:a6:71:ee:ef:
                    37:3e:34:ba:87:d2:b7:ee:cf:23:be:91:4d:50:a2:
                    e3:43:b0:34:37:f6:23:6b:38:b2:50:88:f2:8c:a9:
                    0d:1b:16:52:09:22:32:3a:29:c3:42:40:16:f3:21:
                    8b:77:f6:40:f2:2f:e4:6b:65:01:5e:d8:7a:c4:9a:
                    ab:66:f5:97:01:26:0f:f6:27:44:a6:57:f4:cf:14:
                    d4:01:72:23:5a:d6:96:34:95:36:c9:a0:33:1a:fb:
                    3d:8a:d2:eb:bf:b4:99:e3:27:b7:f2:83:ce:f4:c9:
                    58:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:6F:96:BE:7D:38:7F:1C:38:7F:BD:7F:21:8F:0B:8E:61:CE:83:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/112b9ff8-31bc-4ba4-b852-11826fa336d5/1167dd4d-e095-33cd-88d8-ff6090bb6d13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/112b9ff8-31bc-4ba4-b852-11826fa336d5/112b9ff8-31bc-4ba4-b852-11826fa336d5.crl

            X509v3 Authority Key Identifier:
                keyid:88:24:CE:9B:C9:2F:15:68:37:5D:8A:4A:21:97:9D:E0:38:F7:39:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/112b9ff8-31bc-4ba4-b852-11826fa336d5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:dd80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:e8:3c:a4:ac:ea:26:a7:3f:9f:c2:24:5f:cf:96:76:4e:b0:
         60:7c:31:7c:77:b3:77:41:a5:c0:c5:f2:3c:5a:d5:3e:f3:1d:
         35:af:f3:04:a3:29:c4:d9:6e:dc:a6:ac:7e:fb:b9:f9:f7:7f:
         96:c4:1e:59:b5:3b:01:a9:16:49:c0:8f:3e:0e:42:25:75:cc:
         15:99:e3:fb:96:9d:88:34:89:27:29:92:4e:60:4c:bf:e9:44:
         43:6f:f0:9f:3c:05:0b:06:05:7b:30:88:02:3e:10:f3:0c:58:
         07:28:02:63:1e:36:54:e9:08:af:db:c7:53:9c:fe:69:b2:df:
         3e:89:c5:cc:af:bd:42:7b:3d:6a:8a:eb:ef:86:a2:ed:bd:8b:
         8a:c4:0f:a3:68:f2:b8:06:07:3c:50:35:04:28:1e:77:39:66:
         1e:57:76:b7:54:90:16:2c:dc:98:a4:5f:c7:c2:eb:48:9a:24:
         a5:c3:8b:2e:4d:e8:47:65:27:9f:36:eb:96:e6:88:bf:6c:61:
         f7:4b:55:96:e1:83:e9:2b:54:cd:b5:b8:d7:b5:97:33:09:4a:
         78:a5:60:01:ad:fb:05:17:8f:c9:30:eb:cd:04:ee:fc:56:b1:
         ed:94:e4:64:86:fd:f2:19:93:d7:d2:3a:14:c9:80:09:b1:02:
         6d:57:e5:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:36:27 2024 by rpki-client on console-fra.rpki-client.org