Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/497813be-498e-4129-a627-225f97d0e2b5/a04a609d-a750-3962-9e10-281c8436cdda.roa
File:                     a04a609d-a750-3962-9e10-281c8436cdda.roa (raw, json)
Hash identifier:          FVE1B6johGpO2TH8bdQSAJqQ3HE1RMdgr0FkrlGuYgQ=
Subject key identifier:   C1:A0:A3:F9:0A:C6:0E:F5:3F:0F:48:1F:EC:10:5F:6D:0A:DA:46:83
Certificate issuer:       /CN=497813be-498e-4129-a627-225f97d0e2b5
Certificate serial:       010D0C9F43285847600B87A519687B9C16BC2448
Authority key identifier: B8:37:7B:4E:4F:03:FE:09:AC:C1:B9:40:8B:3F:9E:F0:4C:A2:FF:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/497813be-498e-4129-a627-225f97d0e2b5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/497813be-498e-4129-a627-225f97d0e2b5/a04a609d-a750-3962-9e10-281c8436cdda.roa
Signing time:             Sun 29 Sep 2024 13:00:41 +0000
ROA not before:           Sun 29 Sep 2024 13:00:41 +0000
ROA not after:            Sat 28 Dec 2024 14:00:41 +0000
asID:                     399606
IP address blocks:        2606:5e40::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/497813be-498e-4129-a627-225f97d0e2b5/497813be-498e-4129-a627-225f97d0e2b5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/497813be-498e-4129-a627-225f97d0e2b5/497813be-498e-4129-a627-225f97d0e2b5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/497813be-498e-4129-a627-225f97d0e2b5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:60:0b:87:a5:19:68:7b:9c:16:bc:24:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=497813be-498e-4129-a627-225f97d0e2b5
        Validity
            Not Before: Sep 29 13:00:41 2024 GMT
            Not After : Dec 28 14:00:41 2024 GMT
        Subject: CN=bcc71789-507c-4d5b-826a-dcdd192c67ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:a8:a4:2c:c7:6f:2c:b3:72:16:22:89:a2:77:
                    f2:27:b3:45:13:3d:b0:f3:24:c9:9d:59:f7:7e:ea:
                    76:b9:fc:70:4f:e0:67:3c:03:a0:d5:27:42:68:7d:
                    62:da:57:69:9e:45:d2:94:d3:ff:fa:8e:6f:b0:38:
                    f1:46:8a:ce:03:4e:f7:65:e7:08:42:0a:d4:9c:ce:
                    26:ea:df:76:fd:f6:1d:03:dc:8c:0f:53:3a:21:0e:
                    2a:64:5c:43:97:0c:2e:3e:ae:a4:99:04:7b:16:fc:
                    cd:11:85:d8:60:46:b2:06:b4:45:71:96:22:b7:1e:
                    7a:44:e9:8c:6a:52:2a:71:2f:fa:fc:df:ff:0e:45:
                    1f:57:55:01:78:02:63:dc:19:08:ae:c8:ca:31:b0:
                    29:1c:e1:69:45:ad:b9:06:11:5d:26:5d:7d:da:4e:
                    36:04:00:cb:d5:23:63:d4:25:ff:bd:27:02:74:22:
                    39:94:ec:c5:13:04:49:41:3f:e9:97:6e:aa:1c:a9:
                    9d:53:cc:9e:2e:97:e0:3a:7b:9f:53:58:97:51:7a:
                    7f:1b:da:78:62:9d:2b:49:52:f9:d5:af:7f:93:ee:
                    8b:5d:d6:b9:40:b8:28:8b:49:cf:c4:13:85:2d:10:
                    a1:c5:86:b9:b9:2c:c5:54:02:99:e1:24:dc:5a:ee:
                    3f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:A0:A3:F9:0A:C6:0E:F5:3F:0F:48:1F:EC:10:5F:6D:0A:DA:46:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/497813be-498e-4129-a627-225f97d0e2b5/a04a609d-a750-3962-9e10-281c8436cdda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/497813be-498e-4129-a627-225f97d0e2b5/497813be-498e-4129-a627-225f97d0e2b5.crl

            X509v3 Authority Key Identifier:
                keyid:B8:37:7B:4E:4F:03:FE:09:AC:C1:B9:40:8B:3F:9E:F0:4C:A2:FF:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/497813be-498e-4129-a627-225f97d0e2b5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:5e40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:6c:c3:cb:6f:54:92:ec:4a:9f:0d:19:93:9b:84:6f:56:f9:
         28:3a:9a:42:05:e2:0e:00:62:d5:97:b0:c4:9e:78:f8:b1:15:
         f7:49:28:ab:c9:ae:c1:8d:4a:57:06:21:a7:93:ea:44:88:14:
         80:14:e7:67:d4:72:7c:7d:33:42:ea:de:81:8f:4a:ff:c9:c0:
         aa:48:d4:16:77:52:a0:97:79:ff:04:af:15:54:34:d3:3c:17:
         50:c1:5d:61:51:8b:33:4c:82:1d:3e:93:4d:6c:9f:d2:0d:fd:
         cc:dc:07:17:3d:2a:08:9a:91:12:de:5a:9e:04:cb:62:3e:4a:
         5b:c0:71:1b:61:dd:0c:62:ce:c1:77:73:42:43:d1:dc:2f:34:
         0e:54:d3:82:89:b3:12:7d:4d:7d:96:cf:36:fd:3c:89:3e:5a:
         82:2c:7c:80:11:58:0b:94:99:58:e1:e3:02:38:5c:af:ed:aa:
         73:9e:dc:a5:be:da:59:02:89:8d:bf:36:bf:8d:40:6c:9d:a7:
         1e:d4:a3:d6:7b:08:e7:de:5f:e7:e8:da:0e:58:1b:b9:0f:19:
         e0:df:49:24:bb:cf:9e:12:f6:5b:92:a1:90:60:6f:48:cf:3e:
         cb:30:d7:9e:68:6b:ab:b6:f3:4e:fe:d2:5c:ea:6c:37:28:ec:
         29:5c:d9:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:38:50 2024 by rpki-client on console-ams.rpki-client.org