Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/e50f05de-bce4-36e8-a1e9-1fab8ed0662f.roa
File:                     e50f05de-bce4-36e8-a1e9-1fab8ed0662f.roa (raw, json)
Hash identifier:          0F9+aVr1CCVWkOBEdB/K89mp0sVGRuZ+X3g0tdTPt+g=
Subject key identifier:   A3:3F:30:2A:F4:9E:0C:5D:B4:E2:D2:BF:E3:46:A4:51:AD:FC:EE:2A
Certificate issuer:       /CN=e601b694-6242-4b1c-a841-d0a7214cd9c7
Certificate serial:       010D0C9F432858471FD5DBCBD735111F754F4400
Authority key identifier: 96:7A:A6:3B:2E:D3:AA:65:44:0B:7E:8B:F5:4B:BA:F1:ED:95:50:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/e50f05de-bce4-36e8-a1e9-1fab8ed0662f.roa
Signing time:             Fri 06 Sep 2024 13:00:41 +0000
ROA not before:           Fri 06 Sep 2024 13:00:41 +0000
ROA not after:            Thu 05 Dec 2024 14:00:41 +0000
asID:                     8070
IP address blocks:        2607:f368:a004::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/e601b694-6242-4b1c-a841-d0a7214cd9c7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/e601b694-6242-4b1c-a841-d0a7214cd9c7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1f:d5:db:cb:d7:35:11:1f:75:4f:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e601b694-6242-4b1c-a841-d0a7214cd9c7
        Validity
            Not Before: Sep  6 13:00:41 2024 GMT
            Not After : Dec  5 14:00:41 2024 GMT
        Subject: CN=0d65d571-04f0-45a6-b433-daad6494928b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:6b:01:c0:56:1a:30:2b:61:4d:e1:70:d8:6d:
                    91:8a:8b:e0:ed:04:7a:15:bd:32:af:8e:cb:58:a0:
                    3a:17:c3:d9:23:97:25:33:bb:07:ee:0d:cd:57:74:
                    60:ed:1d:00:fc:d1:29:d1:bc:eb:15:35:aa:9c:e2:
                    55:0f:fd:f3:40:bb:5a:99:bc:f9:a1:72:0d:7c:d4:
                    47:5f:9e:f4:df:6e:9c:41:20:31:75:85:c6:cd:c1:
                    08:7c:ab:3a:cc:66:19:65:d9:56:15:0c:7d:9f:ae:
                    c4:e0:30:03:21:0b:a5:c0:4d:84:7f:46:a3:58:2c:
                    d4:1a:bd:c9:0b:8d:30:81:00:2c:6e:f2:ff:95:92:
                    93:b4:26:f7:20:ef:89:da:f8:c2:77:bf:c8:f8:55:
                    00:e5:23:a1:2d:6c:21:9e:d0:80:94:e6:7d:d5:8e:
                    e2:ae:d7:70:42:d1:ae:0d:d2:ae:6a:08:17:35:c9:
                    c2:f1:d3:8f:16:f6:3a:e2:c9:9d:32:4c:85:6d:5a:
                    6d:b1:f2:51:ba:76:fd:d4:7d:60:58:21:e1:c8:0b:
                    d8:2e:ef:75:ae:ed:b9:4e:00:45:48:04:6d:98:fb:
                    f4:57:86:56:90:0f:e8:27:c7:43:73:e4:ea:cd:9d:
                    e3:1a:c5:10:fb:4a:dc:51:41:d0:6f:75:75:7e:64:
                    1b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:3F:30:2A:F4:9E:0C:5D:B4:E2:D2:BF:E3:46:A4:51:AD:FC:EE:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/e50f05de-bce4-36e8-a1e9-1fab8ed0662f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/e601b694-6242-4b1c-a841-d0a7214cd9c7.crl

            X509v3 Authority Key Identifier:
                keyid:96:7A:A6:3B:2E:D3:AA:65:44:0B:7E:8B:F5:4B:BA:F1:ED:95:50:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f368:a004::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:6f:75:68:df:a1:df:50:17:46:a2:a2:94:a4:9e:23:f2:5c:
         04:d8:53:bd:5e:61:10:03:34:5c:fe:de:e9:de:72:67:c0:dd:
         b7:0e:4e:69:20:90:0b:c4:14:91:de:09:da:9f:0d:83:e3:ad:
         b7:6e:e3:c7:e8:2a:73:56:95:f0:c9:38:75:80:ac:c3:2b:b9:
         fb:0a:1d:08:83:62:9a:31:fe:62:a4:cb:ec:22:cc:7e:78:9b:
         8c:7b:81:3e:98:ce:fe:ba:96:b7:20:e0:84:4f:33:2f:ae:9d:
         70:ac:26:b1:d2:6e:50:59:41:24:9f:a2:6e:7d:6f:68:5c:cf:
         fa:94:f1:2f:97:e5:70:b7:6b:35:b5:10:51:7c:91:3b:47:9c:
         03:73:d1:51:60:90:3b:cc:ac:47:d0:fe:91:1b:b7:d8:6d:3f:
         f2:96:47:fb:ae:6b:1f:09:d2:23:20:70:cd:6e:b3:bb:48:e4:
         e6:e8:5d:56:82:80:78:76:bb:d6:e8:09:cc:ce:ae:51:c9:21:
         29:03:53:a5:fd:9c:b6:b1:c9:6d:9e:a7:d9:88:c7:8f:f1:1b:
         f1:6e:44:db:8c:d9:b5:fb:b0:85:56:aa:4c:17:24:54:4a:eb:
         28:90:f9:7c:7c:27:29:c7:ed:76:93:5a:bf:17:5f:99:03:35:
         c9:32:2b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 07:02:24 2024 by rpki-client on console-fra.rpki-client.org