Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/a1e057fb-16f7-3396-8982-11bad5ac424f.roa
File:                     a1e057fb-16f7-3396-8982-11bad5ac424f.roa (raw, json)
Hash identifier:          pQWaKGVuB7RoUpKccgZA/yMIZvlmz82YYyowKYfU2rg=
Subject key identifier:   3B:6A:C1:F0:57:09:9F:AD:F2:3B:F0:78:C2:41:42:93:17:A7:50:8C
Certificate issuer:       /CN=8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee
Certificate serial:       010D0C9F43285847E78F645CF095D522884F38A0
Authority key identifier: 92:15:36:2F:1B:1E:90:72:AF:90:24:E2:1F:13:67:D7:7A:09:E9:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/a1e057fb-16f7-3396-8982-11bad5ac424f.roa
Signing time:             Sun 17 Nov 2024 02:00:28 +0000
ROA not before:           Sun 17 Nov 2024 02:00:28 +0000
ROA not after:            Sat 15 Feb 2025 02:00:28 +0000
asID:                     53407
IP address blocks:        2604:9440::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e7:8f:64:5c:f0:95:d5:22:88:4f:38:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee
        Validity
            Not Before: Nov 17 02:00:28 2024 GMT
            Not After : Feb 15 02:00:28 2025 GMT
        Subject: CN=c2436695-e011-432c-8c48-93d5b34a123c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:97:e5:2f:9a:e9:f3:3f:f4:a5:11:44:ee:d3:
                    6c:c9:d0:14:4f:8c:85:9d:20:9f:8e:87:b7:ff:36:
                    e9:3d:ea:84:2e:83:b1:a5:d4:a7:c6:f9:02:64:4c:
                    05:8b:02:5e:c8:00:cd:76:e7:f1:76:5a:49:8f:d5:
                    92:af:36:fe:24:01:f5:25:aa:0d:66:96:4d:b6:93:
                    85:d2:a4:ba:df:2f:fb:cb:cb:4b:eb:1a:6b:cf:16:
                    ff:b5:f1:6e:d1:5e:84:60:de:00:70:f9:47:27:21:
                    84:ee:b2:96:1d:a9:63:c6:69:a5:0d:49:96:34:7f:
                    fe:69:4e:e2:f1:8e:80:a3:ea:dc:a9:d1:6f:e8:3b:
                    89:3e:02:70:8d:83:ca:64:78:2e:4d:98:bf:db:b4:
                    5d:60:a5:6a:f2:22:36:7a:35:eb:2b:45:74:e6:e9:
                    72:f8:98:46:ae:ed:eb:8e:24:4d:93:8f:5a:82:07:
                    bd:75:96:ec:b0:9e:fc:8a:72:6c:d7:dd:dc:d5:73:
                    e4:6e:a8:21:84:71:05:2d:de:5e:85:ea:11:d1:c8:
                    c5:fe:16:5d:4f:8c:57:de:2d:68:f4:fd:11:e6:36:
                    5e:d4:58:fd:59:40:62:33:0f:2b:1b:32:1a:d1:6b:
                    6e:af:2f:44:99:3f:23:a6:a2:ed:bf:19:c5:6c:39:
                    14:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:6A:C1:F0:57:09:9F:AD:F2:3B:F0:78:C2:41:42:93:17:A7:50:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/a1e057fb-16f7-3396-8982-11bad5ac424f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.crl

            X509v3 Authority Key Identifier:
                keyid:92:15:36:2F:1B:1E:90:72:AF:90:24:E2:1F:13:67:D7:7A:09:E9:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:9440::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:b3:66:59:ae:df:d0:e3:ad:ab:e7:4f:78:59:c0:d0:9d:6d:
         b0:49:bc:9e:93:d6:0f:b2:29:da:4d:9d:09:32:f2:13:5b:5e:
         0b:36:10:da:7d:b3:0d:d9:38:f3:29:9f:01:b7:90:dd:a7:8c:
         47:f3:62:9b:e2:a4:0d:88:54:c8:ea:59:b8:27:91:0e:f7:45:
         bb:b4:9e:07:f6:31:9c:e1:e4:b7:8e:fe:64:87:aa:ff:ef:81:
         67:42:ce:f3:2d:90:32:cb:bd:5b:4f:b8:d0:fa:27:0f:21:98:
         de:f7:98:4b:ce:21:ef:68:5a:68:d0:d5:1a:a4:35:ed:50:57:
         e1:16:00:ed:15:75:85:cc:7d:35:70:0a:84:ec:f2:32:8e:a0:
         e6:09:e0:be:6a:cc:6d:72:9b:d6:f8:74:c2:e5:f9:6c:a1:d1:
         23:48:a9:61:06:f9:0c:9a:fd:99:f5:c5:af:89:35:d7:8c:d1:
         23:c9:97:e4:cf:2e:5b:5a:ab:12:cf:e2:0d:92:88:7f:02:56:
         13:b7:78:23:70:a9:be:d0:1a:96:8e:7e:bb:c4:eb:3b:00:68:
         05:02:96:e4:42:2a:58:b8:08:04:cb:05:0b:b2:54:a1:29:f1:
         cd:27:ef:ad:64:5f:84:0c:66:fa:92:b9:45:0d:0d:85:2e:ca:
         d4:cf:09:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:30:56 2024 by rpki-client on console-fra.rpki-client.org