Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/64cf176b-c737-492c-95a5-54695fc5bc2d/c657d9ae-6d6b-3cf4-b1d3-7d13c4771f7d.roa
File:                     c657d9ae-6d6b-3cf4-b1d3-7d13c4771f7d.roa (raw, json)
Hash identifier:          Lr5lMLQF+sFLRxklRAbeYEk3Q6hhDTLn6hDhnjRgEv8=
Subject key identifier:   58:9D:AD:DC:65:57:09:E3:AF:81:17:B8:8F:52:FB:50:21:62:B0:44
Certificate issuer:       /CN=64cf176b-c737-492c-95a5-54695fc5bc2d
Certificate serial:       010D0C9F432858476C9DC02146D50E7AE1143E80
Authority key identifier: 33:62:F0:BF:7D:FD:C9:04:AD:3A:12:76:E3:B0:8B:4B:15:79:4C:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/64cf176b-c737-492c-95a5-54695fc5bc2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/64cf176b-c737-492c-95a5-54695fc5bc2d/c657d9ae-6d6b-3cf4-b1d3-7d13c4771f7d.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     32181
IP address blocks:        2604:2700::/32 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/64cf176b-c737-492c-95a5-54695fc5bc2d/64cf176b-c737-492c-95a5-54695fc5bc2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/64cf176b-c737-492c-95a5-54695fc5bc2d/64cf176b-c737-492c-95a5-54695fc5bc2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/64cf176b-c737-492c-95a5-54695fc5bc2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9d:c0:21:46:d5:0e:7a:e1:14:3e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64cf176b-c737-492c-95a5-54695fc5bc2d
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=30a174e6-cda7-4fe1-ae30-82e73fa34a64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:0f:7c:12:15:4e:b1:23:88:ab:dc:73:0d:c7:
                    af:ba:ca:d2:3a:11:40:d8:21:1a:0a:14:bd:84:e8:
                    3a:8e:8a:4f:77:74:2f:e6:d8:69:61:5c:96:fd:75:
                    a3:3b:67:9a:6a:8b:77:5a:5c:c2:97:5c:bd:a3:e1:
                    e7:2f:e1:79:b9:e1:f4:47:8f:4b:38:9a:8e:f5:91:
                    33:1f:a0:09:15:36:a5:34:e5:c4:76:3c:0a:30:7d:
                    2f:79:5c:61:c7:49:5f:f9:95:3b:2c:ca:72:a4:f4:
                    5f:dc:9c:ba:e4:0f:76:96:65:a3:38:d6:f6:2e:d8:
                    75:2f:8b:9e:c1:b0:20:04:ac:d6:0e:a8:36:4b:a7:
                    54:4d:1a:ff:3c:f2:b2:a5:19:ef:00:65:f0:d3:81:
                    a2:ff:e8:78:6c:c5:b2:90:04:79:22:cd:dc:97:e6:
                    8c:0a:61:c7:a6:62:e5:48:6e:f8:8e:ca:22:ea:15:
                    55:59:ac:9e:94:ce:f2:8f:63:78:25:f4:ed:96:97:
                    b1:5a:a2:bf:cd:34:a6:2f:7b:6d:4e:a1:d6:cd:be:
                    e6:01:2a:93:d8:66:c7:7b:1f:bd:d9:93:f4:59:a7:
                    b4:53:a9:6c:4e:2f:fc:4a:c5:9f:cf:24:8b:b0:64:
                    b3:73:9e:7d:3c:32:25:b3:ae:60:89:e1:70:95:28:
                    6d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:9D:AD:DC:65:57:09:E3:AF:81:17:B8:8F:52:FB:50:21:62:B0:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/64cf176b-c737-492c-95a5-54695fc5bc2d/c657d9ae-6d6b-3cf4-b1d3-7d13c4771f7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/64cf176b-c737-492c-95a5-54695fc5bc2d/64cf176b-c737-492c-95a5-54695fc5bc2d.crl

            X509v3 Authority Key Identifier:
                keyid:33:62:F0:BF:7D:FD:C9:04:AD:3A:12:76:E3:B0:8B:4B:15:79:4C:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/64cf176b-c737-492c-95a5-54695fc5bc2d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2700::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:25:dc:de:64:ee:98:8f:c9:d2:64:6f:e8:25:b7:bb:c7:f2:
         84:d1:95:b3:d0:e3:d7:f1:24:f7:0c:fa:5e:aa:db:b1:53:76:
         09:4c:6e:ed:aa:0a:a2:1f:9e:30:43:d2:e5:68:91:22:01:d2:
         43:72:30:00:0c:5b:7d:a6:d4:e7:a1:1f:0a:ba:d3:18:ab:c4:
         b2:ff:68:1f:40:de:44:f3:74:10:1b:5c:e7:6b:1c:b4:f0:17:
         c0:d4:95:cf:fc:04:e6:eb:14:e8:9d:e9:0c:44:e1:a4:42:77:
         a2:99:b9:55:3c:62:7e:b3:e2:63:dd:7b:7c:88:ec:ad:6b:89:
         05:97:88:24:1c:40:fa:a2:41:89:e2:cc:08:7f:f2:9c:dd:65:
         4d:cd:21:75:b6:86:f4:49:07:19:3a:ee:61:83:ae:b8:a6:48:
         f1:b6:10:1f:8a:d1:01:fc:ac:a8:14:89:4c:e9:94:37:3c:40:
         72:58:67:ad:fe:cc:62:d3:69:fe:0c:bb:5a:23:a3:32:e0:d2:
         1b:c4:e1:d2:83:cb:6b:4a:0d:dc:05:44:54:c6:c5:7b:a6:74:
         f7:75:0a:26:be:1b:51:a7:72:65:28:e0:e3:01:bb:69:68:75:
         16:b4:90:fa:e7:6d:3b:6c:c3:a5:d7:64:5c:1a:8f:ca:60:2b:
         17:c9:3f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:24:38 2024 by rpki-client on console-fra.rpki-client.org