Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2c5105e5-6561-3261-9ccd-22a5fa54aeeb.roa
File:                     2c5105e5-6561-3261-9ccd-22a5fa54aeeb.roa (raw, json)
Hash identifier:          uUC2Btift4+WF0DlaBeuXIHf43g+OJQKAnfqwCWVyWI=
Subject key identifier:   DC:C3:B3:8D:45:CD:63:7B:61:2A:39:B5:79:A1:3C:22:84:94:75:FA
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847B696C5A9718C2D3A8DDCF0C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2c5105e5-6561-3261-9ccd-22a5fa54aeeb.roa
Signing time:             Wed 30 Oct 2024 13:00:40 +0000
ROA not before:           Wed 30 Oct 2024 13:00:40 +0000
ROA not after:            Tue 28 Jan 2025 14:00:40 +0000
asID:                     20940
IP address blocks:        2600:1417:43::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b6:96:c5:a9:71:8c:2d:3a:8d:dc:f0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 30 13:00:40 2024 GMT
            Not After : Jan 28 14:00:40 2025 GMT
        Subject: CN=8ebbb3db-14b7-4cbc-ac6b-af387f699695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:74:78:9e:a8:1b:b1:c9:d1:ce:2c:24:26:a6:
                    63:3a:dc:a5:a0:63:1d:22:55:cf:1b:72:9b:b2:b6:
                    23:9b:b8:47:28:ff:77:0a:d4:fa:5b:5a:10:9d:92:
                    4f:9c:74:be:66:72:06:b1:fd:e0:7a:29:cd:f1:09:
                    5d:4e:0c:bc:57:20:82:f0:9a:df:27:4d:77:86:cf:
                    31:57:f6:5b:80:3e:61:2d:e2:12:81:5e:fe:e7:ba:
                    16:c3:86:c4:ca:bd:26:d0:c0:df:8f:04:96:25:c5:
                    93:77:cc:c5:95:37:be:1a:e3:d1:50:cf:56:80:44:
                    f8:2c:d6:e9:6a:a1:f4:22:54:ba:76:6c:6b:c8:ff:
                    a1:c9:03:d8:78:d4:bd:29:49:df:c0:56:5f:15:2d:
                    e5:e2:a6:c3:de:58:9a:e0:4c:df:f9:88:e1:82:b6:
                    c2:3a:4c:4c:b6:76:54:40:9e:1b:de:4b:19:9a:bb:
                    57:c3:17:88:12:96:78:06:77:02:bf:c4:36:4b:3d:
                    68:0a:a6:fa:86:b5:39:df:f9:23:77:7c:9b:e3:4a:
                    fe:59:b7:74:cf:f0:55:62:00:e2:03:6f:46:c7:bf:
                    df:12:12:c5:b4:dc:b2:d3:d0:ff:01:62:6b:0b:1a:
                    24:5d:69:fc:97:3a:63:36:24:4d:95:3e:01:aa:32:
                    3b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:C3:B3:8D:45:CD:63:7B:61:2A:39:B5:79:A1:3C:22:84:94:75:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2c5105e5-6561-3261-9ccd-22a5fa54aeeb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1417:43::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:2c:e8:f1:cd:0d:d4:c2:d0:d2:73:a8:88:6b:37:49:83:2b:
         b3:a2:a5:06:20:dd:cb:5d:1f:fb:9f:a2:82:4b:3d:0a:32:21:
         90:f8:64:07:e3:69:ee:f1:db:b2:e4:b7:3b:96:7f:dd:ad:8a:
         26:cc:73:85:9b:db:3a:08:00:db:5a:60:9f:79:d8:00:b4:32:
         db:dd:4e:6e:6a:63:4d:4f:cb:21:46:0c:9a:d6:d1:f8:b6:96:
         71:58:3f:39:05:8f:db:1c:20:8e:e8:28:51:88:89:12:13:79:
         68:55:8e:70:79:38:6c:e0:9f:91:4a:80:8e:07:80:c2:7f:39:
         79:71:93:a6:d5:0a:b2:2f:d7:12:33:86:e5:2f:98:91:be:ca:
         30:94:43:96:27:12:bd:42:14:69:31:76:e5:34:9e:b5:63:bb:
         62:e9:95:04:18:aa:d1:69:48:25:54:65:cd:b2:6e:f7:ba:ba:
         e3:f9:6d:1e:60:fa:3e:58:67:9e:89:a5:e1:30:c8:ba:99:da:
         f5:41:d1:e5:58:e1:bc:3e:53:e8:06:ed:14:b6:e9:f8:4b:47:
         72:8b:fa:91:2d:6f:96:6a:b0:78:2d:7f:61:9f:f9:3e:e2:43:
         49:1d:ca:af:bf:1d:f0:65:f1:8c:ed:dc:d5:a5:60:16:76:f5:
         7d:20:2f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:39:10 2024 by rpki-client on console-ams.rpki-client.org