Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/cd650d9a-df10-3b96-9d94-371d4aa74455.roa
File:                     cd650d9a-df10-3b96-9d94-371d4aa74455.roa (raw, json)
Hash identifier:          Fr3Mwpk6Yxv8fRPxg477VxKDeVRcf4yGNgCx31D3Uc4=
Subject key identifier:   55:1E:97:D2:4E:AA:73:45:0B:9E:A5:27:0C:87:76:D2:86:DF:90:D5
Certificate issuer:       /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial:       010D0C9F4328584730960BF03FAEFD9F13121800
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/cd650d9a-df10-3b96-9d94-371d4aa74455.roa
Signing time:             Thu 12 Sep 2024 13:00:41 +0000
ROA not before:           Thu 12 Sep 2024 13:00:41 +0000
ROA not after:            Wed 11 Dec 2024 14:00:41 +0000
asID:                     15169
IP address blocks:        2605:ef80:c030::/47 maxlen: 47

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:30:96:0b:f0:3f:ae:fd:9f:13:12:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
        Validity
            Not Before: Sep 12 13:00:41 2024 GMT
            Not After : Dec 11 14:00:41 2024 GMT
        Subject: CN=dfa3e317-6e9e-4926-8923-14fe6e7c8ce3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:db:7b:aa:8d:c3:d6:6e:07:c9:2a:25:b4:84:
                    2f:79:2d:14:a0:e3:61:fd:b5:ea:e8:97:8a:b2:5f:
                    19:2a:7f:e2:d9:a6:78:84:1f:57:cf:34:26:8d:50:
                    c6:8a:48:0a:5c:c4:f0:d0:64:ec:c6:da:b7:f2:4a:
                    04:10:b6:ef:83:1e:df:64:63:6b:f7:67:be:ac:9f:
                    a7:ab:a8:0e:a0:d6:68:dc:c2:9b:1d:f1:01:c2:12:
                    d3:b5:4f:11:ac:36:98:5c:b0:3e:39:d5:26:61:9c:
                    e6:81:2c:a4:75:a3:fe:34:ca:b3:92:94:a3:e0:50:
                    16:3e:f9:1c:bd:25:6f:ef:0a:98:00:1b:38:8a:2e:
                    31:ee:a4:d3:c3:32:df:b9:fc:23:ce:27:dc:ba:41:
                    a5:83:34:dd:43:8a:e4:22:21:54:6b:67:17:2e:c2:
                    90:83:81:b7:2f:b0:69:07:b1:a7:9a:70:5d:d8:e0:
                    41:53:8e:3e:70:b9:8c:21:68:81:5f:50:e0:2d:d3:
                    f0:23:69:30:54:b8:ef:f5:35:b0:2b:1b:b7:b1:4c:
                    20:c8:15:ae:e7:ea:ba:8e:e6:86:0d:dc:03:26:38:
                    3b:9b:43:3b:1d:55:c3:e6:90:9b:26:b6:db:fd:c7:
                    a4:bc:3e:30:c9:4d:90:c0:bc:0d:5e:dc:43:a4:b1:
                    58:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:1E:97:D2:4E:AA:73:45:0B:9E:A5:27:0C:87:76:D2:86:DF:90:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/cd650d9a-df10-3b96-9d94-371d4aa74455.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl

            X509v3 Authority Key Identifier:
                keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:ef80:c030::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:dd:ef:dd:83:a6:92:57:9c:e3:73:86:f5:90:31:e7:cc:8b:
         1e:62:0c:70:26:d0:34:b5:d8:0b:c9:f5:32:15:d6:5e:11:39:
         10:bb:20:b6:97:40:3e:5d:4a:b1:0f:6f:d6:8c:53:42:97:b1:
         6d:6d:ba:7e:f0:c3:44:d6:8e:33:72:ff:84:56:e3:d1:3a:41:
         5e:f0:d6:d7:87:a6:06:bc:6a:a9:31:7b:82:97:13:6c:7b:e1:
         90:a1:53:18:51:6c:7f:fe:b1:04:c1:df:d9:24:ed:1f:aa:11:
         f9:d0:2d:a2:80:10:bc:b1:d6:a8:8c:85:81:e8:14:23:47:6e:
         70:a6:7e:b3:9c:d8:01:da:1c:78:9c:b8:4e:82:c2:4c:57:a9:
         62:a3:49:9b:3d:1d:fe:a1:17:42:82:65:85:39:9a:13:a7:5b:
         80:ca:66:e4:24:4f:f7:65:ec:93:10:02:c7:9b:7c:4e:82:f0:
         e7:8c:16:89:cf:11:64:8a:4f:77:75:e0:1f:c5:52:13:a1:b9:
         10:69:e4:4c:08:0e:df:09:d2:a8:3d:ee:56:94:4f:aa:88:a9:
         7c:a6:f8:5d:d5:c9:55:4d:50:d5:f7:31:5d:27:e4:3b:d0:b9:
         bf:ee:6e:43:8f:0f:ff:dc:bc:ff:fb:72:f4:38:42:1c:ec:c8:
         5d:de:9e:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:15 2024 by rpki-client on console-ams.rpki-client.org