Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/38ab105d-4b60-3994-8a85-6c6fd1eb9e94.roa
File:                     38ab105d-4b60-3994-8a85-6c6fd1eb9e94.roa (raw, json)
Hash identifier:          88jCsCsiK3DMNnYaY5anmP6eoqSVZjaRJvQtLoEeIDY=
Subject key identifier:   D7:B1:EF:D8:A3:F7:CB:2D:00:27:BE:EB:22:92:01:59:36:54:B3:D2
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584722A0A7F0C9B38B79868A88E0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/38ab105d-4b60-3994-8a85-6c6fd1eb9e94.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     11955
IP address blocks:        2600:5800:f78a::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a0:a7:f0:c9:b3:8b:79:86:8a:88:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=7b1d8635-375b-49cd-b8db-eadf9eed382c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:2a:df:14:15:d4:b5:ea:de:78:55:38:ce:17:
                    ed:b9:a8:28:77:27:38:bf:45:8a:28:0f:d5:ec:a5:
                    91:dc:e7:da:5a:a6:cb:58:1d:5b:9a:97:a4:0e:6b:
                    48:2c:20:59:41:dd:34:55:c0:2d:b1:e1:1e:6e:7d:
                    17:da:9b:97:57:63:b8:d7:4b:c5:40:83:92:93:7c:
                    c3:ed:de:4e:f3:5d:20:ca:8e:f9:d8:d6:29:7d:3d:
                    38:3e:83:e0:55:fa:b2:5a:f8:00:f8:ae:87:74:54:
                    c3:4e:b4:6a:14:ff:09:19:7d:64:c5:a9:2d:1f:b8:
                    47:4b:23:5f:3d:c6:ff:89:f7:60:e6:22:72:25:1b:
                    13:e7:e1:cc:86:f2:73:0f:89:48:e5:59:d6:a0:ee:
                    e0:fb:34:fc:93:96:d6:b5:3f:c3:f1:04:6a:76:aa:
                    ef:fa:97:c3:65:b8:8f:7f:c0:38:91:26:6c:e7:4d:
                    24:96:6e:d5:a9:5a:3e:61:27:87:27:c4:f5:d1:35:
                    a7:2d:21:df:6b:52:86:9b:fe:9f:c1:44:32:cd:6b:
                    09:7d:a9:b6:3b:8a:94:a1:c7:c8:2d:06:7d:f8:f4:
                    d3:57:da:25:df:c3:cc:d5:6b:8d:59:6b:09:d5:c3:
                    33:03:20:48:a3:47:6d:d2:ac:04:86:ef:0a:7f:c9:
                    f2:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:B1:EF:D8:A3:F7:CB:2D:00:27:BE:EB:22:92:01:59:36:54:B3:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/38ab105d-4b60-3994-8a85-6c6fd1eb9e94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:5800:f78a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:fc:07:ab:1a:21:b7:33:6b:b9:30:28:04:e8:1b:8d:85:50:
         27:84:4d:b5:b1:4b:12:3b:98:4c:88:34:de:c2:59:a4:d1:d5:
         be:10:66:9c:e7:bb:86:93:96:3b:29:b6:f2:58:4d:ea:ea:d4:
         2d:18:37:92:3a:07:af:c6:6d:c6:39:d4:8f:fd:45:ad:a2:ab:
         61:2c:53:d4:af:e7:e9:bd:95:03:24:b2:0a:0d:1c:f5:cd:26:
         36:65:a0:65:f4:f1:71:9b:02:9f:45:bb:c0:96:1d:53:01:55:
         8b:61:7c:f0:78:44:02:8e:84:62:db:5d:02:8f:16:7d:ec:88:
         6d:5e:57:dd:52:e3:d3:1b:c5:43:16:8a:c3:93:18:04:72:a7:
         ba:a3:33:d1:7d:de:20:57:a3:ff:04:10:2e:82:fd:b8:e2:60:
         b9:be:20:2e:cf:6a:7c:b9:47:5d:3c:9c:e6:37:b8:af:58:18:
         92:ad:1e:9f:e0:f8:4d:e9:ac:a2:91:b8:71:d6:db:fa:9b:49:
         b1:9f:6b:88:67:72:ff:73:d2:60:d1:fc:06:28:06:6c:20:bd:
         d1:74:86:f7:de:17:e4:2b:54:c2:f3:10:b3:a5:6e:f1:be:82:
         2c:78:92:b7:07:7a:a0:0b:43:bf:fd:a5:19:ef:0f:61:bf:1c:
         a0:ad:ea:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:24 2024 by rpki-client on console-fra.rpki-client.org