Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/db63c8c5-e612-3bec-8103-b958e2d7c581.roa
File:                     db63c8c5-e612-3bec-8103-b958e2d7c581.roa (raw, json)
Hash identifier:          U96DPeoGCfvxVuIsRpfi/+1UQocFhPDx13YNGPQu4Dg=
Subject key identifier:   9E:B7:60:D0:0E:A9:1E:01:3B:DE:F2:C4:28:38:94:90:84:DD:C2:F2
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858471FD5F28C2E11B5A46A9FC980
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/db63c8c5-e612-3bec-8103-b958e2d7c581.roa
Signing time:             Fri 06 Sep 2024 13:00:41 +0000
ROA not before:           Fri 06 Sep 2024 13:00:41 +0000
ROA not after:            Thu 05 Dec 2024 14:00:41 +0000
asID:                     33363
IP address blocks:        2605:a401:860c::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1f:d5:f2:8c:2e:11:b5:a4:6a:9f:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep  6 13:00:41 2024 GMT
            Not After : Dec  5 14:00:41 2024 GMT
        Subject: CN=4930b8a8-62eb-4b29-92e5-ef3dcb8b9958
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d4:59:71:3b:da:20:37:f4:eb:af:ef:79:ca:
                    4c:b7:d9:10:26:1b:2e:6a:bf:00:0e:7c:79:94:65:
                    bd:21:bc:c9:bf:be:61:87:73:3d:00:29:60:57:c6:
                    ca:94:ee:ef:91:77:33:d1:0f:ff:3a:ac:c3:f3:41:
                    27:80:69:04:8c:da:f1:97:04:f8:bb:4c:78:8f:05:
                    71:59:a1:07:c5:2c:d1:a3:0b:6f:28:9e:88:22:2f:
                    8c:58:ad:73:b5:11:e4:8a:3f:e0:5e:c3:d2:66:c9:
                    55:5e:b6:d3:bc:1d:8f:88:68:19:d3:68:2d:fb:25:
                    8d:be:09:b1:69:05:24:c0:a1:27:8a:31:dc:1e:e2:
                    1f:b7:9e:ac:d2:2b:12:50:c0:18:8b:ba:ad:c5:94:
                    63:4a:8a:79:b4:77:ca:95:3d:29:5f:47:39:1a:1f:
                    41:41:77:63:0e:66:5b:dc:ad:8c:97:83:1f:d5:77:
                    2c:4a:ae:69:5c:12:2a:88:b3:30:a1:06:6d:08:8f:
                    84:58:65:07:43:82:9b:13:e6:7e:c1:10:4f:15:9a:
                    9e:01:38:61:05:3b:c8:80:d1:0f:6a:54:7c:31:84:
                    1c:15:7d:c0:ad:a2:4c:20:04:9a:06:4b:98:74:06:
                    de:9b:e2:75:c5:53:96:68:ba:b1:ac:db:e8:52:6e:
                    5a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:B7:60:D0:0E:A9:1E:01:3B:DE:F2:C4:28:38:94:90:84:DD:C2:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/db63c8c5-e612-3bec-8103-b958e2d7c581.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:860c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:ee:e4:03:43:c8:bb:9a:83:8f:2a:c7:47:9a:a5:39:3d:48:
         f0:86:e6:87:3a:f6:12:32:99:0f:dd:8d:da:2c:ab:83:0a:bb:
         8d:bb:5c:14:6f:e5:ed:09:9c:22:4f:d6:4c:10:a4:84:f3:42:
         f5:03:d2:49:0c:79:3b:ca:af:aa:a5:cb:df:b1:b1:e5:0a:c7:
         4a:a9:ab:fb:8a:d5:4f:c6:b6:c1:30:00:d1:5c:85:bb:0b:78:
         42:32:3f:9c:f8:56:49:30:09:2d:30:db:d4:e0:07:e8:3f:7b:
         03:c7:cf:99:03:0d:8f:d0:e3:3b:d3:b5:91:b6:30:09:56:92:
         75:36:41:19:22:40:ef:a7:d3:a1:0f:88:8c:b2:36:f7:1c:1a:
         bb:0c:f3:64:b7:4c:aa:a3:f3:6b:9b:f7:2a:3b:9c:a4:ad:5e:
         8e:c8:3f:a6:8c:9e:c7:be:ff:2a:ef:da:f7:24:ad:50:c6:65:
         17:c6:93:a4:c4:85:38:cc:9f:13:85:13:e6:7a:e7:6f:66:0d:
         55:88:0e:c9:c5:63:37:2e:64:2c:a9:09:97:9b:f5:ba:b6:ce:
         88:7a:c3:0e:18:05:ae:09:69:1d:de:7d:0e:f1:24:05:8f:13:
         13:e3:fb:66:fb:9d:8b:d3:6c:95:4d:34:ea:ca:08:68:8c:66:
         10:6d:1e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:10 2024 by rpki-client on console-ams.rpki-client.org