Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c305f65e-54a0-41ec-b65c-ae91eca6cca0/14d40ba6-3fe9-3541-96e6-b365d43b43a2.roa
File:                     14d40ba6-3fe9-3541-96e6-b365d43b43a2.roa (raw, json)
Hash identifier:          hX8+qA1k3ols8YaYbJBSgE1rK1VUYbMS4yZlNQBnMxA=
Subject key identifier:   E8:02:B0:74:3E:A4:E4:85:F1:F1:56:DF:3F:0E:B2:BD:73:DC:15:4F
Certificate issuer:       /CN=c305f65e-54a0-41ec-b65c-ae91eca6cca0
Certificate serial:       010D0C9F432858473FF0A43372ECC11765838980
Authority key identifier: C9:DA:77:C7:7B:27:46:4E:B6:81:F6:A4:65:67:3D:45:C5:D4:C5:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c305f65e-54a0-41ec-b65c-ae91eca6cca0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c305f65e-54a0-41ec-b65c-ae91eca6cca0/14d40ba6-3fe9-3541-96e6-b365d43b43a2.roa
Signing time:             Wed 18 Sep 2024 01:00:30 +0000
ROA not before:           Wed 18 Sep 2024 01:00:30 +0000
ROA not after:            Tue 17 Dec 2024 02:00:30 +0000
asID:                     62902
IP address blocks:        2607:2540::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c305f65e-54a0-41ec-b65c-ae91eca6cca0/c305f65e-54a0-41ec-b65c-ae91eca6cca0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c305f65e-54a0-41ec-b65c-ae91eca6cca0/c305f65e-54a0-41ec-b65c-ae91eca6cca0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c305f65e-54a0-41ec-b65c-ae91eca6cca0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3f:f0:a4:33:72:ec:c1:17:65:83:89:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c305f65e-54a0-41ec-b65c-ae91eca6cca0
        Validity
            Not Before: Sep 18 01:00:30 2024 GMT
            Not After : Dec 17 02:00:30 2024 GMT
        Subject: CN=f15f3a80-d43f-4a2c-9e55-aaef8de7936f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:fc:7c:fb:f0:3c:95:9d:08:08:28:35:19:45:
                    5e:5d:11:d7:a2:41:e2:b7:13:1f:da:82:ed:56:9a:
                    de:9c:09:1c:de:e9:00:d2:b4:3c:ca:52:c1:61:4b:
                    75:ed:19:94:2c:a7:92:02:0b:e8:0b:e3:f0:93:6c:
                    4b:46:85:fc:85:c6:26:3d:94:b9:f0:79:18:35:5d:
                    28:0c:17:5d:7f:31:b6:1d:89:d3:51:11:43:f2:68:
                    00:34:d1:ed:79:30:2a:8b:84:8a:2d:55:1c:29:13:
                    8b:f8:49:5f:03:cf:7a:b8:32:26:c6:d0:54:67:df:
                    e7:34:97:8a:b8:26:d8:2b:24:cc:6b:2b:73:02:5d:
                    94:0c:a2:25:3a:04:c5:0c:fb:72:6c:ad:e8:6a:52:
                    d0:51:93:3d:77:63:0e:bd:b6:8f:0b:10:25:13:28:
                    14:86:04:8b:3c:aa:48:20:ee:92:51:a5:51:17:a8:
                    32:3d:5b:10:13:6a:d5:2e:52:81:b7:d9:10:da:be:
                    e6:5b:bf:0d:81:d3:79:0b:95:dd:c8:8f:c6:45:73:
                    e4:7d:34:77:d2:32:a6:db:de:82:2c:39:92:de:7c:
                    d4:5b:ac:b9:93:0e:76:98:ef:fd:db:d7:1c:55:d8:
                    4b:40:eb:f3:77:b0:8a:85:d8:4e:a4:d8:58:b0:10:
                    6e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:02:B0:74:3E:A4:E4:85:F1:F1:56:DF:3F:0E:B2:BD:73:DC:15:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c305f65e-54a0-41ec-b65c-ae91eca6cca0/14d40ba6-3fe9-3541-96e6-b365d43b43a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c305f65e-54a0-41ec-b65c-ae91eca6cca0/c305f65e-54a0-41ec-b65c-ae91eca6cca0.crl

            X509v3 Authority Key Identifier:
                keyid:C9:DA:77:C7:7B:27:46:4E:B6:81:F6:A4:65:67:3D:45:C5:D4:C5:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c305f65e-54a0-41ec-b65c-ae91eca6cca0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:2540::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:eb:c1:eb:37:22:4b:6f:77:f6:f9:50:8d:03:03:bd:d0:90:
         38:5f:f9:1c:8a:40:b1:46:ca:01:c5:eb:ee:6f:3a:0f:4a:91:
         4a:07:bc:05:c7:e1:f4:ab:0b:ae:47:8e:0d:e8:0e:2c:7d:b0:
         78:0e:48:ef:1b:db:42:81:5c:0f:01:84:91:12:ec:74:21:c2:
         6a:8f:40:8b:d1:5c:e5:a8:81:c7:87:3f:17:d3:05:c3:ec:ca:
         cd:6c:9b:2c:9f:03:b8:07:27:e3:92:ba:5f:a6:04:b5:1a:a7:
         2b:6f:5a:16:f1:c3:40:bb:4c:ca:a8:3f:c5:79:4a:64:fd:5f:
         3e:8f:19:25:f6:9f:83:b9:8b:6e:25:5b:0c:8a:3c:74:cb:9b:
         a2:6a:c3:7a:71:87:43:24:d5:de:b4:54:3c:3a:d3:ee:59:3d:
         9c:b8:04:c8:7a:1a:f7:87:a1:b8:26:d0:d2:bb:26:59:3e:8f:
         fe:e5:c3:e9:5c:48:ca:b7:a3:b4:e9:2b:fe:86:95:5b:8f:71:
         c7:69:0e:7e:d6:ce:26:f5:48:24:c1:95:20:f7:02:ff:43:e6:
         b4:41:91:9f:06:ae:a6:14:d4:f0:04:a4:69:61:05:c9:b8:43:
         5f:2b:0f:7f:13:bd:cf:5e:42:fa:4c:66:e7:b8:8c:8d:9e:f9:
         0a:70:a7:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:49:14 2024 by rpki-client on console-ams.rpki-client.org