Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/bdd8faa7-4151-3d94-99ce-ee2976ba2b91.roa
File:                     bdd8faa7-4151-3d94-99ce-ee2976ba2b91.roa (raw, json)
Hash identifier:          1457tP6BWNI2aCmTli3vhrnkMzUBEDhKf+6HB0s+Pnc=
Subject key identifier:   3E:A6:11:AE:51:F9:4A:6E:9F:1C:8C:B6:C6:94:A1:57:1C:5B:73:93
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584722A0DA2D177B858315D76200
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/bdd8faa7-4151-3d94-99ce-ee2976ba2b91.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     20115
IP address blocks:        2600:6c44::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a0:da:2d:17:7b:85:83:15:d7:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=6d342c65-74be-4126-bb30-240b5988aa1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:4f:cd:4f:07:8c:c6:19:62:f3:2a:65:1e:d8:
                    80:ec:17:65:ee:f6:cb:5d:9d:29:3e:e6:4f:d5:2d:
                    87:db:d9:a9:c9:d1:90:9a:11:fc:66:34:db:cc:e3:
                    c7:ab:05:1a:6b:07:5d:91:a5:6f:f4:06:ee:6f:97:
                    df:b1:fb:e1:5f:4e:d1:08:64:04:d7:e2:1a:61:5f:
                    84:43:2d:2c:d9:33:82:e2:c2:94:d6:b5:34:3e:af:
                    0b:18:2f:4a:19:f3:64:86:2d:72:c1:de:be:25:26:
                    67:fe:ec:95:cd:1f:2a:19:6d:e7:e2:87:5f:e7:58:
                    da:9e:51:b8:6c:62:75:54:a1:b0:32:da:f5:b0:4c:
                    bf:a6:92:c7:25:87:ad:ad:bd:06:2d:c7:36:f8:36:
                    74:1a:41:9d:7a:32:cd:19:63:ab:31:f6:06:07:ae:
                    8b:b1:7b:83:22:f8:19:ea:df:6c:51:ae:1e:89:d2:
                    9d:4f:1c:84:b7:2c:35:69:f4:7d:39:39:61:fd:6e:
                    2e:d1:9d:f0:89:0d:d5:78:64:e0:a8:8e:a8:29:b7:
                    b2:87:66:d1:06:9c:e4:ad:64:5e:a1:95:8f:36:4e:
                    76:e5:0f:07:a0:a7:49:7d:8f:d1:2c:bf:e2:90:8a:
                    3f:c1:1a:2f:9a:e5:eb:b2:8a:75:78:71:45:da:07:
                    52:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:A6:11:AE:51:F9:4A:6E:9F:1C:8C:B6:C6:94:A1:57:1C:5B:73:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/bdd8faa7-4151-3d94-99ce-ee2976ba2b91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:6c44::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:b4:85:b0:9c:04:2e:df:03:3c:fd:c7:c2:bd:35:f0:e5:64:
         f8:05:6c:ad:5b:ff:b4:b5:e9:38:87:51:80:97:e7:8c:79:19:
         b4:7a:6e:d1:bc:00:2b:ad:dd:0c:0f:b1:db:6b:84:7c:21:d0:
         a8:e1:54:06:17:14:53:41:78:be:7c:5b:ef:ed:96:4d:9d:82:
         a0:d1:4d:10:04:34:94:6a:ed:d9:7c:1d:79:4c:d3:20:70:ec:
         36:cc:7b:0a:c3:44:6e:12:36:05:ec:8f:a1:7a:1e:64:da:66:
         d5:b9:ab:2c:89:a7:b7:c3:31:b3:86:7e:07:ff:98:b3:fa:ca:
         a9:0f:6d:cc:60:b4:8d:72:eb:2d:b3:c5:13:c8:87:17:b6:c1:
         a6:b5:e4:6a:49:64:98:a1:e1:47:e6:03:76:5b:5e:73:e3:e6:
         a0:6a:64:67:ea:f1:1f:c3:80:09:96:c5:59:94:b8:35:3f:10:
         4c:db:77:07:21:fa:d4:64:6f:6d:42:11:49:58:35:72:86:d6:
         47:39:26:fe:06:28:ee:e2:5e:0e:c9:2d:64:51:a1:ee:47:c3:
         98:57:d3:2a:c9:f7:0a:be:50:dc:aa:1c:69:2c:ba:2c:0a:08:
         30:44:2c:77:d8:eb:5e:e2:5f:af:b0:0e:d3:33:1a:2a:2c:54:
         a2:d4:7d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:19 2024 by rpki-client on console-fra.rpki-client.org