Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ca09de87-a5ab-34c3-9246-bd11be84c56e.roa
File:                     ca09de87-a5ab-34c3-9246-bd11be84c56e.roa (raw, json)
Hash identifier:          nsEICZEOLpMhwE3sq/BYA6Edm5bIMRZ7xnqo9l+PT+Y=
Subject key identifier:   37:DC:7D:20:E8:4F:80:36:77:F1:C4:A9:52:4C:DD:2F:9E:D8:AA:15
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584722A181C97A90183ADB56C900
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ca09de87-a5ab-34c3-9246-bd11be84c56e.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     20115
IP address blocks:        2600:6c24::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a1:81:c9:7a:90:18:3a:db:56:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=9c763e52-8469-4b7b-b8bf-e879f721688e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:4d:19:7d:2d:f4:2c:3f:b9:56:d8:2f:aa:9c:
                    0b:4a:02:74:ad:91:eb:e8:80:da:66:4b:e1:6a:bc:
                    fe:05:e5:ba:b8:e8:ee:9f:98:d3:22:33:df:61:0d:
                    a6:63:6f:86:31:1b:94:07:1d:0e:f3:56:11:90:a1:
                    80:94:f7:98:02:4b:7a:1f:ff:2f:98:9a:ba:72:56:
                    e3:6f:ac:1d:ff:0a:77:04:35:2e:b2:5a:0d:9b:d0:
                    0a:be:e6:54:81:71:1e:d5:39:02:de:1c:99:bd:1d:
                    22:bc:8d:f6:82:d4:72:cd:f9:fe:2a:8c:18:ea:4b:
                    2a:f6:87:c8:fb:d8:2a:ea:6a:94:82:2b:0e:79:c1:
                    7c:a2:31:dc:62:98:e9:8f:8d:51:4b:41:7d:17:b9:
                    5c:06:46:d4:39:14:c3:2d:10:36:91:f3:1f:5a:55:
                    e5:7f:66:c2:55:8d:4a:76:0e:42:fc:59:5b:fa:f8:
                    c1:41:df:3a:28:e9:a1:7e:25:2f:36:41:b8:23:e7:
                    52:84:9a:a3:4c:3f:7a:a4:aa:b1:dc:90:cd:d2:a7:
                    f8:ea:31:51:c4:b7:b8:76:68:0a:67:7a:af:f5:e0:
                    39:6c:01:87:d5:8f:d2:02:2d:11:62:f5:d2:3e:51:
                    30:9d:73:b2:e8:d4:38:8b:e5:ce:30:c2:38:fc:94:
                    94:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:DC:7D:20:E8:4F:80:36:77:F1:C4:A9:52:4C:DD:2F:9E:D8:AA:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ca09de87-a5ab-34c3-9246-bd11be84c56e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:6c24::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:2a:ad:49:8d:1a:84:fb:86:29:ca:41:ee:73:69:66:f5:b1:
         4f:40:b7:4a:d2:10:c0:ca:7a:b3:60:2b:d5:19:47:a1:9e:b4:
         5a:f6:cc:cb:d9:28:67:6f:5f:ed:f2:96:0d:41:d4:61:90:98:
         7c:fa:c9:ef:6a:d9:1b:7b:fd:69:37:1d:00:13:5e:ad:54:4f:
         04:d2:98:50:3d:0a:44:96:9c:d3:0f:30:6a:6d:cd:a0:55:20:
         68:ad:9b:65:b2:c1:95:29:6e:90:9c:7f:cc:3b:08:f8:c8:ae:
         67:22:4a:3e:51:87:71:80:93:83:a3:0d:80:6c:a8:b3:45:49:
         f4:c8:5b:c2:b9:da:f0:41:f6:da:cc:58:57:6e:54:d1:90:b9:
         0a:de:3b:e5:0c:df:36:03:9f:3c:ea:6a:c2:c7:9e:eb:ff:4c:
         9f:e6:ac:3b:d1:e7:c2:95:d9:12:22:8a:dd:2b:a8:95:be:4f:
         1e:ff:b8:43:94:ab:9b:67:28:22:e7:cc:11:65:fc:1e:53:38:
         7f:79:a9:35:dd:3d:49:67:40:b8:7b:b9:a5:c6:de:14:5c:5e:
         ce:96:17:f2:1e:58:0b:10:a4:65:98:1d:28:5d:14:71:08:19:
         7d:14:2b:e5:0d:2b:32:1c:c0:ff:75:a5:dd:4e:7c:90:c1:12:
         81:ad:5e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:20 2024 by rpki-client on console-fra.rpki-client.org