Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/ccf58456-663c-3edf-8774-054942c87944.roa
File:                     ccf58456-663c-3edf-8774-054942c87944.roa (raw, json)
Hash identifier:          BihmBwn+9/463hXLSEP187OcuHimsKicoH8Ew8zN7Bs=
Subject key identifier:   1B:BF:DF:E3:F2:AD:A2:90:DE:44:8E:BC:86:AF:34:87:CC:93:94:C2
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F43285847537B5A137269545B78D67F00
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/ccf58456-663c-3edf-8774-054942c87944.roa
Signing time:             Wed 25 Sep 2024 01:00:31 +0000
ROA not before:           Wed 25 Sep 2024 01:00:31 +0000
ROA not after:            Tue 24 Dec 2024 02:00:31 +0000
asID:                     30133
IP address blocks:        2001:500:75::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:53:7b:5a:13:72:69:54:5b:78:d6:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: Sep 25 01:00:31 2024 GMT
            Not After : Dec 24 02:00:31 2024 GMT
        Subject: CN=76815d03-7f6d-42a4-87ff-b6e4bfa8fc8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:30:10:63:eb:c0:8c:3b:1d:6c:2c:22:b8:19:
                    63:37:65:b4:19:fa:26:e7:5f:0d:9a:2c:8d:51:30:
                    b8:2a:54:63:58:60:93:a2:bd:29:53:89:ee:a4:1d:
                    e5:78:4f:e8:27:10:ca:bd:85:90:37:f1:1a:93:f9:
                    05:77:ca:45:69:14:10:49:cb:13:4f:9e:d2:09:a1:
                    db:11:cb:ef:3e:c2:14:66:1d:ba:cc:6b:38:92:79:
                    c0:7a:e5:ad:30:40:63:58:dc:a7:ef:85:26:eb:ee:
                    b3:3b:f2:9d:10:48:8d:d6:59:ae:29:5c:0e:20:aa:
                    70:e6:f6:90:9b:a9:c0:f6:75:57:91:1e:16:92:3c:
                    a1:53:65:f5:4b:96:e0:e8:47:03:64:a8:1d:8c:e8:
                    3e:16:bd:13:91:3a:1d:a6:19:be:25:47:b5:3e:12:
                    98:85:1f:f2:ce:41:7f:6f:d3:22:44:b1:f0:9e:1f:
                    4b:84:df:de:ad:a7:60:fc:c9:68:b3:d8:bb:c3:e7:
                    63:7c:ee:13:b5:48:1f:89:83:ed:d5:c0:7e:f1:86:
                    08:c6:bf:eb:eb:fd:bd:1d:8f:83:e9:5c:3c:d1:34:
                    c1:14:91:2d:1d:67:3b:b0:c2:9f:81:e2:e6:c6:07:
                    5a:e9:c8:79:e2:71:07:8d:bc:b4:5d:3c:d5:0a:5b:
                    0a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:BF:DF:E3:F2:AD:A2:90:DE:44:8E:BC:86:AF:34:87:CC:93:94:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/ccf58456-663c-3edf-8774-054942c87944.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:75::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:0a:3f:7f:7b:eb:c3:f9:a6:82:07:a1:04:a7:4c:88:68:0b:
         51:38:b7:fd:4b:41:b7:97:ca:e6:07:7d:51:88:53:48:6f:4a:
         77:9f:a0:4f:e3:75:1f:16:2c:cd:75:f9:2d:3d:31:c3:90:22:
         2e:b2:ad:f7:5d:5b:e0:a3:9b:17:41:cb:31:17:ab:be:df:1c:
         46:9f:f6:8e:8e:17:a2:ad:3a:c2:7e:d0:b6:17:73:76:a2:5b:
         73:ce:aa:4f:8a:62:4b:b2:54:68:4a:21:7d:9b:3f:bf:85:64:
         f0:7d:fd:c1:b7:9c:80:0f:e0:86:c1:c5:4f:86:77:85:83:81:
         dc:3e:ac:ab:44:6b:89:d9:78:94:f0:25:aa:60:70:d5:9d:d5:
         f4:01:64:66:67:8d:91:75:d8:da:4a:7e:6a:ba:71:5b:fc:90:
         bb:28:83:76:0d:cb:60:d4:5f:49:15:67:90:80:86:3f:68:56:
         d3:13:b2:f9:5e:2c:c0:b0:ef:2a:60:58:56:0e:42:50:dd:ef:
         cd:d2:e1:ec:c4:82:ad:22:df:56:c6:1d:61:20:52:df:11:ad:
         33:24:96:8a:08:2a:c7:c9:ff:24:55:ea:f5:46:ca:d4:19:b6:
         2e:83:ea:f3:8f:9a:2a:62:61:4e:91:05:46:30:c6:88:35:16:
         6d:06:5d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:33 2024 by rpki-client on console-fra.rpki-client.org