Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8/748d109b-49f1-38ef-9ca5-cc9d24c8fe96.roa
File:                     748d109b-49f1-38ef-9ca5-cc9d24c8fe96.roa (raw, json)
Hash identifier:          mHpvathjoDin8txxYf7wAme3myEW4/PBUcaW98GT7eY=
Subject key identifier:   05:38:D3:20:D4:EA:51:49:0C:E9:D5:22:2B:07:8B:85:AA:DC:B9:F8
Certificate issuer:       /CN=6fb18968-7aa5-41e5-96b6-c45c25a566e8
Certificate serial:       010D0C9F4328584789EBF754CDBD93C74BCD3280
Authority key identifier: C6:9F:AC:EA:70:7D:E0:51:AB:C5:1B:82:39:4D:0E:73:3A:A2:A1:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8/748d109b-49f1-38ef-9ca5-cc9d24c8fe96.roa
Signing time:             Mon 14 Oct 2024 13:00:47 +0000
ROA not before:           Mon 14 Oct 2024 13:00:47 +0000
ROA not after:            Sun 12 Jan 2025 14:00:47 +0000
asID:                     11260
IP address blocks:        2607:a000::/32 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8/6fb18968-7aa5-41e5-96b6-c45c25a566e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8/6fb18968-7aa5-41e5-96b6-c45c25a566e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:89:eb:f7:54:cd:bd:93:c7:4b:cd:32:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fb18968-7aa5-41e5-96b6-c45c25a566e8
        Validity
            Not Before: Oct 14 13:00:47 2024 GMT
            Not After : Jan 12 14:00:47 2025 GMT
        Subject: CN=ddd08fdf-52f2-4ca6-a296-e69824630ac7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a8:6c:e4:04:22:a4:01:d2:f0:b7:61:b2:48:
                    e0:38:a7:52:0e:6e:98:51:a9:4c:e7:db:90:3a:25:
                    08:f4:a1:d5:29:de:1f:f0:2e:a8:4f:5c:af:29:a9:
                    09:d7:41:bc:9a:3c:d3:32:25:da:84:eb:ca:e2:2c:
                    aa:ea:a4:31:77:4b:8d:b5:9e:47:f0:48:5b:a1:e0:
                    1d:12:7d:63:9c:10:cf:38:4e:41:26:e7:25:62:ec:
                    92:97:eb:0a:ae:0b:ee:fa:a8:e0:bd:18:af:1e:10:
                    3e:52:08:5e:39:27:96:90:7c:be:8f:98:fd:09:32:
                    38:d8:7e:94:16:92:3b:15:c8:9c:8e:f2:07:58:64:
                    00:cb:35:a4:85:00:99:8d:37:dd:43:f9:1b:9c:c0:
                    b6:94:25:f4:ea:ba:84:c6:4e:d0:0a:90:8f:c5:11:
                    b5:59:c6:29:28:c1:c7:28:94:19:6f:d1:ec:8d:16:
                    a9:43:13:03:b9:e1:a1:98:37:f8:9c:78:c9:5a:41:
                    b1:41:14:ae:2c:b9:7f:ab:fe:40:c1:de:aa:fb:6a:
                    a0:a3:2f:34:65:a0:38:6b:86:39:48:ba:cc:09:84:
                    af:f3:b9:ce:08:96:33:ce:0c:31:50:db:e1:03:bc:
                    0c:6e:8e:b6:4a:d0:c0:93:f5:23:2c:25:c0:26:f6:
                    5f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:38:D3:20:D4:EA:51:49:0C:E9:D5:22:2B:07:8B:85:AA:DC:B9:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8/748d109b-49f1-38ef-9ca5-cc9d24c8fe96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8/6fb18968-7aa5-41e5-96b6-c45c25a566e8.crl

            X509v3 Authority Key Identifier:
                keyid:C6:9F:AC:EA:70:7D:E0:51:AB:C5:1B:82:39:4D:0E:73:3A:A2:A1:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:a000::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:fa:e9:e0:82:a2:31:c4:a1:99:bc:12:e4:39:11:9d:e4:86:
         64:b5:f0:d0:ea:7d:dc:91:17:e5:58:c2:f8:ed:ec:88:ed:7a:
         10:12:f7:3a:31:a8:1a:d8:21:cf:28:b8:ab:7f:57:8b:0b:0c:
         1a:0b:3a:80:cf:8c:17:15:5c:18:8f:a5:58:68:8d:80:0e:3f:
         be:98:11:a7:a0:a2:29:aa:83:2f:66:83:15:81:65:c1:5b:4d:
         9f:b1:cf:bc:6b:42:ef:a6:b4:7d:9b:59:9a:06:19:d9:3f:40:
         14:4f:37:ba:ac:c5:7d:ef:ac:4e:ca:3a:e0:4f:a3:b6:47:d9:
         cb:37:6b:b8:ab:c6:85:b0:9e:57:70:30:8e:d0:83:d1:6c:56:
         ca:82:f6:93:f3:66:1b:45:46:db:5c:78:33:82:a7:19:3a:9a:
         0b:96:2c:71:ee:86:16:07:f4:85:36:5c:be:dc:73:23:db:3b:
         4c:eb:09:41:aa:c0:90:f8:0e:f7:43:a7:34:2d:d0:49:93:fe:
         e1:16:e0:65:6d:0a:7d:58:0e:c7:6d:04:fa:39:01:58:2d:97:
         ff:81:e9:0d:96:23:53:54:77:5b:e1:a7:ae:3c:91:09:2a:76:
         97:57:10:04:96:46:d8:40:0d:ff:ee:9b:bf:d8:cf:e4:c6:b0:
         f2:9b:75:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 01:28:11 2024 by rpki-client on console-ams.rpki-client.org