Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/72d4e217-021e-3ff9-b585-2aedf8793800.roa
File:                     72d4e217-021e-3ff9-b585-2aedf8793800.roa (raw, json)
Hash identifier:          PpA43DfiiKK3kQXDHIxFPF6s7RR8dwlSDhJMzfki8E8=
Subject key identifier:   D9:6F:02:CE:4E:ED:DD:C3:BF:20:7C:0B:65:9A:7E:0A:33:B5:9E:69
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847CE6F4999713F8F3A80488380
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/72d4e217-021e-3ff9-b585-2aedf8793800.roa
Signing time:             Fri 08 Nov 2024 02:00:27 +0000
ROA not before:           Fri 08 Nov 2024 02:00:27 +0000
ROA not after:            Thu 06 Feb 2025 02:00:27 +0000
asID:                     9443
IP address blocks:        2600:1415:d800::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ce:6f:49:99:71:3f:8f:3a:80:48:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Nov  8 02:00:27 2024 GMT
            Not After : Feb  6 02:00:27 2025 GMT
        Subject: CN=0a3a00c9-3846-4601-8065-cdf3a50b937c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ef:63:37:84:f7:83:9f:b4:85:eb:22:18:40:
                    5c:52:14:fe:2c:91:04:26:1b:84:f5:a9:98:4d:a7:
                    01:ce:fb:57:27:8f:25:a6:31:14:4b:ff:53:45:69:
                    60:5a:68:7e:63:c2:7a:77:a2:de:db:e1:db:64:eb:
                    79:35:3b:a4:b5:07:65:41:10:c5:b2:cc:1f:72:f2:
                    ef:ac:08:74:4e:50:c1:07:60:ca:d8:ae:06:7e:20:
                    d2:fa:58:b9:a5:92:2f:59:80:03:95:0f:de:31:1b:
                    a6:ae:8d:b4:d9:49:30:cb:6a:8f:e3:c7:0e:41:ba:
                    19:e2:3a:70:5f:03:74:35:7e:07:3c:b6:c0:d9:d7:
                    24:89:3a:b1:e4:cf:5c:8e:2b:c2:9e:f3:df:13:7a:
                    0e:aa:22:8c:88:b1:eb:c7:7b:fe:85:88:73:25:10:
                    bc:e3:18:84:ab:43:b0:a2:7f:db:f4:88:c1:c7:73:
                    7b:17:1f:78:bd:38:fa:0c:a1:4d:c2:1f:f2:9a:e6:
                    1e:85:fd:26:fe:1b:02:71:c8:0f:bc:8c:f2:a5:28:
                    1d:a6:e7:c1:05:68:63:6e:04:fa:8a:3d:47:09:33:
                    e2:f3:34:9a:e7:6c:c2:df:ce:31:68:83:0d:45:1d:
                    f9:49:f1:29:91:6a:e4:04:1e:47:15:20:f7:7e:8b:
                    34:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:6F:02:CE:4E:ED:DD:C3:BF:20:7C:0B:65:9A:7E:0A:33:B5:9E:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/72d4e217-021e-3ff9-b585-2aedf8793800.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1415:d800::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:f0:0d:4c:1d:35:e2:2b:ba:3e:10:c3:b5:ed:9e:a8:6b:b1:
         0d:9a:6f:d8:17:a7:3a:bc:3e:fb:86:a8:2b:fa:70:e3:4b:95:
         93:87:56:ef:ad:7c:44:01:a4:61:fd:5c:6d:ba:96:a3:23:1d:
         99:ee:88:7c:34:f4:dc:fc:30:ac:15:be:9b:db:37:76:10:0f:
         15:c4:37:05:d7:2d:14:29:dc:ba:ec:36:c8:86:9b:de:8b:6c:
         7a:90:97:bc:23:ba:6c:93:6c:62:d1:aa:d6:2f:33:a7:7e:cd:
         09:6c:a9:82:9d:6d:21:c9:5a:3a:b1:85:6a:7f:fb:94:ad:62:
         8b:25:a7:36:a0:38:9e:7e:7b:23:e4:81:0e:47:93:72:a2:94:
         4c:4e:e3:bc:03:06:c8:91:5c:b2:00:fe:d1:65:b0:51:08:45:
         27:95:6d:d6:06:60:11:bb:9d:a5:f2:5e:0f:14:08:35:1a:17:
         73:c7:8e:d5:74:b8:2c:b8:d8:5a:c0:15:5a:4b:fc:99:04:d2:
         02:4e:95:62:4e:c0:78:36:0f:25:30:5d:fe:d8:ab:b1:fa:44:
         ba:cc:1c:e0:d4:3e:bf:04:2b:bf:fd:42:4f:7b:9b:6d:c2:62:
         48:d1:a0:ca:aa:75:2a:49:a2:dc:2e:f0:04:d8:07:10:f9:8c:
         6b:03:a1:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:17:03 2024 by rpki-client on console-fra.rpki-client.org