Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4e5cccc9-30d7-416f-83cb-af13d1079fb3/c941777b-4f01-3cf0-b2b2-6392b9825a72.roa
File:                     c941777b-4f01-3cf0-b2b2-6392b9825a72.roa (raw, json)
Hash identifier:          SlDqu7veEPR6RjGiB98iUAGOcRfsmI8lwr8OWach4Ds=
Subject key identifier:   DD:0A:74:78:D8:AF:7C:B1:50:26:29:8D:F0:5F:93:F2:6D:05:E4:E1
Certificate issuer:       /CN=4e5cccc9-30d7-416f-83cb-af13d1079fb3
Certificate serial:       010D0C9F43285847C34490B0C55C10B850550480
Authority key identifier: A7:7D:99:20:83:4D:A0:3A:06:B7:F7:9A:D6:D7:9C:D5:69:9E:E0:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4e5cccc9-30d7-416f-83cb-af13d1079fb3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4e5cccc9-30d7-416f-83cb-af13d1079fb3/c941777b-4f01-3cf0-b2b2-6392b9825a72.roa
Signing time:             Mon 04 Nov 2024 02:00:36 +0000
ROA not before:           Mon 04 Nov 2024 02:00:36 +0000
ROA not after:            Sun 02 Feb 2025 02:00:36 +0000
asID:                     397735
IP address blocks:        2606:3740::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4e5cccc9-30d7-416f-83cb-af13d1079fb3/4e5cccc9-30d7-416f-83cb-af13d1079fb3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4e5cccc9-30d7-416f-83cb-af13d1079fb3/4e5cccc9-30d7-416f-83cb-af13d1079fb3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4e5cccc9-30d7-416f-83cb-af13d1079fb3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c3:44:90:b0:c5:5c:10:b8:50:55:04:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e5cccc9-30d7-416f-83cb-af13d1079fb3
        Validity
            Not Before: Nov  4 02:00:36 2024 GMT
            Not After : Feb  2 02:00:36 2025 GMT
        Subject: CN=b8707327-c19f-4705-bcd1-33f4dbc42354
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:83:13:1f:d7:ee:39:92:68:51:34:bb:67:11:
                    e4:14:bc:9c:67:f2:bc:3a:8f:c0:98:c6:7e:43:a5:
                    72:24:77:f1:b9:44:82:53:50:ae:50:ce:77:84:c0:
                    c6:03:37:ae:0b:f8:93:54:00:8e:bd:00:12:a9:29:
                    90:9b:8a:2f:f0:31:ca:3a:80:6b:e9:09:84:e3:4c:
                    4b:1f:a2:0c:b6:00:97:08:16:0f:11:f6:6b:f5:2f:
                    b1:38:0e:9d:76:38:e6:2d:d6:1f:10:72:ed:39:ef:
                    c3:20:cc:ae:fe:4a:11:e8:e5:94:8f:cc:68:b8:a6:
                    b2:44:1a:fe:c7:97:c3:c1:f5:75:fc:ea:4f:50:f3:
                    0a:67:6d:5d:98:4a:c8:b2:03:91:29:9d:56:62:e7:
                    d6:3b:92:17:16:16:88:68:76:5b:5e:0d:5c:d7:08:
                    10:8d:83:67:2e:80:63:04:e7:66:f6:72:6d:c7:d7:
                    e3:c7:83:cf:54:26:cc:8e:72:89:73:8c:d6:c2:d5:
                    32:62:98:9d:6f:31:1c:76:3d:e9:ee:04:50:45:7a:
                    47:7f:01:4d:3c:b1:85:a9:1b:32:ef:4f:b5:70:2f:
                    5a:3c:ad:dc:f6:6a:ce:d8:04:b4:c3:5b:6d:7c:c2:
                    98:58:7f:f8:19:b5:d6:66:e6:d9:1e:74:8e:bb:a7:
                    3a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:0A:74:78:D8:AF:7C:B1:50:26:29:8D:F0:5F:93:F2:6D:05:E4:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4e5cccc9-30d7-416f-83cb-af13d1079fb3/c941777b-4f01-3cf0-b2b2-6392b9825a72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4e5cccc9-30d7-416f-83cb-af13d1079fb3/4e5cccc9-30d7-416f-83cb-af13d1079fb3.crl

            X509v3 Authority Key Identifier:
                keyid:A7:7D:99:20:83:4D:A0:3A:06:B7:F7:9A:D6:D7:9C:D5:69:9E:E0:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4e5cccc9-30d7-416f-83cb-af13d1079fb3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3740::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:ba:f1:0a:ce:ca:ca:f8:9a:d7:85:6c:71:c8:60:3c:d6:81:
         14:c2:75:36:a3:19:e0:93:ad:a2:ef:06:3d:a5:56:73:fb:c1:
         8f:eb:55:ac:de:8d:0b:58:54:c1:d8:fc:cf:88:ee:08:6f:1c:
         ff:59:65:c9:68:d0:0d:83:43:11:5f:81:11:b3:33:9c:e1:e2:
         46:17:4e:f8:43:ad:bd:62:5f:7d:d1:43:47:4b:d1:81:ed:ef:
         49:7a:15:f7:d8:20:e2:d4:33:5d:07:b4:83:11:fa:10:18:45:
         40:ca:c2:a6:96:ea:f8:26:dc:9a:ee:89:7c:0e:c2:f6:30:ff:
         2f:d1:41:3c:d0:7f:05:f9:91:b6:7f:db:fa:98:00:fe:93:0d:
         6c:4c:5f:f6:7d:7a:cc:64:8d:8c:e3:6d:fc:27:96:69:fa:08:
         d7:eb:9f:32:c8:98:bf:45:7d:9f:22:60:9c:d6:9d:b7:48:e4:
         24:5b:a8:87:ae:12:fd:7a:70:72:7e:70:81:18:81:9e:5d:a7:
         32:45:25:65:5b:67:44:a1:1d:1e:87:86:34:b3:0c:0c:ab:07:
         47:ac:b7:83:32:2c:b2:01:2d:ff:5a:63:71:59:52:32:53:5f:
         eb:d8:d9:18:2c:90:c2:5e:04:52:12:00:c3:c5:50:bc:05:84:
         19:b1:5a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:38:51 2024 by rpki-client on console-ams.rpki-client.org