Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/27872a34-19cb-38ff-9f2b-60c884e32b1a.roa
File:                     27872a34-19cb-38ff-9f2b-60c884e32b1a.roa (raw, json)
Hash identifier:          HsZhosYyaBIqAZf2DY4bTAawVN6nuSzWVbubhKI5hPE=
Subject key identifier:   CE:E7:46:68:AC:3E:67:C0:B0:B6:2E:58:AC:68:82:DB:B5:E5:35:E6
Certificate issuer:       /CN=f81bacd8-f7d9-47d7-aa24-5391049f9c82
Certificate serial:       010D0C9F432858475A7638D0ABC65868DB02B380
Authority key identifier: EC:FD:C8:EB:B2:36:F3:BB:96:DA:C4:64:EB:92:D9:A9:A9:F7:13:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/27872a34-19cb-38ff-9f2b-60c884e32b1a.roa
Signing time:             Fri 27 Sep 2024 13:00:41 +0000
ROA not before:           Fri 27 Sep 2024 13:00:41 +0000
ROA not after:            Thu 26 Dec 2024 14:00:41 +0000
asID:                     400544
IP address blocks:        2607:76c0:5::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/f81bacd8-f7d9-47d7-aa24-5391049f9c82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/f81bacd8-f7d9-47d7-aa24-5391049f9c82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5a:76:38:d0:ab:c6:58:68:db:02:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f81bacd8-f7d9-47d7-aa24-5391049f9c82
        Validity
            Not Before: Sep 27 13:00:41 2024 GMT
            Not After : Dec 26 14:00:41 2024 GMT
        Subject: CN=c4961eee-a65b-46b4-b0e0-eb868b359aad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c4:e9:68:56:bf:28:2b:69:bc:07:0a:d9:41:
                    03:64:88:e3:28:68:c7:5e:21:f7:40:71:21:1b:2e:
                    22:ee:4e:d4:80:e5:85:74:76:3b:fd:83:bd:25:4b:
                    f8:9b:09:d8:18:cd:a6:7b:e4:dd:e2:77:de:e1:13:
                    04:d4:fd:72:e0:01:1a:c0:5c:84:62:93:48:af:81:
                    24:38:31:9d:c0:26:f0:a2:54:bf:70:cc:b8:4d:0d:
                    85:3d:24:c1:d4:d1:e4:d0:51:e3:46:b8:5b:01:c9:
                    78:db:09:3b:65:e1:9d:b2:cf:92:c3:e9:2c:2a:15:
                    8d:21:36:1a:3f:72:cd:a2:c7:48:97:85:7a:34:bf:
                    2a:43:ce:80:32:0b:c7:23:83:54:64:b2:a1:e2:fd:
                    a5:c0:57:50:83:89:62:41:53:c5:a7:8a:19:88:a4:
                    58:8d:2e:6e:a7:0a:c6:07:71:2d:c1:91:fc:ac:73:
                    5c:b4:fd:30:ac:60:f5:ee:33:38:75:d0:31:cd:0c:
                    da:58:e0:eb:43:c0:a1:2d:c1:79:39:74:d8:b2:75:
                    cd:b5:31:dc:44:d8:b0:1f:6b:6c:7c:35:99:f7:8b:
                    a0:7d:b8:94:2e:10:52:a8:a8:fd:5c:ee:86:57:70:
                    05:1e:e8:ea:dc:26:bf:e6:dd:4f:70:97:15:33:ec:
                    50:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:E7:46:68:AC:3E:67:C0:B0:B6:2E:58:AC:68:82:DB:B5:E5:35:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/27872a34-19cb-38ff-9f2b-60c884e32b1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/f81bacd8-f7d9-47d7-aa24-5391049f9c82.crl

            X509v3 Authority Key Identifier:
                keyid:EC:FD:C8:EB:B2:36:F3:BB:96:DA:C4:64:EB:92:D9:A9:A9:F7:13:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:76c0:5::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:a0:e4:59:57:dc:2b:b5:46:c1:ef:b2:fc:99:be:67:d8:9d:
         c6:68:cb:63:7d:83:5f:38:fc:9f:c6:40:a4:5a:68:5b:eb:07:
         fa:b5:46:04:53:c6:0b:58:6c:f4:99:4c:9c:a6:f1:09:64:ba:
         76:86:4b:70:fc:4e:a3:96:a4:3a:92:84:77:16:6f:72:3b:36:
         c1:22:a6:59:7e:5a:c6:fd:c9:7c:0b:3c:93:58:21:55:ff:4e:
         e7:42:0a:8f:22:40:ee:03:88:bc:2d:0d:51:db:90:b2:31:12:
         5e:95:26:6a:c8:6b:6c:6f:c4:db:ca:e0:4c:75:bb:4d:0a:38:
         4a:d9:f4:57:eb:ba:28:98:60:f8:8a:ec:09:6e:5f:48:1f:9f:
         99:49:a3:e0:ed:a5:4b:f1:68:bd:68:9c:0b:6d:b8:60:fc:a6:
         03:ca:d2:1c:6e:43:b6:bd:5b:45:33:07:33:fb:18:11:91:59:
         27:81:f5:6a:7e:5c:3b:f8:dd:e2:87:d5:70:9b:a3:4e:49:ad:
         7f:e0:29:54:ad:63:52:39:d6:57:e5:80:57:4c:4c:de:13:02:
         58:61:c9:05:6b:be:27:f4:a6:4f:db:74:c4:5c:7b:09:0f:28:
         d0:61:12:5e:a2:01:f5:00:46:dd:99:41:a8:71:76:25:b6:a3:
         e4:38:04:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:38:05 2024 by rpki-client on console-ams.rpki-client.org