Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c64a654e-ea19-3247-bc72-3e14880cec42.roa
File:                     c64a654e-ea19-3247-bc72-3e14880cec42.roa (raw, json)
Hash identifier:          Hwhln9pNkvr9matQn0MMSQCTUIfSUohuCn5TEzJ/+uM=
Subject key identifier:   CC:A3:EA:C8:10:68:C1:8B:74:43:53:C0:2D:9B:B6:FA:FB:E7:5A:A6
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584722A0B5D9DBBFD484C1EF2980
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c64a654e-ea19-3247-bc72-3e14880cec42.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     20001
IP address blocks:        2603:8001:cc00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a0:b5:d9:db:bf:d4:84:c1:ef:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=99837e86-db0a-4ffa-ac08-57c884213a63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:30:75:8d:a9:30:34:f1:56:7c:0a:38:3b:19:
                    41:c4:14:93:f4:f6:7c:4a:8a:b8:bb:f6:53:d4:e8:
                    31:6b:18:57:7e:17:e4:d8:b5:e7:b5:50:e5:9b:98:
                    16:62:71:d8:46:c0:81:69:73:e7:ea:4c:d8:ab:af:
                    8e:6a:56:63:59:f5:21:91:7c:8e:81:4f:11:0c:46:
                    b0:e8:d4:d5:45:bc:41:41:f6:64:13:97:c9:c2:d9:
                    dc:d5:40:8d:85:eb:72:b7:d7:c1:14:42:3f:f8:2e:
                    76:41:a2:2e:c4:33:af:58:7a:86:a3:b4:01:d6:fa:
                    d7:0a:5e:36:a7:da:9c:90:a7:f0:2c:fd:1e:e0:55:
                    bc:c1:ac:d4:75:cf:42:7c:c5:30:f6:48:af:52:86:
                    64:07:e8:f6:2c:ca:f1:de:e3:68:01:c1:a3:90:ec:
                    ef:bb:22:a9:8e:f1:28:95:18:50:88:b2:81:4c:a9:
                    15:0a:b0:04:fb:bb:50:51:95:47:5e:6f:d5:fc:ee:
                    08:01:ab:17:cd:43:b4:e7:da:c9:20:d1:b9:92:ee:
                    02:4a:95:ec:76:12:60:18:f4:dc:33:76:f0:5c:f6:
                    4d:60:83:ee:3c:93:53:cc:57:36:a7:1d:9e:bb:09:
                    9d:80:57:81:05:41:cf:db:28:6b:7a:03:92:b3:94:
                    bb:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:A3:EA:C8:10:68:C1:8B:74:43:53:C0:2D:9B:B6:FA:FB:E7:5A:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c64a654e-ea19-3247-bc72-3e14880cec42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:8001:cc00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:65:6a:6c:b6:4a:5e:4d:52:cc:fa:92:20:ce:f9:59:cf:a7:
         bf:67:f5:18:10:03:77:6d:44:77:16:7e:01:d2:1d:84:5e:48:
         dc:34:96:b5:4e:a7:db:0e:a4:06:01:1c:72:1b:bb:42:ae:d9:
         d2:42:73:ff:99:a2:e0:d0:98:10:0e:3d:41:68:3f:24:c6:77:
         cc:3f:7f:dc:94:3a:59:2c:31:b0:67:b0:3a:86:41:50:d4:c0:
         1a:03:8b:2d:59:78:7d:a3:2b:77:43:25:14:66:ac:d6:66:5a:
         6c:74:4a:a5:57:89:41:b1:f9:17:77:1e:94:4d:00:b5:e7:51:
         80:5f:60:87:c4:5d:58:0d:16:1a:5c:ed:b2:03:1d:4d:16:89:
         93:0b:e3:54:44:ae:58:eb:30:9b:e2:0e:99:bb:73:11:bd:e2:
         65:e7:57:48:09:40:51:ac:ae:ca:b0:05:97:9c:75:e2:2e:6a:
         7e:83:63:08:b9:02:7a:83:21:62:35:9a:d8:82:79:dc:b0:68:
         d2:3c:1c:8d:9c:50:8b:b4:4c:51:b5:bf:0b:95:98:15:61:df:
         26:ad:86:38:d1:b8:23:04:03:22:73:07:f7:1b:cd:65:dd:34:
         ff:93:6b:2b:74:05:9b:da:90:41:8a:95:1e:3b:d9:08:04:24:
         49:da:df:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:36 2024 by rpki-client on console-fra.rpki-client.org