Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f/3d8645fc-35c8-35da-ac88-7a4e41c4bf61.roa
File:                     3d8645fc-35c8-35da-ac88-7a4e41c4bf61.roa (raw, json)
Hash identifier:          VW73APV6YyVptsSZKVhhnrAUXDkpC1vZlObIq5HS+Ww=
Subject key identifier:   08:CA:3B:62:02:E3:DD:71:FB:E5:1D:B8:52:B6:04:64:22:7F:45:E5
Certificate issuer:       /CN=1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f
Certificate serial:       010D0C9F432858472C65DAA521F3C94010592790
Authority key identifier: B7:57:F9:6B:5B:30:14:07:9A:7E:C9:8B:1D:DE:34:96:DD:EE:A8:50
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f/3d8645fc-35c8-35da-ac88-7a4e41c4bf61.roa
Signing time:             Wed 11 Sep 2024 01:00:31 +0000
ROA not before:           Wed 11 Sep 2024 01:00:31 +0000
ROA not after:            Tue 10 Dec 2024 02:00:31 +0000
asID:                     19518
IP address blocks:        2605:1500::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2c:65:da:a5:21:f3:c9:40:10:59:27:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f
        Validity
            Not Before: Sep 11 01:00:31 2024 GMT
            Not After : Dec 10 02:00:31 2024 GMT
        Subject: CN=4c4e3ed0-fcf8-4d22-9c25-793745f8999d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:75:40:a2:08:55:1e:d3:d9:5b:7e:89:e7:4f:
                    e2:fb:ad:36:ca:67:cd:b5:85:8c:a1:85:20:d5:77:
                    57:ad:e7:cb:1a:f5:cd:e6:b5:01:23:28:1d:64:ca:
                    ce:92:4f:1e:8a:73:42:1b:62:0f:55:63:fc:3b:81:
                    a8:12:e4:c1:9a:c9:13:5c:f5:47:e2:7d:9f:a1:90:
                    80:64:32:0f:f3:95:27:60:9f:c5:2b:d1:c0:1b:fe:
                    4d:ce:b3:14:d5:2c:39:3a:de:3f:a2:f8:da:b7:29:
                    74:14:e6:de:15:20:c0:9e:15:06:d6:8b:58:ff:e7:
                    eb:1d:ba:bf:f1:6b:c3:f6:0d:5e:39:85:b3:40:98:
                    af:e1:c9:20:42:83:5a:34:55:f6:79:f4:75:18:f3:
                    1b:13:a7:d6:ea:2f:31:ce:2d:00:e1:df:52:dc:bf:
                    7a:3b:ca:77:10:7a:ed:7c:fd:ea:57:56:31:d9:52:
                    23:d5:ec:e9:89:ec:e9:a0:1c:d4:57:5f:7c:10:05:
                    53:42:ba:a7:8a:09:f8:09:db:85:2a:e4:5d:fd:75:
                    1e:a3:9b:a3:66:5b:4f:6c:4b:6d:dc:12:a1:ef:c5:
                    ce:f9:ff:1e:6c:2a:89:11:ea:3f:52:f4:76:eb:cc:
                    87:93:0d:0b:1d:07:31:b6:ae:3b:d4:13:00:b9:1e:
                    66:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:CA:3B:62:02:E3:DD:71:FB:E5:1D:B8:52:B6:04:64:22:7F:45:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f/3d8645fc-35c8-35da-ac88-7a4e41c4bf61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f.crl

            X509v3 Authority Key Identifier:
                keyid:B7:57:F9:6B:5B:30:14:07:9A:7E:C9:8B:1D:DE:34:96:DD:EE:A8:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:1500::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:91:b6:76:f6:f3:27:f9:2f:81:93:50:07:26:80:fe:5e:58:
         05:c4:74:ac:02:54:66:d3:24:c1:16:72:b1:7f:e3:2c:0b:d5:
         05:ce:cb:89:5b:58:e9:fc:7d:29:d4:95:9b:02:40:5a:83:b2:
         e8:ab:71:e8:e9:01:ba:d9:86:86:e5:f6:8b:89:34:a4:2d:18:
         a4:be:d8:a9:1e:d4:1c:c4:a6:45:45:5b:1b:0a:23:38:be:46:
         05:de:0f:54:19:60:75:29:ed:c6:61:d2:c3:46:fe:6e:2f:2b:
         71:a1:e1:50:60:ac:43:8f:cc:33:fd:54:12:63:a9:4d:cf:cd:
         44:39:fe:e4:a9:86:fa:e1:5d:cd:66:d0:18:8e:02:d4:82:00:
         d5:5d:91:5e:1f:36:c6:44:1f:3a:00:40:df:91:2c:4c:13:28:
         94:71:fe:c2:c9:56:05:ee:c7:00:62:40:f7:69:20:84:f8:9e:
         46:3c:b0:cb:16:0d:48:a1:f1:f0:ee:43:9f:f8:5c:05:9d:49:
         cf:c4:d3:a4:b1:bb:ac:45:5a:1f:fe:97:eb:41:fa:2f:5f:e8:
         67:19:a1:8c:b7:73:c3:a7:e3:90:7b:2b:b5:c7:57:f4:70:40:
         77:7d:3e:9b:aa:4b:c8:6c:39:01:87:dc:9b:63:9c:a6:24:fc:
         a7:ab:27:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:28:58 2024 by rpki-client on console-fra.rpki-client.org