Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/a46d9b69-b96b-3037-8c65-c588a531a219.roa
File:                     a46d9b69-b96b-3037-8c65-c588a531a219.roa (raw, json)
Hash identifier:          KxshwBauopQJoJrwoG2Cyih/UbI7BGZouVU0dzRvJLc=
Subject key identifier:   D4:AA:1A:23:76:06:96:E5:ED:61:22:54:67:C9:C1:B3:99:50:20:67
Certificate issuer:       /CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
Certificate serial:       010D0C9F43285847CA3F7973369318BD1E0D5D00
Authority key identifier: 57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/a46d9b69-b96b-3037-8c65-c588a531a219.roa
Signing time:             Wed 06 Nov 2024 14:00:41 +0000
ROA not before:           Wed 06 Nov 2024 14:00:41 +0000
ROA not after:            Tue 04 Feb 2025 14:00:41 +0000
asID:                     208548
IP address blocks:        2605:f440:97ff::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ca:3f:79:73:36:93:18:bd:1e:0d:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
        Validity
            Not Before: Nov  6 14:00:41 2024 GMT
            Not After : Feb  4 14:00:41 2025 GMT
        Subject: CN=d8a49944-d20e-423a-83e6-ecacae856c07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:92:43:b0:c7:ec:da:31:ed:ef:cc:95:c6:2f:
                    2b:ca:cd:12:e1:ef:f7:1d:b3:a2:13:13:70:1c:36:
                    86:64:99:26:a6:25:72:ae:53:09:e8:c1:1b:ed:3b:
                    dd:39:63:0f:e5:d4:1c:6f:6a:36:38:0a:f5:78:c8:
                    b8:ba:78:18:18:12:df:ef:28:d5:f6:dd:6c:a4:49:
                    89:81:23:34:1a:48:09:33:49:f6:4e:c8:88:fe:4e:
                    a5:56:d9:62:d7:f3:67:6e:c9:3e:7f:58:cc:a8:be:
                    6c:81:4c:f9:c8:e2:b7:a8:3b:5c:d2:2c:4a:4c:79:
                    e6:80:d6:5a:ff:3d:e5:74:10:be:87:00:e6:48:67:
                    78:87:7d:fc:b8:2d:43:2a:37:6b:6b:0c:8d:fb:27:
                    45:02:6e:01:81:5a:02:2a:23:88:38:95:cc:f4:f6:
                    bf:20:e3:bd:83:91:c3:57:4f:b0:cc:d5:a4:13:6b:
                    fb:bf:0f:a3:02:9a:f0:af:6c:9a:01:6b:69:dd:34:
                    41:83:c3:23:58:30:7b:da:62:a9:1e:93:1a:cc:94:
                    e2:6b:f1:04:9e:e5:08:45:b5:f6:e8:c0:f8:42:da:
                    66:b0:91:d5:f1:01:e3:27:bd:e4:3f:a5:01:cb:91:
                    ba:a9:2a:a5:7d:0b:ea:83:f7:55:6d:fb:71:16:38:
                    eb:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:AA:1A:23:76:06:96:E5:ED:61:22:54:67:C9:C1:B3:99:50:20:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/a46d9b69-b96b-3037-8c65-c588a531a219.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl

            X509v3 Authority Key Identifier:
                keyid:57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:f440:97ff::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:74:6f:80:23:f5:c0:63:8f:f4:05:b2:48:f0:74:6a:38:cd:
         30:72:c7:dc:19:6e:b1:28:7d:11:79:d9:d1:00:cd:1d:cc:e9:
         6e:35:57:3c:f7:0b:9e:01:39:96:47:c8:cb:f2:96:c2:be:42:
         72:1b:9c:93:26:48:e9:67:9e:09:4b:64:73:5c:c5:c9:8f:a5:
         e4:8a:6a:aa:fd:38:69:21:25:93:f7:37:fb:94:e6:90:6f:fa:
         ae:20:26:d1:0f:ed:65:cb:64:31:96:6c:a1:8a:2b:5a:24:ac:
         03:0d:ef:a2:40:92:bf:cc:5a:4e:40:d3:1d:d5:30:0d:ec:8e:
         1e:28:8b:c0:c2:f1:a9:1b:d9:c6:d5:7d:f9:03:9d:7d:92:2f:
         72:d7:9f:50:ec:3d:7b:9e:e3:d0:62:7f:51:71:ac:ba:11:ca:
         9f:e0:3e:21:9c:a0:c2:0c:44:2b:70:b6:f0:6e:28:9e:99:6c:
         2d:af:8a:a7:81:6f:dd:3d:d5:90:2c:0f:44:fb:3c:36:39:74:
         77:36:2b:1f:55:7d:2f:e5:97:62:f7:1f:74:13:b7:40:18:e2:
         b9:b2:25:b4:a0:63:55:b5:59:c4:28:12:3c:cf:f1:73:9c:f1:
         f0:82:b1:e9:c0:ed:d8:50:c4:8e:a1:33:15:b6:c2:74:3b:ce:
         fd:58:df:cc
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEfKP3lzNpMYvR4NXQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmYzZDI1YTAtZjdlNS00MjFkLTg4NDItZmM5NjdiZjA4
ZjcyMB4XDTI0MTEwNjE0MDA0MVoXDTI1MDIwNDE0MDA0MVowLzEtMCsGA1UEAxMk
ZDhhNDk5NDQtZDIwZS00MjNhLTgzZTYtZWNhY2FlODU2YzA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJJDsMfs2jHt78yVxi8rys0S4e/3HbOiExNw
HDaGZJkmpiVyrlMJ6MEb7TvdOWMP5dQcb2o2OAr1eMi4ungYGBLf7yjV9t1spEmJ
gSM0GkgJM0n2TsiI/k6lVtli1/Nnbsk+f1jMqL5sgUz5yOK3qDtc0ixKTHnmgNZa
/z3ldBC+hwDmSGd4h338uC1DKjdrawyN+ydFAm4BgVoCKiOIOJXM9Pa/IOO9g5HD
V0+wzNWkE2v7vw+jAprwr2yaAWtp3TRBg8MjWDB72mKpHpMazJTia/EEnuUIRbX2
6MD4QtpmsJHV8QHjJ73kP6UBy5G6qSqlfQvqg/dVbftxFjjrPwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNSqGiN2Bpbl7WEiVGfJwbOZUCBnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82ZjNk
MjVhMC1mN2U1LTQyMWQtODg0Mi1mYzk2N2JmMDhmNzIvYTQ2ZDliNjktYjk2Yi0z
MDM3LThjNjUtYzU4OGE1MzFhMjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNmYzZDI1YTAtZjdlNS00MjFkLTg4
NDItZmM5NjdiZjA4ZjcyLzZmM2QyNWEwLWY3ZTUtNDIxZC04ODQyLWZjOTY3YmYw
OGY3Mi5jcmwwHwYDVR0jBBgwFoAUV9Ck+WN+PQBHgSzdpn7Mfk696aowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC82ZjNkMjVhMC1mN2U1LTQyMWQtODg0Mi1mYzk2
N2JmMDhmNzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgX0QJf/
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEB0b4Aj9cBjj/QFskjwdGo4zTByx9wZbrEofRF52dEAzR3M6W41
Vzz3C54BOZZHyMvylsK+QnIbnJMmSOlnnglLZHNcxcmPpeSKaqr9OGkhJZP3N/uU
5pBv+q4gJtEP7WXLZDGWbKGKK1okrAMN76JAkr/MWk5A0x3VMA3sjh4oi8DC8akb
2cbVffkDnX2SL3LXn1DsPXue49Bif1FxrLoRyp/gPiGcoMIMRCtwtvBuKJ6ZbC2v
iqeBb9091ZAsD0T7PDY5dHc2Kx9VfS/ll2L3H3QTt0AY4rmyJbSgY1W1WcQoEjzP
8XOc8fCCsenA7dhQxI6hMxW2wnQ7zv1Y38w=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:07:53 2024 by rpki-client on console-fra.rpki-client.org