Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/9441e8b6-ec8f-3bca-90ab-bc76f52c4fa0.roa
File:                     9441e8b6-ec8f-3bca-90ab-bc76f52c4fa0.roa (raw, json)
Hash identifier:          ye4JGfE88BKqIPVCn/cL5cgIZ1a5T2ABqN9OKSm0+iM=
Subject key identifier:   A1:0C:89:B4:0C:C6:53:E8:55:C7:3E:96:0B:DF:C0:F3:46:81:FA:21
Certificate issuer:       /CN=c3c17db7-204c-41e2-85ca-6a5a448a8b88
Certificate serial:       010D0C9F432858478057F7EF4E17A10BC00587C0
Authority key identifier: 7D:2D:BA:FF:43:DB:E9:72:96:E9:45:87:95:5C:45:72:54:D4:6B:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/9441e8b6-ec8f-3bca-90ab-bc76f52c4fa0.roa
Signing time:             Fri 11 Oct 2024 02:40:40 +0000
ROA not before:           Fri 11 Oct 2024 02:40:40 +0000
ROA not after:            Thu 09 Jan 2025 03:40:40 +0000
asID:                     396982
IP address blocks:        2607:1c0:241:40::/60 maxlen: 60

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/c3c17db7-204c-41e2-85ca-6a5a448a8b88.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/c3c17db7-204c-41e2-85ca-6a5a448a8b88.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:80:57:f7:ef:4e:17:a1:0b:c0:05:87:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3c17db7-204c-41e2-85ca-6a5a448a8b88
        Validity
            Not Before: Oct 11 02:40:40 2024 GMT
            Not After : Jan  9 03:40:40 2025 GMT
        Subject: CN=fa446181-cb97-4c74-b89a-456f68d93607
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:cc:80:9a:bf:3f:32:20:51:08:74:14:ed:62:
                    dd:aa:d5:02:b2:a3:6c:3e:ee:c0:12:29:03:2a:ba:
                    90:0d:a8:c1:bb:c1:ea:33:e7:d7:0f:99:74:80:81:
                    50:4f:63:de:e0:ee:9c:cc:0b:bd:fa:7c:85:5b:5b:
                    39:53:80:eb:6c:e6:c1:80:8c:3c:22:9e:67:3f:d3:
                    e9:a6:02:2d:58:31:48:bc:6d:9a:60:f1:83:8f:8e:
                    bb:1e:c8:10:8f:aa:82:7d:b6:1a:1a:7d:98:39:f1:
                    57:81:17:6b:1b:d5:f2:4a:a8:8c:40:cf:c8:cb:ad:
                    23:77:0f:47:67:7e:08:23:d8:11:a5:d1:37:12:06:
                    a4:d1:bb:a5:d6:09:b1:ec:f8:c0:cb:dc:f8:db:b6:
                    9c:57:26:7f:fb:22:72:f4:51:d7:c1:53:44:f9:46:
                    fc:35:b8:fa:f8:12:50:8f:89:1c:0f:6c:1e:01:23:
                    5b:9c:0f:53:87:05:e7:84:30:54:ba:c3:f4:64:60:
                    f1:3a:cd:a3:ba:7b:75:c8:7a:8e:61:2d:9a:c2:4c:
                    b1:4d:4f:c5:67:0c:4a:7d:41:b8:2d:ad:06:7f:aa:
                    35:db:36:d8:78:26:f2:90:df:34:ed:f6:c5:49:94:
                    14:45:b6:e0:fa:f5:61:c4:15:57:3f:b5:c1:72:90:
                    d7:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:0C:89:B4:0C:C6:53:E8:55:C7:3E:96:0B:DF:C0:F3:46:81:FA:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/9441e8b6-ec8f-3bca-90ab-bc76f52c4fa0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/c3c17db7-204c-41e2-85ca-6a5a448a8b88.crl

            X509v3 Authority Key Identifier:
                keyid:7D:2D:BA:FF:43:DB:E9:72:96:E9:45:87:95:5C:45:72:54:D4:6B:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:1c0:241:40::/60

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:51:17:40:b6:5c:76:f8:fa:d4:ed:3b:9f:94:41:5e:9e:82:
         d6:78:44:ba:ed:9a:0a:8b:07:f2:27:e2:ac:83:02:0b:60:a6:
         88:ee:0f:31:6e:2d:d1:fb:dd:c6:af:25:00:7a:27:1b:35:c6:
         45:65:c4:ec:ea:49:dc:02:4b:04:c5:6f:5d:6a:b7:eb:6a:c8:
         fe:3d:e9:51:37:ec:5d:27:56:e9:82:1b:9f:0e:c7:2f:f5:87:
         08:07:b3:d8:a4:78:66:1f:69:c3:38:33:66:1f:dc:2a:04:67:
         9f:ca:6e:88:e2:40:97:7b:94:7b:ef:aa:ed:98:44:3b:25:7c:
         73:44:9b:63:4a:aa:9f:38:cc:ac:c3:b2:fe:92:51:3b:f7:71:
         1f:3d:64:48:07:85:6f:33:41:86:4b:d9:ae:35:29:89:4c:3d:
         1f:cb:d2:c0:cb:f9:3b:1d:af:72:94:a0:6e:69:e6:0c:e0:ef:
         74:c5:49:68:15:cd:c3:0e:df:6e:50:1a:97:da:c5:7c:c7:a1:
         e0:c3:1a:e2:c5:38:6a:29:89:f9:f3:1c:65:79:02:94:b4:be:
         54:37:48:85:29:99:e4:de:b7:e0:2f:4b:55:66:fa:04:bf:e6:
         fc:55:e3:a3:bd:df:d4:70:2d:0a:21:27:60:86:0f:4e:5e:be:
         64:63:55:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 19:48:11 2024 by rpki-client on console-fra.rpki-client.org