Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/014e8ffb-add6-34df-827f-8a3fc4c30b8c.roa
File:                     014e8ffb-add6-34df-827f-8a3fc4c30b8c.roa (raw, json)
Hash identifier:          QvnEmIdBUu9R+qwD6eBOa52og6+PeotzLzT6fnbTK6M=
Subject key identifier:   46:5D:1E:C3:50:FC:52:21:74:CE:E4:42:22:9B:76:E8:63:38:B7:AA
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858471FD603ED2B0B98CF20614D40
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/014e8ffb-add6-34df-827f-8a3fc4c30b8c.roa
Signing time:             Fri 06 Sep 2024 13:00:41 +0000
ROA not before:           Fri 06 Sep 2024 13:00:41 +0000
ROA not after:            Thu 05 Dec 2024 14:00:41 +0000
asID:                     33363
IP address blocks:        2605:a401:809e::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1f:d6:03:ed:2b:0b:98:cf:20:61:4d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep  6 13:00:41 2024 GMT
            Not After : Dec  5 14:00:41 2024 GMT
        Subject: CN=64afe57b-6acf-48b5-baa1-5803da2f21d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:de:f1:20:b0:ad:73:67:5a:ae:ac:71:63:7b:
                    e5:a2:a8:e3:06:66:28:94:f5:b3:38:35:ba:bd:8e:
                    69:30:f6:20:07:32:76:ff:89:68:2b:16:27:b4:80:
                    23:90:de:d5:48:3b:1c:2c:af:7f:63:3d:5e:13:d9:
                    83:c8:6d:ae:4e:ce:fc:3a:db:88:2b:3f:f1:41:a7:
                    b1:5a:93:93:94:1e:11:ca:5c:dd:8e:8b:c4:67:52:
                    1b:47:3a:0f:76:3f:8e:03:ff:d6:6c:95:23:3e:33:
                    36:69:7f:c0:ce:99:14:0c:14:8b:52:fa:a3:c8:6c:
                    25:40:bf:d2:6c:90:e0:ca:62:c2:fd:ae:78:f6:2e:
                    c6:5d:22:e9:f2:23:89:a1:63:1d:ff:7b:91:7c:80:
                    27:05:c0:98:8c:7e:73:ae:d9:a2:60:28:d5:74:aa:
                    8f:72:ca:f8:30:5f:63:35:0a:48:e7:fa:e6:de:c0:
                    16:8b:65:24:5a:e7:67:ea:a8:0c:9d:71:14:88:35:
                    b2:b9:f9:8e:85:c7:40:38:52:b9:f0:8a:79:9b:32:
                    21:a8:2b:70:19:d4:15:1b:52:87:5d:d0:fc:d4:27:
                    21:ec:d0:6d:b8:56:d9:39:83:34:8c:e4:a5:c5:a3:
                    e1:72:4e:4f:8e:1f:b2:28:eb:88:0c:d2:03:6f:a4:
                    02:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:5D:1E:C3:50:FC:52:21:74:CE:E4:42:22:9B:76:E8:63:38:B7:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/014e8ffb-add6-34df-827f-8a3fc4c30b8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:809e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:ac:a2:69:a7:2c:08:84:8d:ce:a4:cf:fa:df:16:bc:ff:ce:
         3e:2c:83:dd:31:61:3f:2b:40:e3:c8:db:44:14:e0:1d:52:4e:
         b9:90:47:71:61:a1:45:48:1b:22:ca:59:0d:b6:95:ad:6d:0c:
         00:fc:34:27:5f:d5:9a:17:f4:02:2c:36:5d:06:ae:7b:5d:a8:
         bc:82:e0:b2:e0:62:d3:31:d4:35:04:42:d1:92:31:43:06:b7:
         87:9e:19:a5:13:1c:ce:8b:4a:c1:67:84:06:85:9e:cd:1e:36:
         16:f5:79:9b:09:cd:72:b9:6c:3d:d2:83:16:2c:3f:54:00:69:
         73:c3:c7:ff:69:37:57:1b:05:7a:07:39:48:40:d6:25:8e:ef:
         99:18:c5:f0:cf:b8:70:42:96:40:6d:c2:33:96:65:71:dd:0c:
         86:1d:e5:a7:24:92:a0:cb:f1:69:ac:4c:c4:a1:35:6c:5a:bd:
         87:1b:71:af:03:5a:1a:33:66:f3:4f:2b:9a:b4:25:f5:89:ac:
         97:da:17:69:d6:2d:fe:90:4c:c2:32:a4:38:d2:d8:f3:72:46:
         3e:ee:72:48:6f:35:b9:02:db:d1:de:5e:52:f9:ce:0b:94:88:
         2e:f9:e1:22:f0:59:a2:ef:b4:34:4d:a5:c0:35:1c:90:db:70:
         4c:38:06:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:05 2024 by rpki-client on console-ams.rpki-client.org