Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc/cd63a45e-2751-3074-836a-cb6f05c00e47.roa
File:                     cd63a45e-2751-3074-836a-cb6f05c00e47.roa (raw, json)
Hash identifier:          GjC+U5mkE8tXki0p1xE67yV/cTSbBX7hOnMY/8f14ZQ=
Subject key identifier:   21:D2:47:80:07:9B:8A:0A:CA:89:41:07:A1:C4:82:89:2D:3A:93:6A
Certificate issuer:       /CN=3b83d5bd-d1f5-4f10-b856-389ebf4a62dc
Certificate serial:       010D0C9F43285847CF2602B0655951E631327500
Authority key identifier: 4F:BF:D5:D7:B3:DD:D2:CB:F7:C7:EA:9C:1A:CE:98:DA:DA:48:B8:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc/cd63a45e-2751-3074-836a-cb6f05c00e47.roa
Signing time:             Fri 08 Nov 2024 08:08:52 +0000
ROA not before:           Fri 08 Nov 2024 08:08:52 +0000
ROA not after:            Thu 06 Feb 2025 08:08:52 +0000
asID:                     30144
IP address blocks:        2604:9b80::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cf:26:02:b0:65:59:51:e6:31:32:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b83d5bd-d1f5-4f10-b856-389ebf4a62dc
        Validity
            Not Before: Nov  8 08:08:52 2024 GMT
            Not After : Feb  6 08:08:52 2025 GMT
        Subject: CN=e21b57c9-934b-4aa0-b308-4764da764eaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:40:4c:4c:8a:a5:17:8f:98:c5:d0:f6:b8:2b:
                    33:95:56:4c:a4:c6:21:14:bc:31:fc:d7:c6:12:39:
                    1d:03:70:78:78:a0:ba:c8:59:1e:f0:10:f2:62:35:
                    95:49:5b:e1:a8:55:af:3e:7f:74:2a:42:54:bc:b7:
                    04:22:f4:47:57:20:64:af:80:44:0f:04:11:3b:81:
                    3e:4a:b5:95:4d:30:d6:38:6d:7d:51:25:9a:8f:60:
                    e4:64:70:a1:c8:79:79:88:0b:14:fe:ab:fa:82:90:
                    d0:5a:46:9d:18:88:fc:35:97:6f:76:30:2d:96:1d:
                    a3:db:10:4a:fd:56:c5:a8:05:77:da:36:0c:77:43:
                    5b:04:82:39:2a:71:0c:c4:9a:6f:fd:df:52:1b:4f:
                    8d:5d:0d:cf:d4:b2:f0:19:5c:29:6e:6b:51:47:34:
                    89:1b:19:45:cf:db:e6:5d:8e:16:46:86:f2:cc:0f:
                    37:e8:c8:65:b1:69:ea:51:aa:99:7e:bf:80:95:67:
                    42:91:ba:45:cd:35:6e:b6:25:3c:ee:f9:1c:3b:0f:
                    04:be:39:e6:a1:31:85:17:45:21:80:e6:5f:79:e1:
                    4a:17:03:6d:5a:70:c2:5b:4c:f4:2a:97:9c:c6:a1:
                    84:ea:2d:f9:89:88:ea:ab:9d:da:e5:04:9c:c8:ed:
                    70:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:D2:47:80:07:9B:8A:0A:CA:89:41:07:A1:C4:82:89:2D:3A:93:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc/cd63a45e-2751-3074-836a-cb6f05c00e47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc.crl

            X509v3 Authority Key Identifier:
                keyid:4F:BF:D5:D7:B3:DD:D2:CB:F7:C7:EA:9C:1A:CE:98:DA:DA:48:B8:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:9b80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:9d:49:ce:6c:be:a2:95:4c:55:57:74:07:b8:4a:cc:b1:9e:
         da:55:d5:a6:48:54:04:c8:d3:9a:cd:38:1c:a1:d7:fe:a4:cf:
         b2:44:e0:b8:46:c0:6f:ca:11:52:43:3d:27:03:38:8b:13:af:
         99:ea:31:b9:69:f4:50:fd:2b:98:7e:d5:fe:6f:3e:77:80:64:
         ce:c7:4d:32:db:51:4a:99:eb:f0:55:84:6f:02:0f:9d:b5:24:
         b3:22:98:f8:aa:fd:70:4c:28:1e:e6:5f:e3:0a:40:16:91:43:
         83:38:20:f4:ba:31:df:82:8b:1d:d1:c4:cf:12:2a:38:9f:fb:
         14:88:cb:2f:bd:b3:fd:cc:9d:1a:0c:77:21:18:42:9f:ac:16:
         8c:a6:a1:57:6a:b9:4a:7c:52:d6:ab:70:c1:15:44:77:3d:54:
         d6:5a:92:ae:56:50:35:cc:5a:b9:d5:0b:e0:80:73:69:66:eb:
         89:5c:38:4a:bb:dc:5b:4b:3e:43:60:bb:88:e4:72:76:04:fc:
         6a:26:69:25:6a:67:ba:5d:8c:7e:c4:5e:39:f7:a3:a6:1a:df:
         24:28:73:05:d9:12:27:14:e7:bd:f7:b6:a8:4d:65:b8:e8:c9:
         27:2b:5e:63:ce:30:28:c0:ac:05:f3:87:04:34:a5:5d:54:58:
         fc:24:b9:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:37:16 2024 by rpki-client on console-fra.rpki-client.org