Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3b656372-1438-358d-9585-7ec710b94aed.roa
File:                     3b656372-1438-358d-9585-7ec710b94aed.roa (raw, json)
Hash identifier:          nbTRtv7/nzSYhTESN6143psik8Hz1pKekmFlbtFqt68=
Subject key identifier:   B7:F3:48:F7:D6:14:B1:EE:F9:D8:9F:FA:9D:61:5D:3A:49:C3:46:72
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858471FD5F5206C6C5162A8D16C70
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3b656372-1438-358d-9585-7ec710b94aed.roa
Signing time:             Fri 06 Sep 2024 13:00:41 +0000
ROA not before:           Fri 06 Sep 2024 13:00:41 +0000
ROA not after:            Thu 05 Dec 2024 14:00:41 +0000
asID:                     12271
IP address blocks:        2603:90be::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1f:d5:f5:20:6c:6c:51:62:a8:d1:6c:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep  6 13:00:41 2024 GMT
            Not After : Dec  5 14:00:41 2024 GMT
        Subject: CN=d3ee34af-3e53-4bfa-8b8f-941af097bb8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:1b:4b:7e:a2:74:15:46:f4:f5:43:4d:27:34:
                    1e:2a:c5:13:52:1f:f2:d4:ab:56:24:03:42:15:3f:
                    c9:1f:14:49:0f:21:96:98:02:c9:2d:da:d3:b5:60:
                    cb:21:00:40:d0:da:3b:90:5f:f2:fc:2e:42:a4:20:
                    3b:e4:19:87:0f:8e:73:0b:58:d8:85:da:da:21:e2:
                    b2:e4:1b:a6:66:3a:40:04:2e:33:d9:ca:d0:e7:2f:
                    d8:2a:62:51:cb:74:c3:da:1e:62:a0:aa:34:75:7d:
                    ba:27:1c:ef:cf:ab:ac:e3:7c:e1:7d:0a:bd:83:a6:
                    fb:0f:cd:74:94:d6:11:3e:e1:16:ca:29:88:ff:79:
                    36:fc:0f:68:74:c0:fc:70:2b:1a:97:ba:bf:bd:62:
                    68:e6:41:91:64:5b:ca:5a:43:18:ac:ad:b2:ea:d7:
                    66:6e:18:6c:f5:90:aa:81:4b:a7:02:b3:42:b7:80:
                    a4:e7:8e:cc:46:81:f6:60:a9:2f:0b:51:f8:08:c5:
                    14:4c:36:9b:31:c8:d8:7e:90:e1:28:81:12:67:cc:
                    0b:b2:a2:ef:3d:a2:60:c8:fc:0d:b3:3b:40:7b:a5:
                    de:d2:72:20:66:3a:23:98:15:9c:d1:b7:2a:21:e0:
                    00:a4:1b:eb:d3:6e:47:af:4b:3e:a3:42:d3:47:b4:
                    fd:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:F3:48:F7:D6:14:B1:EE:F9:D8:9F:FA:9D:61:5D:3A:49:C3:46:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3b656372-1438-358d-9585-7ec710b94aed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:90be::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:4d:c7:40:b1:0b:8f:6a:eb:12:b9:61:9a:b2:98:13:c1:dc:
         16:d8:47:98:27:15:5a:60:be:e9:84:1d:20:23:47:84:3f:b0:
         29:db:bd:9e:07:ba:fc:ad:96:af:79:fc:d4:f6:28:93:3e:2f:
         53:c1:ce:40:d3:52:4e:07:d3:24:ba:02:18:ad:3e:bc:e7:53:
         e7:06:7d:05:f7:88:76:95:2e:da:9f:be:7c:5f:d7:e3:49:80:
         26:8a:0d:f5:44:98:c8:5d:fb:6d:91:8f:41:26:d2:9f:d9:36:
         39:21:e4:ee:8e:a2:7b:c2:4a:bc:ba:4f:c9:9b:da:7a:0b:2b:
         eb:11:53:be:55:57:03:9d:9e:68:8d:11:c3:43:cd:e7:b2:0b:
         a9:f8:e5:6b:85:fa:cb:62:93:3f:af:7b:f8:77:f9:33:ae:75:
         c1:c9:34:60:5b:1d:8f:6c:39:4c:11:9f:51:6c:b9:94:47:6a:
         97:19:67:28:91:b3:e5:7c:00:65:3f:78:66:44:53:3d:5d:1c:
         ae:24:cb:a8:63:56:23:e6:7c:94:5e:f0:2c:cd:9e:23:1e:8b:
         8e:0a:f6:7a:7a:81:34:63:3c:01:c9:90:e7:42:99:b4:d9:bb:
         8e:88:1d:7e:1b:03:7f:05:66:f7:c7:44:3e:5a:d9:91:a3:dc:
         1d:d2:69:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:23 2024 by rpki-client on console-fra.rpki-client.org