Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ac683038-c192-4fba-ae61-c511683cdb6a/e9561f82-c553-311c-84e7-0aabf2d00674.roa
File:                     e9561f82-c553-311c-84e7-0aabf2d00674.roa (raw, json)
Hash identifier:          jjj1vDVCQobjclwBoRcKmfWS0W/f5A/30cTkkoK11+s=
Subject key identifier:   AF:F6:01:ED:96:12:50:16:F1:7A:96:BE:A6:80:40:F7:ED:35:D1:A3
Certificate issuer:       /CN=ac683038-c192-4fba-ae61-c511683cdb6a
Certificate serial:       010D0C9F43285847BAC6AD01521E62CCF5828D00
Authority key identifier: D1:F4:1D:DB:27:4E:3B:A0:A5:7B:4B:11:17:C9:16:5D:85:21:1E:11
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ac683038-c192-4fba-ae61-c511683cdb6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ac683038-c192-4fba-ae61-c511683cdb6a/e9561f82-c553-311c-84e7-0aabf2d00674.roa
Signing time:             Fri 01 Nov 2024 01:00:30 +0000
ROA not before:           Fri 01 Nov 2024 01:00:30 +0000
ROA not after:            Thu 30 Jan 2025 02:00:30 +0000
asID:                     13549
IP address blocks:        2604:8fc0::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ac683038-c192-4fba-ae61-c511683cdb6a/ac683038-c192-4fba-ae61-c511683cdb6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ac683038-c192-4fba-ae61-c511683cdb6a/ac683038-c192-4fba-ae61-c511683cdb6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ac683038-c192-4fba-ae61-c511683cdb6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ba:c6:ad:01:52:1e:62:cc:f5:82:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac683038-c192-4fba-ae61-c511683cdb6a
        Validity
            Not Before: Nov  1 01:00:30 2024 GMT
            Not After : Jan 30 02:00:30 2025 GMT
        Subject: CN=73b5dd1f-dd4c-4410-b8a8-6eb415f04078
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:10:e5:5d:93:c4:fb:03:23:b9:ae:ca:77:a4:
                    6e:8c:64:e7:95:15:3f:b6:bf:33:81:66:32:cb:b2:
                    be:10:86:73:eb:cf:dc:8c:70:05:59:ef:f0:bd:57:
                    50:9c:08:01:84:34:05:b0:88:7b:13:30:2c:f9:eb:
                    f4:24:3a:57:85:6c:e7:e2:18:17:60:86:2b:b9:0e:
                    6d:1d:55:2e:46:48:48:1f:c2:93:54:0f:34:70:17:
                    98:b9:76:f1:9f:c3:71:53:58:3d:c6:65:69:95:16:
                    44:e9:55:46:e9:82:67:df:6f:aa:5f:5d:40:4f:39:
                    66:ca:5f:9e:eb:d0:5e:48:ae:d8:66:f7:ba:27:01:
                    b2:10:3b:71:85:82:5b:c9:2c:19:7c:9c:e3:26:65:
                    b5:83:d4:ea:2f:32:78:fb:30:a2:4b:50:9e:f0:84:
                    50:62:e9:6e:6f:4c:df:e6:d6:64:7c:cf:09:68:88:
                    0d:5c:90:11:65:36:95:44:dd:9a:0c:c1:d7:0e:0e:
                    2c:97:79:c8:db:03:c1:68:fc:24:25:8f:f0:f4:e5:
                    69:85:60:70:1b:4a:74:72:71:67:62:6a:f7:e4:1f:
                    dc:65:a0:dc:8a:85:d3:ca:3c:80:92:35:bb:da:b6:
                    0c:7c:f2:e7:7b:be:60:88:05:15:f3:39:b1:c8:4d:
                    fb:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:F6:01:ED:96:12:50:16:F1:7A:96:BE:A6:80:40:F7:ED:35:D1:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ac683038-c192-4fba-ae61-c511683cdb6a/e9561f82-c553-311c-84e7-0aabf2d00674.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ac683038-c192-4fba-ae61-c511683cdb6a/ac683038-c192-4fba-ae61-c511683cdb6a.crl

            X509v3 Authority Key Identifier:
                keyid:D1:F4:1D:DB:27:4E:3B:A0:A5:7B:4B:11:17:C9:16:5D:85:21:1E:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ac683038-c192-4fba-ae61-c511683cdb6a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:8fc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:8a:5b:08:76:26:c4:da:3c:c8:fb:d7:9a:7d:e1:74:6e:fd:
         14:d8:66:8d:35:2e:f2:59:ea:c5:92:48:51:40:75:53:03:ef:
         5f:4b:b8:56:d7:c4:e8:51:72:11:95:ce:f7:72:67:cb:33:c4:
         b1:40:8e:34:d1:f1:f8:17:2f:18:c1:b4:f5:bd:32:6c:54:eb:
         21:59:71:e3:63:44:8a:c4:13:8b:1d:66:d3:3c:8c:80:37:cc:
         98:cf:49:97:17:1d:61:60:e6:2c:54:4c:e2:ac:13:43:ea:9e:
         fa:70:8b:f0:f6:a2:26:57:7d:13:4b:2f:2b:4c:36:90:bf:c5:
         93:c5:b0:33:f8:49:20:d2:cf:70:b5:65:bc:21:4b:be:57:f5:
         30:1e:87:d7:d6:26:63:f8:9a:86:79:79:8f:4d:95:30:0d:f0:
         1b:6a:88:17:15:a4:4d:e1:73:71:da:7d:b1:6d:1f:3f:fe:e0:
         59:d8:ea:63:25:c1:4d:0c:52:be:11:7a:dd:c1:82:3d:b6:e3:
         53:2f:8d:ec:52:a2:65:a4:7f:67:19:46:2d:c3:ce:20:e7:ac:
         c2:70:e2:3e:c5:f2:cc:56:21:c8:4d:8b:26:e0:36:73:f2:74:
         16:c4:45:c2:a0:17:9b:69:f7:a1:77:03:d0:b5:7d:4c:a9:15:
         bc:56:ea:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:20 2024 by rpki-client on console-fra.rpki-client.org