Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0cf53e58-6557-450f-832c-9baa5c99cca4/9e2cd53b-b97c-377a-b414-b8b607fc4fad.roa
File:                     9e2cd53b-b97c-377a-b414-b8b607fc4fad.roa (raw, json)
Hash identifier:          oYx1SDLl2r3wnnjCnEkJkRecc6f2myETTgK8u0LCWZM=
Subject key identifier:   C1:06:B6:74:6F:2F:DD:89:1B:9D:62:21:BD:81:3C:2D:CD:26:27:2C
Certificate issuer:       /CN=0cf53e58-6557-450f-832c-9baa5c99cca4
Certificate serial:       010D0C9F43285847537B6BB0A68FBC01F8592300
Authority key identifier: 9D:12:7B:B3:E3:C3:F4:64:BC:E1:32:60:ED:35:87:5D:E7:FA:47:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0cf53e58-6557-450f-832c-9baa5c99cca4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0cf53e58-6557-450f-832c-9baa5c99cca4/9e2cd53b-b97c-377a-b414-b8b607fc4fad.roa
Signing time:             Wed 25 Sep 2024 01:00:31 +0000
ROA not before:           Wed 25 Sep 2024 01:00:31 +0000
ROA not after:            Tue 24 Dec 2024 02:00:31 +0000
asID:                     14618
IP address blocks:        2607:f250:e000::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0cf53e58-6557-450f-832c-9baa5c99cca4/0cf53e58-6557-450f-832c-9baa5c99cca4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0cf53e58-6557-450f-832c-9baa5c99cca4/0cf53e58-6557-450f-832c-9baa5c99cca4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0cf53e58-6557-450f-832c-9baa5c99cca4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:53:7b:6b:b0:a6:8f:bc:01:f8:59:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cf53e58-6557-450f-832c-9baa5c99cca4
        Validity
            Not Before: Sep 25 01:00:31 2024 GMT
            Not After : Dec 24 02:00:31 2024 GMT
        Subject: CN=c4d58fc6-1424-4bf3-a4cc-46ce28e62078
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:7e:f2:4b:3c:dc:09:fc:1a:d8:9c:5d:08:fa:
                    d2:2f:8a:c7:a2:eb:db:34:07:9b:f2:ab:72:1c:4c:
                    02:df:c2:f1:0c:31:38:3d:3e:aa:4a:a8:6b:17:48:
                    36:39:9f:6a:79:3c:8f:cd:d2:ed:70:34:56:8d:d2:
                    27:92:cc:ba:d3:60:b3:5c:c1:bc:20:ac:47:4d:26:
                    61:ba:3a:94:02:17:08:38:a9:ea:97:44:51:9c:6d:
                    43:c9:0a:fb:3e:ba:d7:e2:1c:86:cb:7d:07:18:b1:
                    ed:51:f5:35:a5:05:9c:90:98:51:38:a7:62:21:bd:
                    32:f5:61:81:18:e7:25:09:40:ea:a4:5d:01:01:a7:
                    e8:3a:8f:9e:89:f4:fc:37:80:a9:a7:ac:59:61:e2:
                    ee:0e:c3:60:13:03:7e:a9:dc:b9:a8:db:68:b7:a7:
                    e1:9b:75:b0:63:41:f5:75:26:b5:0e:c7:da:54:3e:
                    28:05:38:55:49:54:ac:3d:49:3a:87:30:09:6d:9a:
                    55:76:f1:34:65:34:76:78:aa:36:ad:49:2b:79:43:
                    58:19:d6:e9:7a:e5:24:e8:b8:44:99:87:b4:e1:89:
                    ee:ac:5e:06:17:d4:b9:f8:6e:8c:a8:88:6c:ac:25:
                    96:bc:ae:bc:ad:ba:cf:95:44:5f:ee:c0:2c:5e:7a:
                    33:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:06:B6:74:6F:2F:DD:89:1B:9D:62:21:BD:81:3C:2D:CD:26:27:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0cf53e58-6557-450f-832c-9baa5c99cca4/9e2cd53b-b97c-377a-b414-b8b607fc4fad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0cf53e58-6557-450f-832c-9baa5c99cca4/0cf53e58-6557-450f-832c-9baa5c99cca4.crl

            X509v3 Authority Key Identifier:
                keyid:9D:12:7B:B3:E3:C3:F4:64:BC:E1:32:60:ED:35:87:5D:E7:FA:47:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0cf53e58-6557-450f-832c-9baa5c99cca4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f250:e000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:0a:6e:4d:eb:0d:62:bc:5b:aa:0d:22:73:57:ad:a3:6a:bf:
         a0:71:8d:03:70:15:42:1a:0b:6f:8a:01:68:9a:5c:89:1c:a8:
         05:08:bd:e8:20:91:ba:58:1a:e8:ed:32:32:3c:5a:89:dc:b7:
         78:23:d4:98:66:27:99:59:2b:c2:c8:50:8c:f2:f1:47:8f:be:
         7b:33:be:6e:d9:65:d1:86:0e:3e:63:ca:8c:66:aa:5d:3b:cc:
         5e:cd:93:91:05:fb:23:f4:ca:9e:1c:dc:cc:db:22:04:ad:0e:
         a3:12:4e:ed:3b:bb:29:66:0e:2e:df:10:ac:38:8f:3e:64:fd:
         36:6d:d2:05:ce:f9:ff:10:46:29:d1:cb:60:4d:d4:3b:3d:44:
         fa:9c:ad:78:a1:58:bd:55:c4:cf:77:7e:cc:90:8e:04:4f:2d:
         30:1a:6f:25:3b:3e:96:ba:de:b2:32:e7:e9:db:28:db:17:a2:
         20:cd:43:a7:80:ad:d9:4b:ed:d4:4f:58:a5:ba:f9:9f:f9:f6:
         2c:98:b1:4e:3e:ee:ac:61:60:bc:bc:39:91:c5:cc:44:c8:cf:
         79:58:df:f1:ae:97:65:05:c7:b4:10:2f:73:f1:5b:ed:13:93:
         2a:14:41:a4:a5:a8:9d:9a:3b:f3:5e:10:84:93:56:8a:c2:8e:
         e3:43:60:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----