Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ff494e3f-1bc4-374e-bcd8-a8b5169ebc93.roa
File:                     ff494e3f-1bc4-374e-bcd8-a8b5169ebc93.roa (raw, json)
Hash identifier:          CcEcAKDK5Mic00D/Y/H1KUutRjvfgR4dDX40VWIIvvg=
Subject key identifier:   8B:1C:31:78:A7:69:B5:61:FF:92:03:7E:EC:3F:67:F3:86:B2:9F:35
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847CE6F44B7579BD9F8FB16FC00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ff494e3f-1bc4-374e-bcd8-a8b5169ebc93.roa
Signing time:             Fri 08 Nov 2024 02:00:27 +0000
ROA not before:           Fri 08 Nov 2024 02:00:27 +0000
ROA not after:            Thu 06 Feb 2025 02:00:27 +0000
asID:                     55836
IP address blocks:        2600:140f:5a00::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ce:6f:44:b7:57:9b:d9:f8:fb:16:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Nov  8 02:00:27 2024 GMT
            Not After : Feb  6 02:00:27 2025 GMT
        Subject: CN=6e176697-97ca-4a2d-b74c-c9bc5b0f125d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:9a:7a:4c:3d:57:0a:14:02:4e:a6:20:76:30:
                    1c:f9:ea:1c:63:5c:46:b7:48:ac:d0:fa:c1:17:7c:
                    f3:92:70:71:43:c9:9b:fe:22:c2:ba:ae:8a:9e:0b:
                    f7:3a:0a:f7:fe:40:3a:2e:4b:1a:6a:56:f4:53:24:
                    b9:50:36:f5:4e:11:ce:52:34:89:ce:cb:7c:57:03:
                    d4:92:a9:a3:33:77:6b:a9:e9:78:ea:66:49:97:94:
                    4c:25:70:ee:46:f3:50:7b:2c:29:89:3d:6c:dc:2b:
                    ad:7b:9e:37:82:9e:6e:1c:12:6f:07:c2:10:26:77:
                    e3:df:44:44:eb:3f:70:03:29:ce:ec:3f:1f:f6:06:
                    5c:13:3e:62:50:a5:ef:ea:b5:68:fd:f5:79:03:6b:
                    33:26:d6:06:53:0a:91:68:da:92:3f:4b:12:d6:21:
                    e7:40:a5:bc:68:41:ca:50:69:5c:e4:aa:7e:ad:ee:
                    b6:a5:d1:7e:70:61:30:6a:6f:4f:25:ca:cc:16:d6:
                    dd:0a:12:07:bc:33:a7:7b:c3:d8:d0:c6:95:0b:13:
                    a7:d4:8e:8a:74:9b:95:07:2d:d5:17:db:d4:b3:ba:
                    ed:d2:e3:96:3b:4d:ba:25:90:8b:46:35:64:4f:c8:
                    b6:b4:49:41:f4:20:7a:6c:54:e6:f3:4c:08:83:cb:
                    ef:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:1C:31:78:A7:69:B5:61:FF:92:03:7E:EC:3F:67:F3:86:B2:9F:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ff494e3f-1bc4-374e-bcd8-a8b5169ebc93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:140f:5a00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:80:c5:da:0f:1c:79:12:3e:c6:38:1d:e3:ce:36:f4:f6:f3:
         66:18:a9:85:9b:8d:95:f2:86:18:76:a2:75:e8:a3:98:e1:ff:
         76:5e:48:5d:de:86:0d:f2:dd:da:6d:32:e8:69:5b:d2:64:fe:
         49:45:5c:85:9c:2e:df:d3:ec:40:ba:ec:0d:ee:3f:71:11:fd:
         50:18:3b:4a:4d:98:4f:e0:eb:a6:8e:73:66:4b:19:05:c3:dd:
         b5:13:e0:14:a7:67:b6:6e:63:8b:fd:4a:88:87:d1:ca:87:cf:
         5b:71:67:b0:00:01:2f:0a:ce:a3:b9:44:42:69:80:80:e4:9e:
         62:a6:52:19:be:21:cb:0e:e6:59:5c:1a:da:34:37:22:6b:8e:
         60:03:38:7c:61:5e:aa:9e:94:45:ef:ae:b1:49:93:c5:9a:3f:
         43:bf:e6:af:9d:b6:f2:95:26:16:2a:04:b8:1f:2b:b8:5e:66:
         5a:74:64:58:35:81:86:aa:9b:f8:33:d1:d9:c6:89:5f:f1:f6:
         b6:0b:a6:f2:b8:42:75:a7:68:29:e7:04:eb:0b:83:fa:4f:f7:
         2b:cf:8c:16:d0:aa:f2:42:99:27:1a:e4:66:e7:b7:7c:1f:3e:
         f3:29:f2:ae:6c:63:67:44:65:85:48:b3:c8:d0:97:c0:24:31:
         db:d2:db:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:33:12 2024 by rpki-client on console-ams.rpki-client.org