Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/c6989e14-9d2f-33d8-8962-307f4f4db31c.roa
File:                     c6989e14-9d2f-33d8-8962-307f4f4db31c.roa (raw, json)
Hash identifier:          mwkVIviVg+CU0MtuxWZDQENBbasnAckjJGw5w3/5xA4=
Subject key identifier:   31:9F:1B:F9:F0:65:7B:E6:1D:8E:AE:9D:72:7B:A5:38:78:82:C1:2D
Certificate issuer:       /CN=b6f28d10-5739-4e40-a446-935c60d79169
Certificate serial:       010D0C9F43285847AF9BEB9FA9561CB1C45ED200
Authority key identifier: E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/c6989e14-9d2f-33d8-8962-307f4f4db31c.roa
Signing time:             Mon 28 Oct 2024 01:00:32 +0000
ROA not before:           Mon 28 Oct 2024 01:00:32 +0000
ROA not after:            Sun 26 Jan 2025 02:00:32 +0000
asID:                     26480
IP address blocks:        2607:f800::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:af:9b:eb:9f:a9:56:1c:b1:c4:5e:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6f28d10-5739-4e40-a446-935c60d79169
        Validity
            Not Before: Oct 28 01:00:32 2024 GMT
            Not After : Jan 26 02:00:32 2025 GMT
        Subject: CN=7b7af6b3-99fa-4c5f-807f-ebdf47710e49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:30:f9:e3:4e:a1:f7:d4:5c:f7:59:8a:26:df:
                    6e:02:fe:b7:09:c8:e6:6f:94:1a:42:c4:24:91:35:
                    43:6b:c6:91:9e:f7:55:a0:e8:6d:73:2d:c0:b3:51:
                    3a:15:12:af:71:e9:ae:5e:c7:f2:c3:2b:f7:1a:00:
                    6c:3d:d7:a7:0f:a9:e2:af:f5:51:b0:df:de:d4:98:
                    a7:8b:12:1e:d8:f5:81:18:19:69:65:dc:fc:ce:4e:
                    97:ac:a5:9f:bc:1c:96:5e:e8:f9:37:85:d9:4d:1e:
                    95:ba:9e:94:85:60:3c:5e:ba:04:5e:5d:f7:80:6d:
                    35:93:9f:4a:c9:d4:81:0f:a8:ed:83:2e:51:0b:4f:
                    af:cd:2a:29:14:90:5a:b4:91:e8:7e:b5:64:d9:fc:
                    2f:a5:f5:fc:f5:ae:c0:9d:97:20:26:a7:d5:79:1d:
                    1e:87:22:22:35:83:a7:d8:5a:1f:2f:da:62:62:82:
                    93:5c:96:5e:7f:73:d1:16:8a:45:fc:b1:d0:2c:04:
                    4c:e2:d0:92:76:8e:f8:8b:04:5a:b1:8a:9a:22:28:
                    ef:a6:3f:5f:02:c4:1c:36:c7:91:18:e6:47:97:90:
                    10:4e:21:8d:04:93:e4:82:d3:d9:26:5f:6e:a7:aa:
                    f8:f2:9c:3f:b5:9e:3b:56:f2:73:5a:d9:7f:dd:8d:
                    44:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:9F:1B:F9:F0:65:7B:E6:1D:8E:AE:9D:72:7B:A5:38:78:82:C1:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/c6989e14-9d2f-33d8-8962-307f4f4db31c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl

            X509v3 Authority Key Identifier:
                keyid:E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f800::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:34:08:d7:c6:d3:8d:d6:b9:29:6b:70:92:da:d9:ab:b3:15:
         aa:e2:3d:68:e7:4f:b6:26:b9:76:48:c6:66:38:de:d2:6f:d6:
         9a:98:fc:51:ad:bb:da:76:4c:52:55:48:12:4a:f9:6f:89:cb:
         23:02:c3:ff:7a:e3:d7:71:4c:61:e1:5e:de:1c:11:0c:77:6e:
         0d:1c:77:ba:06:6f:df:24:3e:d0:03:18:14:a9:44:11:45:79:
         68:e0:ba:ac:0b:2a:df:1e:50:71:54:90:1f:0a:d4:4a:68:74:
         44:60:ce:41:98:3c:91:fd:f1:8b:0d:e1:39:7f:ef:6c:6b:c0:
         7d:f6:64:ec:b1:42:03:8d:5b:d9:24:33:e6:7f:e5:81:d0:3a:
         34:3a:3b:af:8b:fb:0e:ef:e8:4b:6a:6e:88:e2:73:a8:47:42:
         da:31:92:67:18:df:a3:ab:e5:f2:83:28:62:28:a3:0c:88:be:
         2f:54:52:c2:f5:db:44:f3:3c:a4:6d:ac:34:4f:89:af:4e:06:
         54:9a:ca:6a:9b:48:c6:5f:a0:dd:f6:eb:c3:2a:9a:f5:8f:90:
         a8:00:a2:48:e6:13:a7:c8:37:ea:32:5f:b7:cc:1f:1f:8a:8c:
         21:31:c3:e8:48:0c:06:80:92:32:3d:d3:a5:18:95:a6:a0:90:
         f2:66:0a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:56:43 2024 by rpki-client on console-ams.rpki-client.org