Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d050b4de-f4c8-4ee7-907a-4df39253e1ae/f3c81f4a-d997-391e-bd4f-3480c77100bc.roa
File:                     f3c81f4a-d997-391e-bd4f-3480c77100bc.roa (raw, json)
Hash identifier:          ICbvOW8U+Y0gYAIItd8FSb9cACC8RPTxwSXKfWeGgMg=
Subject key identifier:   B4:C5:86:E0:25:D2:44:FE:CD:5E:85:B3:38:6A:A7:25:7C:D4:7D:90
Certificate issuer:       /CN=d050b4de-f4c8-4ee7-907a-4df39253e1ae
Certificate serial:       010D0C9F432858475EA631CC3BB0729A4AC25500
Authority key identifier: 5B:81:B6:A9:BC:F1:89:7D:05:CD:44:0D:F3:EA:0E:EF:1D:4D:78:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d050b4de-f4c8-4ee7-907a-4df39253e1ae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d050b4de-f4c8-4ee7-907a-4df39253e1ae/f3c81f4a-d997-391e-bd4f-3480c77100bc.roa
Signing time:             Sun 29 Sep 2024 01:00:32 +0000
ROA not before:           Sun 29 Sep 2024 01:00:32 +0000
ROA not after:            Sat 28 Dec 2024 02:00:32 +0000
asID:                     400725
IP address blocks:        2606:dbc0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d050b4de-f4c8-4ee7-907a-4df39253e1ae/d050b4de-f4c8-4ee7-907a-4df39253e1ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d050b4de-f4c8-4ee7-907a-4df39253e1ae/d050b4de-f4c8-4ee7-907a-4df39253e1ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d050b4de-f4c8-4ee7-907a-4df39253e1ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5e:a6:31:cc:3b:b0:72:9a:4a:c2:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d050b4de-f4c8-4ee7-907a-4df39253e1ae
        Validity
            Not Before: Sep 29 01:00:32 2024 GMT
            Not After : Dec 28 02:00:32 2024 GMT
        Subject: CN=5726db29-b351-452c-b336-877f9005911d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d7:f0:11:9d:17:ee:87:0d:ef:d9:3c:4e:73:
                    71:2d:de:75:51:0d:01:07:ad:4c:09:4d:41:1a:5e:
                    b2:ac:cb:e7:da:9c:4e:10:54:ae:70:7b:49:41:00:
                    a0:71:5b:bd:76:28:93:75:bb:ee:14:b1:91:e9:1c:
                    82:03:45:26:62:1b:17:8a:bf:02:8f:02:45:ca:90:
                    a9:6f:9e:61:7e:d0:b7:63:2f:54:7f:19:59:26:f5:
                    1a:18:50:1f:a4:53:97:19:4b:83:d9:7d:dc:74:3c:
                    d4:23:38:a8:21:a7:d0:0e:83:ac:8d:a7:0a:9f:c8:
                    95:1f:c3:9b:98:2f:65:8a:99:e9:f7:62:28:6e:3f:
                    a7:20:35:6d:8e:9e:36:6d:4e:84:80:23:61:cb:e0:
                    b9:77:e4:c0:b5:99:ab:a9:56:74:ac:ab:57:30:a1:
                    ab:bd:ae:4d:6d:30:48:c5:55:28:a4:a7:de:11:2b:
                    23:f1:54:5f:09:dc:52:32:90:3e:11:e7:ef:3f:9e:
                    8e:7a:cf:6a:30:86:3c:35:a1:ce:84:fb:cd:65:fb:
                    c6:a3:f4:2f:9a:18:8b:09:4e:02:dc:86:db:5d:33:
                    c5:2a:46:d6:ae:4d:e3:10:b6:00:ca:03:62:b2:dc:
                    20:12:d3:2e:0b:92:b7:24:81:6b:94:97:49:4d:73:
                    16:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:C5:86:E0:25:D2:44:FE:CD:5E:85:B3:38:6A:A7:25:7C:D4:7D:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d050b4de-f4c8-4ee7-907a-4df39253e1ae/f3c81f4a-d997-391e-bd4f-3480c77100bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d050b4de-f4c8-4ee7-907a-4df39253e1ae/d050b4de-f4c8-4ee7-907a-4df39253e1ae.crl

            X509v3 Authority Key Identifier:
                keyid:5B:81:B6:A9:BC:F1:89:7D:05:CD:44:0D:F3:EA:0E:EF:1D:4D:78:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d050b4de-f4c8-4ee7-907a-4df39253e1ae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:dbc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:03:f3:95:d8:98:30:7e:35:3a:ee:e1:2c:ac:16:04:24:da:
         4a:79:01:9b:45:33:aa:91:e8:f8:64:83:ae:43:2a:a6:3a:41:
         18:3f:fd:62:72:69:e0:15:c3:75:00:ef:d2:40:94:11:00:76:
         20:2d:12:bd:bd:d5:56:c2:07:f0:c3:65:6e:1c:65:cc:da:4a:
         15:5a:a5:bb:8d:e7:f9:68:25:26:85:de:0c:05:64:87:ac:df:
         b7:cd:ba:1b:b6:8f:ca:78:7f:25:ad:c3:0c:67:bb:f3:4d:18:
         cc:91:08:ad:8f:a5:95:28:e5:16:22:75:a1:43:47:1b:a2:84:
         89:75:e9:dd:61:3c:d5:f1:b9:4f:79:cf:cd:82:8b:54:ad:9a:
         e9:83:a5:54:b1:cd:21:8c:e4:f1:49:69:79:3a:2b:28:08:6c:
         82:d3:65:23:e6:8b:92:68:ef:6c:9e:33:b6:f0:48:78:f3:bb:
         6e:92:7b:67:f5:c5:c3:a5:73:aa:bb:b7:99:ba:5b:e5:8d:8a:
         44:1a:69:15:92:39:37:51:6c:0c:af:9e:75:15:bc:3a:75:9b:
         ef:d9:1f:1d:fb:a1:88:66:5c:78:f9:e5:31:3a:0a:09:56:da:
         50:45:3b:e0:ab:7a:7b:35:27:e3:15:39:0e:ac:5e:e3:1e:60:
         26:00:b7:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 07:08:12 2024 by rpki-client on console-ams.rpki-client.org