Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/17534dd6-c448-392c-b007-a8f60b9dc60c.roa
File:                     17534dd6-c448-392c-b007-a8f60b9dc60c.roa (raw, json)
Hash identifier:          82B+wFY09cctqDvi1Ux3JDNv6U2348AAPOYFu6pEUiQ=
Subject key identifier:   5B:99:8A:08:9B:2B:5B:A9:BD:18:1C:2C:78:EF:22:52:5E:60:E9:14
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858471FD600E8B640186C50B5E780
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/17534dd6-c448-392c-b007-a8f60b9dc60c.roa
Signing time:             Fri 06 Sep 2024 13:00:41 +0000
ROA not before:           Fri 06 Sep 2024 13:00:41 +0000
ROA not after:            Thu 05 Dec 2024 14:00:41 +0000
asID:                     33363
IP address blocks:        2603:9031:30::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1f:d6:00:e8:b6:40:18:6c:50:b5:e7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep  6 13:00:41 2024 GMT
            Not After : Dec  5 14:00:41 2024 GMT
        Subject: CN=88603209-05ff-4f1a-b1b4-69fdb5749898
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e7:c6:52:74:dc:c7:64:2f:74:b4:e0:62:17:
                    c9:b8:dc:d7:85:53:b4:f8:79:0b:48:e6:6c:f6:dd:
                    67:1b:52:a7:55:78:5f:1b:9e:de:da:2e:99:3f:6f:
                    60:b7:17:14:0b:b9:7f:41:bc:f4:4d:85:45:84:0d:
                    ff:44:20:3b:aa:d3:2e:f6:e7:5e:cf:e2:c7:1e:f5:
                    c7:27:c7:7b:39:41:e9:c1:b9:3a:0a:50:a3:66:41:
                    20:b7:c6:83:8a:d7:28:0e:5e:8e:34:f9:8d:fd:ff:
                    30:60:f5:c9:0b:9d:c2:57:1d:bb:24:04:28:a4:5f:
                    15:5a:16:11:51:fb:86:35:7d:14:be:2c:44:96:3a:
                    52:8f:0e:90:da:82:d8:56:ec:3f:57:42:e1:a3:c2:
                    d4:f1:d8:e8:5d:d0:e4:8e:77:52:72:8d:a6:ae:ae:
                    9f:1a:39:6c:57:d2:8f:96:94:7d:ef:eb:de:54:ab:
                    38:db:61:f4:a3:00:da:ff:2e:5a:31:4c:e4:95:ed:
                    9f:8c:f4:f5:ec:4f:01:d1:7d:a3:ec:10:15:7a:1b:
                    de:eb:49:01:ee:a6:82:3d:04:e1:eb:ea:a8:76:25:
                    31:4f:cd:5a:0e:73:bb:22:39:ff:0b:18:55:08:ca:
                    27:b8:a9:ef:17:85:77:0e:1d:41:7a:54:d7:51:2f:
                    d2:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:99:8A:08:9B:2B:5B:A9:BD:18:1C:2C:78:EF:22:52:5E:60:E9:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/17534dd6-c448-392c-b007-a8f60b9dc60c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:9031:30::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:0a:66:fb:1b:f9:05:42:11:a4:b9:07:82:69:b1:1e:80:cb:
         51:6e:ac:8b:3b:1f:ce:86:0d:e5:3f:f4:73:8b:3f:85:72:7d:
         a9:33:7c:ee:9f:22:f0:6b:e7:a6:93:4c:c6:a6:ed:bc:5c:bb:
         e2:75:ee:17:51:e4:6d:81:3f:9a:16:39:59:d6:a1:58:7d:7f:
         bf:6e:45:75:a8:68:f0:e4:d8:20:d4:54:f2:e3:9a:2c:d4:2b:
         29:cf:b2:35:7c:e5:a4:69:eb:1e:61:7e:8e:c3:de:59:05:76:
         5c:bc:ef:f1:28:82:2e:ce:1d:b5:ae:ee:58:9a:63:4b:61:28:
         01:45:47:4b:3e:3d:a6:b5:c2:e8:f4:72:8a:85:ba:87:1f:1b:
         fb:10:40:d2:73:e0:85:36:6d:43:a9:d8:05:70:70:41:6d:87:
         84:1c:d2:d6:c5:40:6f:ff:8c:41:48:cd:63:cb:40:fb:7a:c8:
         21:b0:67:c4:20:22:e9:d1:91:fc:20:29:ec:dc:e1:03:eb:50:
         b5:d3:56:ae:24:6d:4c:cf:9e:77:ac:ee:ad:c8:f4:9c:9d:0f:
         54:e3:23:a8:9c:fa:59:12:f6:c6:8d:c5:18:75:63:e7:2a:d7:
         a7:ff:cb:5b:63:34:02:1a:f2:63:9f:29:4e:ca:05:cd:af:25:
         d3:16:02:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:06 2024 by rpki-client on console-ams.rpki-client.org