Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12352ca2-f873-472d-a22f-0aebad4ce9bd/081735a6-8094-3e29-bc11-0063831723b9.roa
File:                     081735a6-8094-3e29-bc11-0063831723b9.roa (raw, json)
Hash identifier:          SCVH0ZGZZZXyLt9kbOzPlvRzv1tSvG5P5V1j1t+9BhY=
Subject key identifier:   E4:BC:58:3E:BB:F1:2B:B2:84:13:89:DD:F6:AA:55:7B:F6:B6:D5:D0
Certificate issuer:       /CN=12352ca2-f873-472d-a22f-0aebad4ce9bd
Certificate serial:       010D0C9F43285847E4C4AA9B92527081BE1C6CE0
Authority key identifier: 1F:A7:08:1F:E7:AA:64:71:26:58:3A:97:9D:7F:6A:7D:85:40:C9:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12352ca2-f873-472d-a22f-0aebad4ce9bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12352ca2-f873-472d-a22f-0aebad4ce9bd/081735a6-8094-3e29-bc11-0063831723b9.roa
Signing time:             Sat 16 Nov 2024 02:00:28 +0000
ROA not before:           Sat 16 Nov 2024 02:00:28 +0000
ROA not after:            Fri 14 Feb 2025 02:00:28 +0000
asID:                     30674
IP address blocks:        2605:c780::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12352ca2-f873-472d-a22f-0aebad4ce9bd/12352ca2-f873-472d-a22f-0aebad4ce9bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12352ca2-f873-472d-a22f-0aebad4ce9bd/12352ca2-f873-472d-a22f-0aebad4ce9bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12352ca2-f873-472d-a22f-0aebad4ce9bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e4:c4:aa:9b:92:52:70:81:be:1c:6c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12352ca2-f873-472d-a22f-0aebad4ce9bd
        Validity
            Not Before: Nov 16 02:00:28 2024 GMT
            Not After : Feb 14 02:00:28 2025 GMT
        Subject: CN=ceba6c55-a0d8-4af1-ad20-f19c94e9bd94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:de:40:1b:84:f4:78:5a:ae:14:11:b2:8e:ee:
                    bb:48:3b:2e:e8:38:0d:ce:78:3e:9e:3e:6e:d7:00:
                    50:14:44:c4:79:20:5f:02:3e:22:e0:d8:91:53:50:
                    32:3f:7e:dd:f6:c1:60:54:76:f4:a9:c7:9a:6c:3c:
                    cf:99:1e:d5:89:d8:df:37:2b:61:60:58:19:f0:d4:
                    33:81:51:55:14:63:a9:ae:c1:9c:de:43:bc:4f:bd:
                    7c:f6:c5:01:12:99:ba:5d:f9:75:9e:aa:6c:cc:bd:
                    c0:be:d8:83:82:d5:fa:1e:f4:5c:e1:5b:78:3f:18:
                    f9:20:e8:40:3e:d9:a4:38:da:4a:1f:59:45:76:ed:
                    f4:f3:6e:c8:b5:1e:85:2f:94:a4:cd:1e:cf:76:fd:
                    8a:f3:1f:73:c0:ef:ac:41:76:bd:47:92:3d:46:24:
                    00:b7:88:38:67:2b:fe:6e:42:b8:a0:74:49:9c:dd:
                    c0:7a:28:de:40:d9:f0:28:b4:16:05:98:af:33:21:
                    0c:d2:92:a6:0b:21:bb:d4:8c:13:1b:61:e9:e3:d8:
                    cd:c8:2a:f4:14:f1:fd:8f:d8:0d:bd:bf:92:f7:3b:
                    f2:26:7c:76:14:9f:2d:a3:03:7b:bf:e6:e0:7d:ea:
                    67:87:e6:b4:b8:39:0d:14:11:e5:8b:c6:f2:43:7a:
                    2f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:BC:58:3E:BB:F1:2B:B2:84:13:89:DD:F6:AA:55:7B:F6:B6:D5:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12352ca2-f873-472d-a22f-0aebad4ce9bd/081735a6-8094-3e29-bc11-0063831723b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12352ca2-f873-472d-a22f-0aebad4ce9bd/12352ca2-f873-472d-a22f-0aebad4ce9bd.crl

            X509v3 Authority Key Identifier:
                keyid:1F:A7:08:1F:E7:AA:64:71:26:58:3A:97:9D:7F:6A:7D:85:40:C9:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12352ca2-f873-472d-a22f-0aebad4ce9bd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:c780::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:4f:8c:25:e2:16:6c:b5:16:1d:82:15:a3:d2:1f:10:57:f0:
         91:06:9d:59:8f:d7:a6:18:9b:35:93:72:b0:cd:ae:bc:06:54:
         f3:21:0d:44:bb:0e:12:e6:9e:6b:b1:c7:6e:9a:df:0b:a6:e6:
         88:ea:b4:ad:88:7d:44:08:65:4e:00:8a:c2:07:c6:44:5f:58:
         33:d0:86:7c:50:30:c9:46:35:d0:4f:51:d1:f3:6e:f2:93:95:
         dc:0b:5b:8d:0b:74:5c:c0:07:ae:9a:22:b5:66:ee:4d:a5:29:
         e1:77:8f:40:b1:6a:ae:cd:a5:dc:99:62:03:16:a5:d0:b9:ca:
         05:8c:66:6d:5b:27:5f:71:43:3c:96:dd:3a:9c:67:41:1b:9b:
         b8:52:19:c6:cd:ea:ef:9d:a5:b5:ea:0c:d1:dc:a3:a7:73:23:
         3f:83:20:1d:6c:60:7c:cd:6a:2a:92:a5:99:2c:59:4b:40:f2:
         b6:ee:c4:f8:53:99:05:5f:ee:ae:1e:2d:e9:80:45:28:68:c6:
         3e:7f:83:4b:9b:c5:ce:b3:c9:bd:dd:a7:1a:28:f5:c9:9f:90:
         a6:b9:50:84:f3:0d:20:4e:35:4f:b9:96:6f:07:5c:3d:a5:54:
         c3:84:69:f4:58:5f:f9:d9:7a:04:ec:37:5e:93:88:12:fc:8b:
         28:4a:47:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:18 2024 by rpki-client on console-ams.rpki-client.org