Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6088917c-c2eb-4059-97d2-b06df418ce7e/7f8d135c-0a0a-351d-8578-25795052890a.roa
File:                     7f8d135c-0a0a-351d-8578-25795052890a.roa (raw, json)
Hash identifier:          dIZsaCZfCLj+168+35jyrH34keKbkpJKM+rCwDxTJmo=
Subject key identifier:   C8:59:04:C0:8C:6C:0C:A9:B3:E1:40:17:2C:45:17:22:BF:7B:01:D6
Certificate issuer:       /CN=6088917c-c2eb-4059-97d2-b06df418ce7e
Certificate serial:       010D0C9F43285847BEF6D19DC78FB408ED546D80
Authority key identifier: 23:2F:40:83:AE:0B:41:FF:D7:97:44:3F:36:86:26:13:3F:F5:A8:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6088917c-c2eb-4059-97d2-b06df418ce7e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6088917c-c2eb-4059-97d2-b06df418ce7e/7f8d135c-0a0a-351d-8578-25795052890a.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     53358
IP address blocks:        2607:cc0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6088917c-c2eb-4059-97d2-b06df418ce7e/6088917c-c2eb-4059-97d2-b06df418ce7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6088917c-c2eb-4059-97d2-b06df418ce7e/6088917c-c2eb-4059-97d2-b06df418ce7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6088917c-c2eb-4059-97d2-b06df418ce7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f6:d1:9d:c7:8f:b4:08:ed:54:6d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6088917c-c2eb-4059-97d2-b06df418ce7e
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=2a277144-bc56-4f3a-8727-2aa1f659c7d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:b7:c5:b7:03:b2:8b:34:5d:8f:3c:93:eb:87:
                    37:fb:99:0c:6b:5b:96:64:9e:cf:9b:e9:2a:78:ca:
                    f9:61:72:7a:75:65:de:3a:6b:07:55:22:4b:4f:d8:
                    e8:9d:bb:27:c6:fb:c9:37:30:52:4e:9a:0b:78:20:
                    32:bd:8d:ca:ec:7f:ab:19:f4:16:a4:e5:45:b1:13:
                    f2:43:fe:e8:b3:44:27:e0:4c:98:6e:46:cd:58:1c:
                    f7:36:79:65:ed:38:d0:78:89:07:b3:2f:10:a7:2e:
                    cc:92:14:f9:b7:e5:48:94:65:df:1d:a6:ef:6e:91:
                    bc:a4:6e:ef:12:34:74:51:2e:cb:e7:f0:38:72:ae:
                    2d:b7:04:1c:6c:c2:7e:6d:f2:d0:f1:9a:b8:8c:66:
                    2a:7f:3d:19:28:e6:9c:c3:9f:9e:6f:90:fa:14:26:
                    9e:3a:6e:65:7d:4f:f1:45:24:86:91:43:d3:15:dd:
                    3a:4d:0d:6d:31:b5:20:c7:39:4e:9d:34:49:18:55:
                    89:2a:dd:67:a6:c9:0a:df:d1:68:dc:fc:73:ea:21:
                    d3:c3:c5:df:b9:4f:e2:d6:fa:18:65:d9:cb:2f:21:
                    8a:c7:48:48:2d:8c:0d:49:99:3b:a5:ab:a6:13:23:
                    94:ee:6c:1f:b4:d0:a1:60:1f:0f:81:96:1e:31:65:
                    61:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:59:04:C0:8C:6C:0C:A9:B3:E1:40:17:2C:45:17:22:BF:7B:01:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6088917c-c2eb-4059-97d2-b06df418ce7e/7f8d135c-0a0a-351d-8578-25795052890a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6088917c-c2eb-4059-97d2-b06df418ce7e/6088917c-c2eb-4059-97d2-b06df418ce7e.crl

            X509v3 Authority Key Identifier:
                keyid:23:2F:40:83:AE:0B:41:FF:D7:97:44:3F:36:86:26:13:3F:F5:A8:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6088917c-c2eb-4059-97d2-b06df418ce7e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:cc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:42:88:cb:00:97:50:91:9d:cf:1a:db:a5:e4:ee:de:41:0d:
         89:41:0c:e3:c6:a3:cc:59:1d:6d:e3:2d:fd:03:dd:8c:25:8f:
         50:8c:9b:c4:7c:3a:4d:fc:d9:08:fd:53:5f:06:a3:89:02:1d:
         db:36:b2:3c:3e:df:b2:82:8e:fb:3c:5f:ae:36:21:6c:1e:6c:
         dd:9f:fc:74:af:b6:b2:54:27:72:e6:fa:2b:4a:19:37:d4:dc:
         a1:5e:0b:f3:8a:d0:7c:3d:6c:42:d3:24:a8:f0:d9:95:cc:f6:
         54:88:ee:71:e2:57:ca:23:34:62:ac:e6:3d:07:a0:27:89:0d:
         86:41:b5:fe:96:a4:f1:3a:2a:62:f2:c7:a5:5c:d3:a5:84:a6:
         e2:d3:8d:5d:7e:f1:4f:98:05:1a:ed:cf:64:01:a8:f8:78:e5:
         4f:cd:c7:71:98:39:b9:6a:35:1a:03:67:bf:08:fe:7c:a8:04:
         f0:9f:5f:8e:4f:2c:b7:35:8f:bb:b4:79:29:e1:51:1e:30:5d:
         c7:b2:db:49:4a:71:5a:0a:ef:e1:5b:89:6b:0b:0f:61:c7:54:
         fb:c3:94:41:8b:de:29:a8:37:8b:61:45:17:09:a8:39:e4:c1:
         09:12:64:ef:17:b5:8c:ce:dd:96:60:5e:41:a9:fa:67:5d:e7:
         57:b8:4c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:06:25 2024 by rpki-client on console-ams.rpki-client.org