Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/f8d468e2-df6c-32d9-a013-720419dde62d.roa
File:                     f8d468e2-df6c-32d9-a013-720419dde62d.roa (raw, json)
Hash identifier:          mauy7HL5p9A8vTyZiwTmeBUJgAsK/AEajee5Z1saWdI=
Subject key identifier:   55:12:1E:0D:4A:7D:7E:9B:CF:F4:92:10:6E:96:BC:BF:6C:9F:A9:FB
Certificate issuer:       /CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
Certificate serial:       010D0C9F432858473D2606347B28F38AE1C34500
Authority key identifier: DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/f8d468e2-df6c-32d9-a013-720419dde62d.roa
Signing time:             Tue 17 Sep 2024 01:00:31 +0000
ROA not before:           Tue 17 Sep 2024 01:00:31 +0000
ROA not after:            Mon 16 Dec 2024 02:00:31 +0000
asID:                     271
IP address blocks:        2607:f8f0:680::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3d:26:06:34:7b:28:f3:8a:e1:c3:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
        Validity
            Not Before: Sep 17 01:00:31 2024 GMT
            Not After : Dec 16 02:00:31 2024 GMT
        Subject: CN=b3decc22-0212-42dd-ad05-cdbbff5b0421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:24:30:f0:4e:da:18:21:2a:d0:6e:b9:ae:7e:
                    86:6b:fc:fa:05:cf:31:bd:72:c1:d9:cc:90:97:b9:
                    49:c0:f4:46:09:d7:11:55:ae:a2:9b:7c:bb:36:bf:
                    38:c0:9e:ea:64:e2:7d:b3:73:b0:ac:2c:35:c4:8a:
                    25:b5:20:7c:29:58:b8:a6:b1:d8:d9:68:72:ae:9d:
                    7e:31:3d:6b:52:80:25:07:d4:81:c9:af:4e:d4:f8:
                    2c:22:5a:52:9d:65:8f:ad:be:4e:c0:b4:40:c6:79:
                    67:02:27:2b:95:70:3b:61:5b:43:d2:18:6b:eb:ed:
                    98:19:39:5a:1c:1b:28:42:04:b6:bb:57:44:9c:1b:
                    ff:53:05:06:d7:c3:90:27:6c:82:07:50:a5:39:e7:
                    2d:29:85:e7:f3:73:9f:ae:d5:44:d5:fa:4e:c6:8c:
                    a8:bb:70:89:f4:29:66:be:60:2f:68:34:4b:cb:da:
                    f0:06:d7:90:62:3d:d8:e6:4f:c8:f9:7f:59:05:18:
                    5d:b2:81:7d:f8:fb:d4:5f:bd:a2:82:c2:e9:59:3b:
                    fe:3f:6d:70:11:26:a7:85:ff:a5:0a:3a:ad:0b:0d:
                    ff:0f:c7:88:41:e3:f3:e3:43:82:22:21:01:f4:79:
                    17:4d:44:4c:0f:49:f5:9c:40:cc:b6:67:4d:0f:e1:
                    9c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:12:1E:0D:4A:7D:7E:9B:CF:F4:92:10:6E:96:BC:BF:6C:9F:A9:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/f8d468e2-df6c-32d9-a013-720419dde62d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl

            X509v3 Authority Key Identifier:
                keyid:DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f8f0:680::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:ec:37:8a:7c:b0:9b:7f:b6:42:85:cf:4d:36:da:05:42:8a:
         1a:b2:6e:5b:07:3b:21:c0:d9:73:fa:18:ae:78:a8:d9:19:9b:
         b8:14:71:5f:4a:cf:80:98:e2:56:55:b4:82:c5:2c:6b:94:11:
         78:f5:ec:2e:0e:ff:56:3f:6d:b5:aa:1f:ec:c5:0b:8c:22:22:
         e6:31:60:5d:54:da:03:ee:a7:b1:44:e8:63:93:08:b0:7f:58:
         f9:cd:eb:58:9a:ed:12:bc:ba:0d:32:dc:8b:88:76:07:77:66:
         a8:83:5f:83:36:21:10:5c:b2:34:a5:12:dc:39:93:35:5b:bb:
         22:17:1f:ea:b1:d3:5e:fb:7a:dc:94:9b:91:88:42:6e:08:71:
         ed:c0:a5:c9:3e:34:b1:87:93:20:8c:ac:56:8e:f0:18:d2:d8:
         67:3c:f7:b6:6a:f2:4d:56:b9:b7:4e:57:8d:19:c4:c1:5c:f8:
         68:eb:4a:69:2a:9e:f6:37:49:5a:ac:df:9e:50:67:cd:4a:60:
         ee:f0:58:f8:48:19:70:a9:2a:a7:a1:b1:b3:11:75:c8:5d:47:
         22:16:4b:dc:e7:51:4b:74:bb:11:28:2b:bc:76:f1:15:ef:7b:
         c4:e2:35:73:01:6a:a9:79:0e:23:08:47:f0:f1:1c:7a:ea:81:
         d5:0a:28:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:58 2024 by rpki-client on console-fra.rpki-client.org