Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5fcf66e7-5162-3106-b4a2-d7508273634f.roa
File:                     5fcf66e7-5162-3106-b4a2-d7508273634f.roa (raw, json)
Hash identifier:          rfrCbDDvlmurCykqC/S1KK5tjf3Nw1vo1zo4q2TZxz8=
Subject key identifier:   77:22:B4:9A:12:1B:CD:71:E3:65:4F:A0:A5:72:85:DA:CC:23:3B:1A
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584722A097A9B14F7173F6922E80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5fcf66e7-5162-3106-b4a2-d7508273634f.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     10838
IP address blocks:        2605:e000:40b::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a0:97:a9:b1:4f:71:73:f6:92:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=bcc3c20c-bae5-4dd6-aa5c-763d02fdafb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:dc:6c:e7:bd:7f:c8:b1:11:9e:0e:20:b3:80:
                    14:de:da:77:60:60:52:90:72:e3:42:2a:fc:ef:22:
                    57:d1:39:0b:b2:42:d0:d0:24:c1:3c:2a:19:d1:5a:
                    82:8b:42:81:a4:b9:bd:b4:87:b6:22:cd:0f:e5:e6:
                    62:11:c8:96:41:fd:0c:d6:8f:c3:5d:b0:a5:07:e1:
                    e8:93:00:f8:e3:82:a0:57:e4:73:a8:13:d3:c6:21:
                    0a:34:d0:ce:0d:b6:3c:84:96:de:27:3a:29:48:e7:
                    e5:18:09:35:96:22:57:5f:c7:95:6a:78:5a:03:55:
                    d8:44:4b:3f:83:a1:e1:2a:9c:aa:48:4c:f4:20:cc:
                    09:b4:1d:88:ce:3f:83:50:04:2b:1c:83:5b:20:ba:
                    cd:5b:da:50:8d:45:7a:a8:74:76:6e:a1:0f:1d:74:
                    e2:fa:f1:96:a7:6d:bd:7c:a2:a8:15:ab:a0:78:9a:
                    f9:c6:a2:ab:0c:11:cb:63:15:11:a9:c3:90:2a:e3:
                    fd:9a:4d:c6:99:c7:8e:82:19:00:82:ac:59:30:58:
                    d2:a4:3e:0a:23:92:b2:81:fb:9d:8e:ef:de:29:e4:
                    db:52:7d:0b:8d:1e:84:47:f6:b1:aa:b7:a7:e8:2f:
                    66:13:5b:37:5d:94:73:60:d3:04:da:25:38:58:10:
                    78:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:22:B4:9A:12:1B:CD:71:E3:65:4F:A0:A5:72:85:DA:CC:23:3B:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5fcf66e7-5162-3106-b4a2-d7508273634f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:e000:40b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:c4:ca:a3:0d:51:44:aa:02:54:10:11:6e:5b:29:18:d3:87:
         d5:bb:82:c0:7b:db:b1:2f:eb:b1:86:56:fb:ce:1b:95:4f:28:
         d9:1a:a0:88:23:69:db:4d:9e:65:82:04:2a:ac:b0:dd:55:9e:
         c1:6b:ad:3f:ea:ff:d9:7e:bc:53:cd:13:e5:f3:3b:ad:07:4f:
         30:9d:6f:18:f9:6c:6f:51:c2:a9:db:01:60:b5:72:f6:33:f1:
         49:3a:46:3f:0e:e3:7a:08:a1:42:6c:12:11:3f:1a:ea:95:b2:
         15:5a:2d:f6:13:47:02:6e:b1:28:0c:83:73:e8:3c:81:cf:56:
         69:9b:cf:7e:17:93:f0:71:bc:c8:9d:d6:7e:3c:11:27:1e:fa:
         96:55:35:48:13:1a:9b:62:9a:63:99:92:8a:61:1d:7c:64:b8:
         d0:d3:a5:cd:4a:7e:ac:f6:80:2c:cb:ae:00:45:b3:77:a9:7f:
         b4:2a:17:99:5d:3b:16:92:f1:d7:5c:a6:1c:96:a3:14:52:35:
         ff:ea:a9:d1:cd:fa:ff:7e:bc:a8:e8:91:87:96:95:19:f8:24:
         03:21:23:6b:c2:e0:60:59:a0:9c:6c:4d:92:6b:b9:e1:ed:18:
         a6:00:c7:96:f5:61:c0:7b:36:b5:24:c0:4b:d9:fe:9e:06:33:
         9f:c9:4b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:28 2024 by rpki-client on console-fra.rpki-client.org