Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/cb25b00e-0b1a-374d-a31c-f89abc87586b.roa
File:                     cb25b00e-0b1a-374d-a31c-f89abc87586b.roa (raw, json)
Hash identifier:          M61HuzMQH+/WYSQW61wu27pVH+Z4RvqGoxHeJ7xwe4s=
Subject key identifier:   EC:A1:71:F2:52:99:6E:E0:CB:27:15:7F:C2:27:89:3D:2B:6C:37:57
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858471FD6014FAD85305124D2DF20
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/cb25b00e-0b1a-374d-a31c-f89abc87586b.roa
Signing time:             Fri 06 Sep 2024 13:00:41 +0000
ROA not before:           Fri 06 Sep 2024 13:00:41 +0000
ROA not after:            Thu 05 Dec 2024 14:00:41 +0000
asID:                     33363
IP address blocks:        2607:f098:3000::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1f:d6:01:4f:ad:85:30:51:24:d2:df:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep  6 13:00:41 2024 GMT
            Not After : Dec  5 14:00:41 2024 GMT
        Subject: CN=4c3458fa-ab7c-4283-a871-e86a8dea2a5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:68:88:eb:63:ae:5c:1c:8a:2f:28:58:8b:1b:
                    c7:b3:a6:40:8c:3e:0a:31:96:fd:d9:46:11:fa:06:
                    bb:73:19:38:68:7c:bd:18:1e:0c:5d:34:8d:3d:aa:
                    c7:d3:1b:25:92:70:f5:ab:d4:5e:c3:99:6f:9b:74:
                    6c:84:25:ac:45:67:f2:68:63:7f:04:a0:c3:c9:e4:
                    43:51:2d:01:5b:52:78:cd:fa:69:3f:6b:25:a6:70:
                    07:4a:7e:2f:54:7d:ff:dc:e0:1c:a3:ef:92:74:9a:
                    aa:9e:c2:08:d7:1a:53:cb:4b:55:96:7d:1c:db:c4:
                    69:e0:d7:59:68:2c:be:a7:7c:51:8c:a5:d6:0e:ff:
                    72:1b:fa:45:b5:fa:f9:0c:1f:f9:2d:27:65:c6:c1:
                    b3:1e:42:69:9d:98:17:fb:1e:fa:97:99:2e:ad:b7:
                    99:bd:5b:87:09:f4:53:c8:61:3e:f8:74:07:e7:27:
                    c8:59:fb:e2:60:9b:31:78:3d:5c:dc:5f:64:cb:6f:
                    ae:b8:1a:e1:b5:88:df:38:d0:bc:58:b5:11:af:87:
                    b0:13:b0:16:c6:8a:51:18:1f:1f:29:fa:5f:77:72:
                    c2:9b:6a:11:93:da:72:a8:cc:ac:42:d6:e2:5d:af:
                    b5:7d:7e:a9:44:bb:81:b2:8c:e9:0c:a3:5e:b5:26:
                    c3:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:A1:71:F2:52:99:6E:E0:CB:27:15:7F:C2:27:89:3D:2B:6C:37:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/cb25b00e-0b1a-374d-a31c-f89abc87586b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f098:3000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:9c:5d:ee:7f:83:22:23:ae:a8:4b:2f:4f:b0:fe:db:c0:12:
         e4:26:64:3b:06:07:43:e2:57:78:0a:66:ee:2d:4e:5d:a8:c4:
         bc:3b:63:74:59:b0:2a:66:bb:a3:76:4b:e0:0c:c6:bc:b7:c0:
         87:d9:2e:9d:22:f5:a0:dd:3c:38:8d:44:f0:3d:09:6b:d7:11:
         d8:b5:09:5c:5d:1a:42:5b:8b:c4:0c:8f:5f:00:4a:e1:fc:c1:
         f0:a9:fc:18:01:a4:71:cc:03:f1:d2:93:9f:f6:54:60:85:0f:
         6c:6d:1d:05:d7:d0:ed:ee:db:59:72:86:8c:b8:f2:d2:b1:7b:
         45:28:6e:10:97:63:b6:49:af:28:6b:b5:64:71:af:5a:e9:af:
         d9:b9:b9:09:e7:ef:7b:4b:ae:ea:c8:eb:e6:ee:67:16:44:ea:
         3e:88:9c:c5:09:f7:3d:13:04:6f:ba:bd:f6:ca:45:86:f7:a3:
         59:b8:a5:07:9b:2c:74:73:ad:bd:89:68:c5:5e:60:1d:db:77:
         4b:f0:6a:8a:59:35:05:79:a5:76:8d:35:e9:d7:3f:ce:3e:a5:
         50:24:e5:34:7a:f4:8c:42:fe:ed:40:1e:5c:20:cc:0d:f6:06:
         33:3a:c7:62:19:38:e1:d8:b0:6d:d0:0d:c9:cb:1d:c7:74:aa:
         b2:ed:74:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:09 2024 by rpki-client on console-ams.rpki-client.org