Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0ebeba07-e01a-3ba8-9033-cc879f33e17f.roa
File:                     0ebeba07-e01a-3ba8-9033-cc879f33e17f.roa (raw, json)
Hash identifier:          0xMPVuwk2uhInO5vOixnUbEq7mHgxUZKmEkf7Jkw9PY=
Subject key identifier:   6F:51:38:A7:B3:C4:34:6C:46:14:C3:D1:97:FD:4B:4D:65:08:6C:CF
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858471FD606091ED71B765FD06E40
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0ebeba07-e01a-3ba8-9033-cc879f33e17f.roa
Signing time:             Fri 06 Sep 2024 13:00:41 +0000
ROA not before:           Fri 06 Sep 2024 13:00:41 +0000
ROA not after:            Thu 05 Dec 2024 14:00:41 +0000
asID:                     33363
IP address blocks:        2605:a401:81bb::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1f:d6:06:09:1e:d7:1b:76:5f:d0:6e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep  6 13:00:41 2024 GMT
            Not After : Dec  5 14:00:41 2024 GMT
        Subject: CN=3e2ab65b-1a68-4bbe-9955-811648185f6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:c3:5a:10:3a:5f:ee:d8:5d:a6:42:b8:cf:c4:
                    63:97:7f:92:b8:26:39:07:be:2f:fe:c5:6e:0f:54:
                    5d:00:b6:25:63:dc:b1:08:e7:f4:10:64:47:b7:b1:
                    f7:90:19:0f:6d:3e:17:6e:95:7b:fe:cb:d7:b4:7a:
                    c8:55:7d:e2:da:f6:8d:59:99:a5:33:c2:36:dd:7e:
                    47:bc:1e:ff:8a:8c:7b:c5:4b:ad:70:47:15:a0:45:
                    6a:5f:0e:08:f8:b9:03:ed:f7:2d:14:16:38:c3:23:
                    86:03:0c:88:c8:a5:04:bb:6c:39:f7:96:9c:61:fe:
                    2d:7c:2f:9e:36:49:ec:58:64:c4:7c:67:7f:f7:4a:
                    b9:4a:8b:55:7f:92:52:fe:ec:b2:72:b0:d6:69:4f:
                    26:a2:db:07:37:f5:70:e9:3b:9b:42:ac:d4:7d:56:
                    75:04:9a:ee:1c:ca:20:1e:4c:c5:d6:14:95:08:c9:
                    43:b0:66:94:f0:8a:7c:b5:71:82:fe:82:dc:fe:8b:
                    51:30:89:4f:aa:6c:e6:5b:60:d7:26:e3:61:0c:fb:
                    32:2f:0a:6c:53:19:77:ab:c9:2f:aa:e9:36:97:d9:
                    ee:ff:73:74:7e:f7:b2:c4:43:da:d1:4a:2b:10:52:
                    55:8a:b8:89:23:d9:18:92:bc:d8:43:73:72:6e:6b:
                    99:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:51:38:A7:B3:C4:34:6C:46:14:C3:D1:97:FD:4B:4D:65:08:6C:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0ebeba07-e01a-3ba8-9033-cc879f33e17f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:81bb::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:c9:4d:29:cb:b3:b8:51:a9:38:e4:2d:6c:10:ab:df:65:fe:
         8c:bf:f9:ca:2f:99:2f:a8:de:5f:33:e4:d0:d1:b6:07:3c:60:
         7c:9b:94:c9:8c:1c:af:d9:1e:b7:1b:6f:f8:76:78:68:e0:94:
         b0:4d:df:0a:e6:81:93:d1:16:4f:ca:bf:46:71:90:dc:9c:3f:
         a7:5d:aa:83:3c:3c:be:6e:e9:ab:10:27:6b:89:71:c7:d3:44:
         f6:f2:79:6a:9d:50:e1:92:1f:6c:61:7c:1d:13:cf:3d:21:55:
         aa:72:6b:76:fc:59:d8:c8:34:e5:f0:68:5c:76:a1:04:f5:fd:
         f7:fd:1c:c7:79:1d:88:a2:c6:f4:90:40:57:bb:f4:20:c2:7d:
         48:30:fb:8b:95:c7:3f:eb:be:c3:75:a5:2b:97:5a:b3:fd:12:
         4d:bb:1b:bd:87:de:da:12:6f:8d:c3:54:07:49:c6:77:85:27:
         16:26:47:28:46:d1:be:b6:99:c8:d8:81:e5:32:11:f6:13:8e:
         88:6d:ba:7a:03:36:52:29:99:5e:8d:f8:77:d4:cb:33:0b:df:
         72:ed:5c:0c:94:94:ae:6a:60:a5:f5:7e:9d:98:7e:f2:41:ad:
         0a:cc:ab:04:bb:30:6e:ba:6c:36:cf:9a:3a:2e:93:75:92:ca:
         e1:f2:40:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:06 2024 by rpki-client on console-ams.rpki-client.org