Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24d6cba8-85d8-4359-a10e-8e9ab867266a/72168295-8ea7-3c44-9003-58938d256c37.roa
File:                     72168295-8ea7-3c44-9003-58938d256c37.roa (raw, json)
Hash identifier:          Q7E9/41dzOcvLNQZrgqWTdiaAm0YcTBR7ulAuDsyVK8=
Subject key identifier:   F7:A7:7B:5C:B7:06:A7:44:50:D5:DB:7F:D1:12:DF:8B:74:FF:FE:91
Certificate issuer:       /CN=24d6cba8-85d8-4359-a10e-8e9ab867266a
Certificate serial:       010D0C9F43285847CBA47D25D87096BB97EA9D00
Authority key identifier: 75:23:3A:57:80:8C:E7:C1:7F:3E:ED:23:59:A2:C1:0A:00:40:8E:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24d6cba8-85d8-4359-a10e-8e9ab867266a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24d6cba8-85d8-4359-a10e-8e9ab867266a/72168295-8ea7-3c44-9003-58938d256c37.roa
Signing time:             Thu 07 Nov 2024 02:00:28 +0000
ROA not before:           Thu 07 Nov 2024 02:00:28 +0000
ROA not after:            Wed 05 Feb 2025 02:00:28 +0000
asID:                     21738
IP address blocks:        2607:c2c0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24d6cba8-85d8-4359-a10e-8e9ab867266a/24d6cba8-85d8-4359-a10e-8e9ab867266a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24d6cba8-85d8-4359-a10e-8e9ab867266a/24d6cba8-85d8-4359-a10e-8e9ab867266a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24d6cba8-85d8-4359-a10e-8e9ab867266a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cb:a4:7d:25:d8:70:96:bb:97:ea:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24d6cba8-85d8-4359-a10e-8e9ab867266a
        Validity
            Not Before: Nov  7 02:00:28 2024 GMT
            Not After : Feb  5 02:00:28 2025 GMT
        Subject: CN=3ef7fc17-c702-40de-b524-2b5739e41ab2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a0:6f:52:c7:46:f7:91:62:56:b8:a4:8f:c3:
                    1d:51:c7:ce:a5:35:a0:6c:88:c8:2f:a1:ee:30:ee:
                    43:50:99:dd:99:2d:e5:8a:b7:23:9a:d4:85:1b:d5:
                    22:1c:93:79:ec:8d:a0:5c:68:14:4f:f6:dc:9e:1c:
                    95:45:df:f0:b8:42:c6:d0:c7:64:00:42:c1:23:7a:
                    59:be:8f:86:3b:f9:23:a1:30:98:00:54:96:65:ca:
                    0f:89:65:fa:06:6b:f3:21:b6:92:bd:7a:09:25:b9:
                    d1:57:fd:c1:3b:5d:da:d1:cd:ad:59:34:2a:ad:86:
                    06:e1:d3:b7:42:a3:2d:a3:78:a9:e5:0b:26:1f:4a:
                    a8:ce:53:11:ff:db:8d:76:15:9d:fe:70:45:43:d5:
                    9a:5e:43:6e:0b:28:61:37:be:39:0d:8b:37:df:7e:
                    e9:2e:69:ef:21:73:c4:da:d5:50:34:4a:e8:65:e3:
                    2d:ad:1e:30:a7:39:b9:8a:34:e7:c6:b3:29:1e:59:
                    e3:85:77:f3:f1:44:ef:9a:6a:e9:bc:af:a2:dd:62:
                    3b:86:85:5e:a7:7c:6e:ab:1c:90:45:02:2f:83:4c:
                    d6:68:38:c1:5e:8b:7b:0e:26:6e:7d:19:14:50:29:
                    2a:49:d8:59:51:d6:6c:cb:f4:98:30:9e:d7:7e:0a:
                    78:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:A7:7B:5C:B7:06:A7:44:50:D5:DB:7F:D1:12:DF:8B:74:FF:FE:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24d6cba8-85d8-4359-a10e-8e9ab867266a/72168295-8ea7-3c44-9003-58938d256c37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24d6cba8-85d8-4359-a10e-8e9ab867266a/24d6cba8-85d8-4359-a10e-8e9ab867266a.crl

            X509v3 Authority Key Identifier:
                keyid:75:23:3A:57:80:8C:E7:C1:7F:3E:ED:23:59:A2:C1:0A:00:40:8E:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24d6cba8-85d8-4359-a10e-8e9ab867266a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:c2c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:22:1f:1f:e1:50:20:16:b9:7b:28:07:ba:ec:08:2f:ac:c0:
         1e:9d:64:86:94:26:da:b8:1f:c0:cf:88:aa:2a:84:e6:bf:f6:
         83:37:15:a0:77:f2:ee:55:d5:e3:d0:2c:66:25:bc:ec:2a:8c:
         f1:39:b5:8b:f9:8a:45:b8:fd:a4:77:d5:f3:38:2a:03:fb:41:
         aa:bf:fb:5b:1c:19:ef:e9:96:ee:3a:ed:32:ac:94:d3:aa:32:
         74:5f:c3:85:0f:e8:dc:be:35:1f:e1:02:43:44:9e:4e:5a:bb:
         2c:5a:d2:58:94:27:5a:e9:71:e5:20:58:13:87:06:02:2f:8d:
         ef:9a:a6:97:53:77:88:d7:af:de:db:26:4a:68:98:db:61:e5:
         87:f2:e2:47:7d:09:cd:6e:71:5a:f7:61:0a:0c:f8:43:1e:b1:
         93:d3:41:a8:fa:ad:43:f5:6f:48:4c:75:d0:c3:2d:24:b6:67:
         39:3e:ef:4e:80:c4:6d:cd:a3:0c:ef:1f:74:19:86:63:85:f9:
         af:0f:0b:7e:03:c4:69:57:d9:47:16:26:8d:43:6d:ce:a5:83:
         ba:5e:3d:b8:85:a5:35:29:1f:50:da:b6:a8:75:e5:4d:86:b0:
         c6:63:4a:de:d2:e4:33:bc:9c:d0:29:e8:fe:1a:df:0a:ce:90:
         88:95:f3:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:37:36 2024 by rpki-client on console-fra.rpki-client.org