Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5e8ba34-ba4a-475e-9f98-6fd82aabc599/884ed427-6a6a-39f1-a2a4-4f4f7a1b2a70.roa
File:                     884ed427-6a6a-39f1-a2a4-4f4f7a1b2a70.roa (raw, json)
Hash identifier:          Ddw3pvobBVEZNkj+MIrygFGsJWNTzv5DWy2/yX07mjY=
Subject key identifier:   14:3D:34:E2:69:ED:BF:74:4E:2B:60:67:C8:EE:8F:43:F3:1E:7A:68
Certificate issuer:       /CN=d5e8ba34-ba4a-475e-9f98-6fd82aabc599
Certificate serial:       010D0C9F43285847A4712EACACF7EDDB89A83880
Authority key identifier: EA:00:6E:F9:15:E0:68:74:E9:40:41:BA:35:41:15:44:0E:F2:AA:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5e8ba34-ba4a-475e-9f98-6fd82aabc599.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5e8ba34-ba4a-475e-9f98-6fd82aabc599/884ed427-6a6a-39f1-a2a4-4f4f7a1b2a70.roa
Signing time:             Thu 24 Oct 2024 01:00:32 +0000
ROA not before:           Thu 24 Oct 2024 01:00:32 +0000
ROA not after:            Wed 22 Jan 2025 02:00:32 +0000
asID:                     36858
IP address blocks:        2607:75c0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5e8ba34-ba4a-475e-9f98-6fd82aabc599/d5e8ba34-ba4a-475e-9f98-6fd82aabc599.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5e8ba34-ba4a-475e-9f98-6fd82aabc599/d5e8ba34-ba4a-475e-9f98-6fd82aabc599.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5e8ba34-ba4a-475e-9f98-6fd82aabc599.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a4:71:2e:ac:ac:f7:ed:db:89:a8:38:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5e8ba34-ba4a-475e-9f98-6fd82aabc599
        Validity
            Not Before: Oct 24 01:00:32 2024 GMT
            Not After : Jan 22 02:00:32 2025 GMT
        Subject: CN=f3e96dfd-2620-4f90-993d-38782572191b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d0:36:5d:61:e8:d3:82:c1:96:48:91:00:bb:
                    1a:32:c9:9c:c6:ba:eb:87:53:9f:f3:1d:f7:f9:05:
                    b3:f4:ff:ee:ee:28:31:52:22:d1:26:1a:f3:1a:71:
                    74:49:7c:8d:02:cd:04:38:b8:70:de:77:11:b8:cf:
                    e9:49:00:43:b3:76:ad:09:f1:ec:23:e6:31:f1:9c:
                    7f:3c:f2:20:2d:ac:03:b6:4c:2a:aa:ad:b6:35:e1:
                    a2:6c:5c:bf:00:58:67:60:ef:97:b1:33:4b:0f:ff:
                    67:35:eb:dc:aa:c5:b9:6c:d2:10:e8:d1:7a:a5:28:
                    e3:20:ad:2a:02:e0:63:66:25:99:d0:7d:fb:c7:78:
                    3d:a7:27:b5:95:6c:82:d4:a0:6c:b8:2c:c9:3d:27:
                    04:27:5c:d0:08:c7:b6:42:a0:17:82:4c:ad:32:27:
                    6d:79:cc:21:dd:83:ce:00:2b:77:9c:36:65:4f:15:
                    91:8f:8b:1a:af:50:12:d6:01:fc:24:fa:a0:39:e1:
                    26:91:7a:df:b5:3d:38:ac:bf:12:8d:07:3e:fa:6f:
                    ed:5b:ed:60:a1:cc:57:0b:cb:ad:07:00:26:9c:aa:
                    2f:be:ea:1d:e0:8b:a8:f3:fa:2e:e8:8c:bb:07:95:
                    e7:9d:b2:cd:a0:0c:fb:e4:9e:bf:8c:0c:58:2a:9b:
                    48:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:3D:34:E2:69:ED:BF:74:4E:2B:60:67:C8:EE:8F:43:F3:1E:7A:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5e8ba34-ba4a-475e-9f98-6fd82aabc599/884ed427-6a6a-39f1-a2a4-4f4f7a1b2a70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5e8ba34-ba4a-475e-9f98-6fd82aabc599/d5e8ba34-ba4a-475e-9f98-6fd82aabc599.crl

            X509v3 Authority Key Identifier:
                keyid:EA:00:6E:F9:15:E0:68:74:E9:40:41:BA:35:41:15:44:0E:F2:AA:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5e8ba34-ba4a-475e-9f98-6fd82aabc599.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:75c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:03:6f:6d:5c:a2:bd:f7:6b:b2:b9:a7:80:63:f5:31:5a:73:
         9e:f6:43:2a:4a:6e:f2:38:fc:a6:e0:60:58:69:ee:51:77:61:
         6c:43:29:f3:cf:75:be:96:af:58:45:bd:47:df:7b:4e:b1:99:
         62:f4:5d:b9:33:2c:74:a6:c9:e2:8f:05:ad:99:e4:52:7d:d3:
         57:00:9f:e4:0a:2b:d2:1e:79:6f:a9:7f:a8:f7:ef:78:46:96:
         86:5b:a7:57:c9:c1:c9:b7:cf:10:dc:74:5e:94:7c:68:60:af:
         0b:fa:c4:d8:1c:e9:09:86:9c:7c:be:46:37:23:0e:bc:02:ff:
         08:13:5d:57:7a:69:49:53:52:f7:cb:d1:80:4b:4b:ec:0b:20:
         1e:49:85:7f:08:77:c1:51:a0:ce:c4:70:5c:69:3e:9c:8e:fd:
         ab:47:bf:f8:14:79:b1:96:89:d1:87:98:48:ea:0f:3d:6a:d4:
         21:78:32:ff:f9:fb:b0:fa:f4:0f:95:59:6d:48:a1:83:aa:d1:
         b9:cf:da:ec:52:cb:80:df:b7:c5:6b:89:83:ad:32:d8:ba:0a:
         d3:58:b0:dd:95:6a:7a:25:72:1e:1a:d8:e6:04:df:59:d4:ad:
         36:aa:a3:27:4e:92:1e:4f:1b:99:85:89:95:d2:05:4f:8b:63:
         b2:f7:42:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:16:41 2024 by rpki-client on console-fra.rpki-client.org