Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9fee4199-1b61-4b01-b005-17ea1cb9a644/90267bda-65bb-33b7-afdc-f6dd6b713bc5.roa
File:                     90267bda-65bb-33b7-afdc-f6dd6b713bc5.roa (raw, json)
Hash identifier:          aEsotYlOESoXS8c7F9H44OV28P7wq4ps2FY897XnxVs=
Subject key identifier:   E8:34:C8:F1:7B:16:1F:B9:62:DF:7B:2D:22:F2:29:A9:B4:5D:5B:11
Certificate issuer:       /CN=9fee4199-1b61-4b01-b005-17ea1cb9a644
Certificate serial:       010D0C9F43285847E62A2060200F8ECBB5B29B00
Authority key identifier: 13:79:23:FD:4F:74:3F:9C:89:E3:F1:DA:16:3C:EE:75:C4:BD:B6:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9fee4199-1b61-4b01-b005-17ea1cb9a644.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9fee4199-1b61-4b01-b005-17ea1cb9a644/90267bda-65bb-33b7-afdc-f6dd6b713bc5.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     14325
IP address blocks:        2607:d00::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9fee4199-1b61-4b01-b005-17ea1cb9a644/9fee4199-1b61-4b01-b005-17ea1cb9a644.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9fee4199-1b61-4b01-b005-17ea1cb9a644/9fee4199-1b61-4b01-b005-17ea1cb9a644.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9fee4199-1b61-4b01-b005-17ea1cb9a644.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:20:60:20:0f:8e:cb:b5:b2:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fee4199-1b61-4b01-b005-17ea1cb9a644
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=bc57c4e2-b196-4543-ada0-83ac496c8fa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1c:19:21:c7:ee:4f:a3:6d:3e:03:f7:3a:ae:
                    b9:76:b4:39:67:ad:11:1f:65:f8:22:c2:88:61:bc:
                    c5:2c:68:d4:91:ab:6c:18:38:d9:fe:f6:fc:9b:e0:
                    5f:1f:ad:7b:ad:2e:24:95:4d:c8:af:62:30:10:11:
                    ef:59:87:3d:87:4d:30:c0:5a:d4:8a:a9:44:ea:07:
                    bd:73:71:c2:8b:39:7d:aa:67:fd:5d:6e:0a:61:c6:
                    dc:a3:80:f0:89:fc:3c:9a:22:2c:fb:1b:bf:8a:b9:
                    6c:f5:97:24:e3:da:f6:ec:3b:c7:10:1c:d2:ff:90:
                    15:d4:85:95:32:ae:06:cf:28:d4:51:b7:d3:b4:01:
                    79:d5:96:a4:c0:cb:c0:94:07:89:b0:ea:62:9e:d0:
                    c6:47:d3:43:28:72:c5:b4:b9:8a:40:ea:8d:03:57:
                    ee:c9:5f:27:60:c7:1b:c3:3f:96:ad:8c:a4:84:bd:
                    f0:6f:a6:ac:72:97:89:9d:19:3f:c8:72:47:35:a8:
                    9d:02:75:c2:e2:69:8b:dc:7e:6e:6f:f9:00:b9:bf:
                    ce:24:50:ef:70:6b:7b:ae:49:87:01:8f:5c:f9:d5:
                    88:40:2c:60:7f:0e:31:cf:82:b0:ed:79:dd:bf:a7:
                    74:1f:27:e2:c5:81:62:2e:d8:1b:12:11:cc:3b:3d:
                    0c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:34:C8:F1:7B:16:1F:B9:62:DF:7B:2D:22:F2:29:A9:B4:5D:5B:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9fee4199-1b61-4b01-b005-17ea1cb9a644/90267bda-65bb-33b7-afdc-f6dd6b713bc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9fee4199-1b61-4b01-b005-17ea1cb9a644/9fee4199-1b61-4b01-b005-17ea1cb9a644.crl

            X509v3 Authority Key Identifier:
                keyid:13:79:23:FD:4F:74:3F:9C:89:E3:F1:DA:16:3C:EE:75:C4:BD:B6:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9fee4199-1b61-4b01-b005-17ea1cb9a644.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:d00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:89:29:f0:e6:e7:1f:13:14:23:b7:49:97:49:d6:2a:53:0b:
         fd:3b:e1:5b:e6:b5:33:f3:00:c2:15:ec:14:05:2d:18:6a:59:
         97:5b:98:3c:86:cd:34:3a:2c:af:af:52:66:eb:bd:97:25:cb:
         15:6e:10:3c:32:b1:2e:36:ac:f0:ab:a4:4f:f4:13:3e:c4:3d:
         f7:4e:d0:ab:57:a8:d9:4b:6b:7b:be:23:3d:9f:4f:3e:d7:78:
         78:41:3c:ba:5b:92:2a:84:19:64:5d:d4:87:d0:08:dc:6e:19:
         b1:5e:4b:ed:a0:86:fa:d8:1b:89:23:48:81:20:99:04:60:12:
         45:50:6d:55:ef:d1:68:15:c4:31:10:89:b1:c9:e2:61:dc:e5:
         36:56:ee:57:c3:95:a2:0c:b8:17:7d:05:32:d8:91:37:6d:d9:
         a2:a5:51:fd:c6:65:8b:07:80:24:63:44:e6:e6:e9:1b:38:92:
         9e:7e:78:e7:3c:8a:0c:b7:34:5c:e6:34:50:0a:e6:eb:a4:f8:
         1a:b9:bd:29:0f:c4:08:64:ff:b4:82:4c:94:c0:dc:96:f5:5f:
         5a:e4:27:f5:77:66:46:1c:d3:23:29:4e:1c:6c:e6:4e:8b:b7:
         8d:ff:1b:40:66:1f:2a:92:f2:75:ca:1e:d6:00:f5:8f:24:e0:
         97:a4:c5:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 20:22:51 2024 by rpki-client on console-ams.rpki-client.org