Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b/7fbf44bb-01b3-3fdb-9cf7-53443e9be4f6.roa
File:                     7fbf44bb-01b3-3fdb-9cf7-53443e9be4f6.roa (raw, json)
Hash identifier:          WMSMSO48fIf0H0UbFxRFSdxA0cpnUdX8m+TT8rMt/Nc=
Subject key identifier:   D3:59:06:B5:A1:E7:0A:9C:38:67:08:10:43:95:FF:20:4E:E2:2A:EE
Certificate issuer:       /CN=e175b8e9-bd62-4026-9a15-873e2b01713b
Certificate serial:       010D0C9F432858478E1BCC04392E76F61DE80300
Authority key identifier: 2A:BC:D5:04:78:55:32:C1:D5:59:35:A7:6E:88:4A:4A:AB:9F:7C:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b/7fbf44bb-01b3-3fdb-9cf7-53443e9be4f6.roa
Signing time:             Wed 16 Oct 2024 01:00:31 +0000
ROA not before:           Wed 16 Oct 2024 01:00:31 +0000
ROA not after:            Tue 14 Jan 2025 02:00:31 +0000
asID:                     3464
IP address blocks:        2607:f808::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b/e175b8e9-bd62-4026-9a15-873e2b01713b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b/e175b8e9-bd62-4026-9a15-873e2b01713b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8e:1b:cc:04:39:2e:76:f6:1d:e8:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e175b8e9-bd62-4026-9a15-873e2b01713b
        Validity
            Not Before: Oct 16 01:00:31 2024 GMT
            Not After : Jan 14 02:00:31 2025 GMT
        Subject: CN=5076dcaa-f846-49c3-98fa-998e3c31cf4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b2:53:8f:b2:bf:57:e1:11:8c:04:d5:09:39:
                    71:38:94:f2:ec:fd:3f:b8:f3:c1:27:43:fd:75:6f:
                    7e:d7:fb:bf:13:fd:bb:7b:89:99:2e:43:a7:43:fe:
                    e4:45:1c:09:41:c1:ba:a3:73:be:89:7f:42:e0:4e:
                    a1:47:84:65:85:18:8b:09:e4:15:db:62:05:53:92:
                    bd:c8:3c:73:00:77:96:f9:19:bc:92:bb:a7:68:ea:
                    1c:ce:2b:4e:ce:6b:f9:2f:97:35:d6:9a:76:90:4d:
                    a8:81:65:ea:0d:e1:66:c9:72:f9:41:7b:30:9f:89:
                    d6:d8:f6:6a:34:0f:2b:b3:ac:db:11:8c:ab:e8:45:
                    47:b4:31:f0:64:e1:5f:96:ac:bc:c3:2e:a9:ca:cf:
                    01:1d:f4:20:fb:4a:2d:1f:5c:9a:97:f2:3a:73:9f:
                    12:01:bb:41:43:0b:fe:9e:e4:51:38:a6:2c:e5:30:
                    39:7d:c8:c7:d3:07:b0:da:41:97:eb:d0:8f:23:fa:
                    a0:80:1f:0c:33:fc:e5:15:9e:8d:8a:c9:bd:e6:50:
                    63:df:55:85:03:fe:e8:7c:59:24:14:80:e3:d8:e8:
                    3f:ed:60:35:ad:2f:60:93:a8:df:19:b4:24:10:9f:
                    85:7d:25:53:71:94:18:5e:53:59:c1:e6:1e:23:e2:
                    81:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:59:06:B5:A1:E7:0A:9C:38:67:08:10:43:95:FF:20:4E:E2:2A:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b/7fbf44bb-01b3-3fdb-9cf7-53443e9be4f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b/e175b8e9-bd62-4026-9a15-873e2b01713b.crl

            X509v3 Authority Key Identifier:
                keyid:2A:BC:D5:04:78:55:32:C1:D5:59:35:A7:6E:88:4A:4A:AB:9F:7C:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f808::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:79:bc:2a:3b:01:fb:87:7d:d3:11:9e:ac:88:66:9e:76:dd:
         2c:34:fe:ac:84:c3:05:d4:3a:d0:40:f9:55:09:94:94:14:b3:
         65:8c:07:1c:b3:0a:71:7b:f1:7a:e3:01:9b:bd:cc:e3:88:80:
         46:9d:0e:0f:29:c9:70:13:c9:b6:8b:52:47:76:c9:cf:dc:17:
         1f:53:13:23:06:9e:bb:80:f4:56:6c:16:de:41:99:d6:7d:cb:
         c5:cd:73:c5:72:78:08:5a:ac:86:e0:17:c0:b0:65:93:8d:1b:
         00:c0:0e:71:55:f5:45:74:5a:52:09:02:6a:fa:c9:2c:f6:d7:
         47:a1:51:f5:f7:fe:f5:34:01:d9:8a:66:52:9e:12:02:9b:51:
         af:dd:b5:77:aa:e7:ee:45:17:50:a2:25:9f:c6:ed:cd:85:0b:
         ad:a4:fd:73:e9:41:4d:a2:9d:90:53:85:4d:07:f6:ae:94:94:
         03:27:95:3a:5a:2f:e7:88:b7:e5:eb:2a:9e:91:5c:59:91:c1:
         56:5c:d0:b5:f2:8c:8d:63:6c:a8:51:dc:f1:b2:32:9b:98:4b:
         2c:fe:eb:56:da:1f:66:f9:47:92:86:c1:d5:81:45:38:0b:a3:
         a8:59:c3:19:1f:4b:91:3b:ac:e9:fc:c8:61:78:06:fa:3a:1f:
         bf:f7:68:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:38 2024 by rpki-client on console-ams.rpki-client.org