Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7/b5031769-80a9-397b-a767-64bb605dc065.roa
File:                     b5031769-80a9-397b-a767-64bb605dc065.roa (raw, json)
Hash identifier:          XnoIlrvFmZ1u+Q/zLWNBZ+lx7NCwCQLLOnT3QRzRxpI=
Subject key identifier:   7A:1F:8A:19:ED:42:FE:C7:29:68:67:62:D0:F3:8F:A7:12:99:1A:18
Certificate issuer:       /CN=abc30cda-3b3f-4e8e-a687-b20d5448a4e7
Certificate serial:       010D0C9F4328584720735A45B999C5B046AEC000
Authority key identifier: 5A:33:54:71:2D:81:E3:FF:01:05:04:F9:2C:0E:5F:E3:90:36:BC:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7/b5031769-80a9-397b-a767-64bb605dc065.roa
Signing time:             Fri 06 Sep 2024 18:18:14 +0000
ROA not before:           Fri 06 Sep 2024 18:18:14 +0000
ROA not after:            Thu 05 Dec 2024 19:18:14 +0000
asID:                     398325
IP address blocks:        2605:e040::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7/abc30cda-3b3f-4e8e-a687-b20d5448a4e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7/abc30cda-3b3f-4e8e-a687-b20d5448a4e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:20:73:5a:45:b9:99:c5:b0:46:ae:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abc30cda-3b3f-4e8e-a687-b20d5448a4e7
        Validity
            Not Before: Sep  6 18:18:14 2024 GMT
            Not After : Dec  5 19:18:14 2024 GMT
        Subject: CN=8c8ba8e8-6776-4cf0-b720-77088f17c183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:cd:96:02:00:b9:ec:c0:cd:28:b8:f3:8a:1c:
                    db:b9:b7:d0:a0:d5:81:eb:aa:fa:6f:8e:4a:7c:d3:
                    79:86:13:18:09:0f:d4:91:9e:8e:eb:07:d0:a8:31:
                    4e:bc:8e:e3:ae:fa:e0:a1:dc:fc:9c:b1:93:1f:f0:
                    cf:99:46:89:1d:2f:1a:ed:de:fc:d1:2a:55:38:16:
                    b6:f2:7e:9c:ec:ff:95:13:53:d7:37:13:b9:9d:eb:
                    51:4c:f7:9f:27:c8:04:f6:47:fb:0c:11:3d:64:87:
                    a9:b7:15:41:8b:95:b9:12:20:a2:81:b5:6b:35:09:
                    27:15:83:98:d4:b5:78:d6:34:a5:57:bd:c9:22:0a:
                    bc:59:a6:f7:e0:ba:c1:c4:e9:4f:2f:60:b3:e6:b2:
                    8b:76:36:d8:28:57:e2:13:c5:c5:b5:31:a8:9b:16:
                    a0:60:d2:85:54:96:6c:b1:61:4f:5f:60:17:87:fd:
                    88:03:5f:dc:9f:2c:ff:7b:25:80:ab:5b:fd:ca:b1:
                    34:2d:3d:e8:11:00:f6:01:a4:b5:fb:53:5c:ba:8a:
                    22:71:0e:90:d5:98:b1:12:5c:68:cd:6a:9c:ef:97:
                    d9:9b:a9:b2:bb:b0:44:a6:d7:da:54:ac:2b:41:a2:
                    a4:54:e9:e6:83:39:f9:3c:c3:84:42:28:f3:9d:2b:
                    5f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:1F:8A:19:ED:42:FE:C7:29:68:67:62:D0:F3:8F:A7:12:99:1A:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7/b5031769-80a9-397b-a767-64bb605dc065.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7/abc30cda-3b3f-4e8e-a687-b20d5448a4e7.crl

            X509v3 Authority Key Identifier:
                keyid:5A:33:54:71:2D:81:E3:FF:01:05:04:F9:2C:0E:5F:E3:90:36:BC:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:e040::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:f6:c0:86:4c:89:44:ec:62:31:76:a2:fb:c2:d8:53:07:38:
         5d:f4:d2:7e:2e:34:14:79:e0:7f:37:39:08:28:26:d5:3f:58:
         cc:62:20:c6:50:22:39:f7:7c:b7:2a:4f:cc:8e:ea:8c:a2:9e:
         dd:bf:a6:ba:a4:22:9e:74:b2:c4:ad:15:31:98:7b:f3:92:4a:
         0b:73:33:5c:4d:e3:17:43:db:9e:1f:57:24:b6:50:d3:05:27:
         ef:34:b8:de:46:89:8b:f8:48:54:23:8d:e7:96:29:20:bb:e7:
         00:36:4a:b6:9f:2f:d6:dc:4c:f8:45:91:8e:4a:c6:b6:2b:a7:
         59:51:ed:36:bf:e9:d4:6b:74:d4:e3:1d:1f:d6:94:b1:8c:09:
         ce:bf:cc:21:41:13:a3:57:5b:34:6d:d8:6f:41:bd:27:40:4c:
         d2:06:6a:5b:fd:b1:9f:f0:fd:c9:49:0e:e7:10:10:45:4d:2e:
         94:e3:9d:52:17:55:d3:4f:8e:36:77:f9:ab:c5:79:75:61:c2:
         0a:4d:66:d8:fd:e9:12:41:7d:f9:a7:58:a5:4b:1a:64:59:75:
         7f:7b:ef:50:00:cc:15:57:83:39:76:98:02:a2:65:fc:16:59:
         2f:9c:8f:e7:c5:85:42:84:05:10:7d:ce:07:57:4c:34:d6:27:
         8e:9c:c3:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:37:03 2024 by rpki-client on console-fra.rpki-client.org