Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/1caee2e0-468c-3132-8bcf-027645336789.roa
File:                     1caee2e0-468c-3132-8bcf-027645336789.roa (raw, json)
Hash identifier:          UnQC0ubFB1t7LDm7psWuskjbl2dC4jZYZldUPVhpEg8=
Subject key identifier:   69:63:20:40:80:09:86:29:A4:9D:D1:7C:67:49:3A:3D:BE:0D:C0:8B
Certificate issuer:       /CN=e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0
Certificate serial:       010D0C9F432858472F307AC3DB740F09655C8D00
Authority key identifier: 0D:39:5C:E3:0D:1F:BD:B6:79:8A:1D:50:60:EC:FC:62:57:43:80:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/1caee2e0-468c-3132-8bcf-027645336789.roa
Signing time:             Thu 12 Sep 2024 01:00:31 +0000
ROA not before:           Thu 12 Sep 2024 01:00:31 +0000
ROA not after:            Wed 11 Dec 2024 02:00:31 +0000
asID:                     19471
IP address blocks:        2606:6b00::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2f:30:7a:c3:db:74:0f:09:65:5c:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0
        Validity
            Not Before: Sep 12 01:00:31 2024 GMT
            Not After : Dec 11 02:00:31 2024 GMT
        Subject: CN=57b68d12-abfc-424c-b252-d1133163e50c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e4:48:4b:26:59:7c:17:2f:29:9e:c7:cb:6e:
                    07:10:62:bf:89:22:1c:ac:44:83:c1:15:a9:1f:d4:
                    13:08:70:a9:58:a6:1d:6a:3d:86:ca:37:6b:c4:f6:
                    d1:1f:d8:37:b4:6c:79:cf:81:1e:42:35:d8:48:35:
                    46:c9:36:e4:b9:6b:73:d6:60:d5:51:c6:3d:f7:32:
                    dd:4b:58:c6:4e:55:b6:0c:6a:91:c5:5e:c8:bf:5c:
                    e7:71:87:76:36:0b:f9:59:36:ae:01:b2:28:9b:02:
                    b9:a6:63:22:37:ae:9e:b2:6f:b7:f5:e5:32:5f:85:
                    8f:f1:f6:25:ff:c1:b7:eb:30:2b:cc:86:81:09:83:
                    bd:e4:dd:a4:19:01:ba:0f:50:7d:43:0b:f7:9f:b0:
                    71:18:af:1d:37:01:dd:c3:51:f1:1d:f0:d3:ab:46:
                    81:74:03:1f:f3:ec:b9:a8:0f:17:9f:0a:87:36:45:
                    60:08:8a:a4:fa:bd:c9:21:9b:80:80:81:0d:dd:1e:
                    39:eb:ef:7d:44:77:8b:0d:44:39:24:21:41:11:58:
                    1c:25:d3:dc:33:44:5a:2d:fa:71:dc:7a:4c:fe:03:
                    2e:04:9d:7c:35:2a:f6:29:f8:0a:12:70:26:4e:e1:
                    7e:ba:fa:3d:51:4f:cc:45:ef:c6:3a:a3:6a:20:96:
                    5a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:63:20:40:80:09:86:29:A4:9D:D1:7C:67:49:3A:3D:BE:0D:C0:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/1caee2e0-468c-3132-8bcf-027645336789.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.crl

            X509v3 Authority Key Identifier:
                keyid:0D:39:5C:E3:0D:1F:BD:B6:79:8A:1D:50:60:EC:FC:62:57:43:80:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:6b00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ca:9f:eb:d6:3a:b8:06:22:d1:6c:ed:cd:8a:d0:17:2b:a5:49:
         f4:37:aa:e0:f6:21:ff:9c:6f:d4:4f:e2:6b:44:9d:ad:e4:20:
         d8:78:d8:ae:5f:96:94:15:8a:fa:30:b2:20:ff:8d:44:22:ff:
         0f:2f:23:67:1e:28:5b:0d:0a:3b:17:a4:ed:33:82:af:86:76:
         1b:6d:a5:1e:f4:ed:ec:6d:a0:57:82:53:d7:94:b5:1a:f6:8e:
         1f:d3:fc:a3:68:a7:e9:18:75:94:d9:16:b8:ff:c5:46:ba:b2:
         78:34:ae:a4:7f:eb:52:55:fb:55:0a:0c:26:5c:91:07:29:bc:
         6f:80:bc:94:70:a0:29:ea:b1:ba:62:b0:5e:34:cc:3f:60:9e:
         42:48:c1:d8:04:2d:ac:31:58:32:c9:a1:ca:b5:d6:39:b5:6d:
         f7:b1:b4:83:49:c5:75:07:01:d0:7d:58:b7:64:90:ae:7e:25:
         5a:c3:fa:d7:c5:b4:df:83:8d:f3:f7:cf:90:c9:17:e8:6a:0d:
         38:7a:44:b6:8f:5b:31:78:eb:70:84:01:4b:2f:bf:b2:2b:7b:
         52:a5:41:f4:5f:ce:4d:ec:1c:cb:97:2c:23:53:1c:3a:84:9b:
         17:23:07:73:3b:a7:30:f6:64:20:91:99:77:c4:e2:ac:dd:3d:
         78:b4:a7:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:38:45 2024 by rpki-client on console-fra.rpki-client.org