Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fe9b4bc3-9a51-3c9e-a722-37b2993c0036.roa
File:                     fe9b4bc3-9a51-3c9e-a722-37b2993c0036.roa (raw, json)
Hash identifier:          sS7Uog8VoI5fexaEUcyAZ0lqES8p17v/i86qCuTWfDE=
Subject key identifier:   DC:F6:42:C2:37:56:83:F0:BD:9D:46:12:CC:09:6D:A9:B3:6B:90:1E
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847C1DF699496225DABB9E27080
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fe9b4bc3-9a51-3c9e-a722-37b2993c0036.roa
Signing time:             Sun 03 Nov 2024 14:00:49 +0000
ROA not before:           Sun 03 Nov 2024 14:00:49 +0000
ROA not after:            Sat 01 Feb 2025 14:00:49 +0000
asID:                     20940
IP address blocks:        2600:141d:8000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c1:df:69:94:96:22:5d:ab:b9:e2:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Nov  3 14:00:49 2024 GMT
            Not After : Feb  1 14:00:49 2025 GMT
        Subject: CN=6d30d9a2-852e-4ed4-ae53-0c4384664d69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:80:64:fb:84:46:b3:ca:1e:8a:33:dc:b3:cc:
                    b7:64:f1:7b:95:73:32:02:c2:a6:08:81:58:2a:f8:
                    31:5e:7e:f8:4c:1e:38:42:aa:9b:81:4c:93:5a:75:
                    ae:02:90:9c:bb:cb:4d:23:41:77:32:1e:26:6e:80:
                    f0:23:15:11:54:6e:52:fc:9c:42:ac:99:2e:f5:87:
                    f2:c9:02:77:8b:39:fd:33:be:df:c5:d4:ee:25:4e:
                    34:82:04:17:ef:58:0d:74:d8:4f:16:fd:0c:44:e9:
                    8b:89:de:6c:d7:82:6f:ac:25:2f:96:aa:79:80:58:
                    8c:81:9a:28:ba:5c:2c:08:aa:df:b6:4e:47:74:5e:
                    6a:de:a8:de:6b:24:97:c7:ea:e1:ed:03:da:19:3f:
                    18:da:88:58:38:b5:f9:3f:d5:6c:9e:ec:7e:e8:01:
                    f3:f6:10:9c:ab:a8:3f:2a:e6:fd:da:ec:08:2d:5d:
                    36:59:81:08:f1:13:85:00:06:ba:b9:c1:90:03:e2:
                    bd:36:7e:14:0f:77:98:ae:a3:85:6a:44:9a:b4:5e:
                    46:58:4f:4a:78:cc:a9:e3:a3:d8:26:60:f2:19:47:
                    e1:86:19:84:f9:c2:4e:bf:8e:fa:93:c7:68:8c:a5:
                    0a:80:86:fe:eb:84:33:db:f6:e6:5b:34:0e:9e:f1:
                    15:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:F6:42:C2:37:56:83:F0:BD:9D:46:12:CC:09:6D:A9:B3:6B:90:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fe9b4bc3-9a51-3c9e-a722-37b2993c0036.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:141d:8000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:5b:64:40:5d:64:30:35:0d:0a:0a:e7:7c:d2:4f:8d:a5:7f:
         b1:49:09:58:d3:32:0b:d8:2b:24:86:c9:88:6e:14:a5:e2:dc:
         4b:ef:e4:9b:d6:ce:66:f0:f8:a6:d2:0d:2c:bf:6b:bf:f3:5c:
         c0:3d:8e:85:a2:fd:b7:ac:40:88:d8:51:7a:5a:67:36:0c:4e:
         65:3c:e4:6e:ec:f2:82:9d:a0:47:af:df:8e:04:cc:e1:9b:5a:
         1f:6b:4b:de:6c:70:6d:5a:be:8c:b2:10:46:02:3e:0b:d7:be:
         a7:83:05:2e:91:49:20:16:a2:30:ef:a9:7b:7e:27:2c:61:3e:
         2b:a0:9e:4f:07:ec:76:b0:c8:29:98:63:94:2f:36:25:2d:83:
         3a:8a:36:b3:84:9a:ea:ae:f9:c8:cb:e3:76:4b:c2:a8:ee:a2:
         4d:5f:9a:6c:26:e2:44:58:b4:0b:e5:e2:5f:40:50:d7:ff:28:
         c2:d7:0a:21:78:c5:02:29:2f:51:02:bb:14:b2:4e:a2:fa:ef:
         a2:9a:0b:af:f6:f1:47:f5:15:77:85:03:cc:18:e4:7a:3b:bd:
         25:20:c1:94:18:07:e7:c4:8b:66:49:42:c4:bd:37:a0:e0:36:
         a0:d8:dd:4a:d2:2d:3d:a4:2e:7a:69:48:9f:e4:af:1d:d7:da:
         5e:b5:0d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:38:59 2024 by rpki-client on console-fra.rpki-client.org