Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bfe0eb0-0689-4c02-9a46-078ee028d631/f2449e41-f362-385f-a619-ab8e715445cc.roa
File:                     f2449e41-f362-385f-a619-ab8e715445cc.roa (raw, json)
Hash identifier:          PWJbGNBieVM+LfUPR+FnVTLzHVBYWaAnLVWwo+GGlpQ=
Subject key identifier:   2C:CF:B2:EE:A7:EC:44:53:C0:23:9A:B0:15:D4:C4:4C:76:F0:B5:28
Certificate issuer:       /CN=9bfe0eb0-0689-4c02-9a46-078ee028d631
Certificate serial:       010D0C9F432858471775C82618800397C18B5480
Authority key identifier: 17:62:FB:04:68:09:92:DF:F1:AF:03:8F:81:D9:23:98:B1:2B:25:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bfe0eb0-0689-4c02-9a46-078ee028d631.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bfe0eb0-0689-4c02-9a46-078ee028d631/f2449e41-f362-385f-a619-ab8e715445cc.roa
Signing time:             Tue 03 Sep 2024 13:00:42 +0000
ROA not before:           Tue 03 Sep 2024 13:00:42 +0000
ROA not after:            Mon 02 Dec 2024 14:00:42 +0000
asID:                     3851
IP address blocks:        2607:fe78:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bfe0eb0-0689-4c02-9a46-078ee028d631/9bfe0eb0-0689-4c02-9a46-078ee028d631.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bfe0eb0-0689-4c02-9a46-078ee028d631/9bfe0eb0-0689-4c02-9a46-078ee028d631.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bfe0eb0-0689-4c02-9a46-078ee028d631.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:17:75:c8:26:18:80:03:97:c1:8b:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bfe0eb0-0689-4c02-9a46-078ee028d631
        Validity
            Not Before: Sep  3 13:00:42 2024 GMT
            Not After : Dec  2 14:00:42 2024 GMT
        Subject: CN=0884ebdd-159a-4c61-8321-9151d0a6945b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:72:0f:ff:e2:45:86:25:fc:30:7d:c2:a3:59:
                    65:1d:b6:63:3f:7f:7e:ba:d1:95:cd:b1:05:4b:0f:
                    0e:58:58:0f:c0:e1:22:d6:9a:2d:9a:78:2e:4f:92:
                    62:b6:4d:0f:02:6d:e9:9c:a6:02:33:dc:af:84:7d:
                    d8:cc:12:37:ca:34:de:a7:34:46:99:48:e9:cc:6f:
                    07:d7:92:2d:f5:af:4e:b1:84:37:e1:01:2a:90:6e:
                    03:60:4f:2b:15:c6:05:57:06:ac:41:e9:de:53:86:
                    2b:29:d3:f5:cc:7d:1d:f6:98:07:88:c0:51:cc:f0:
                    a4:78:68:c7:96:27:b8:3c:94:d2:7e:34:ce:42:98:
                    32:62:52:18:e7:5c:11:12:7c:a6:28:5b:54:38:67:
                    f7:62:57:98:1e:58:42:0b:93:c0:3d:a8:0e:13:41:
                    61:fe:29:fb:20:8f:29:1e:1b:7d:8f:6c:3c:4d:5e:
                    45:cf:03:86:ff:e4:b0:ef:65:af:7a:c8:cf:39:e3:
                    e9:81:f4:02:d3:00:14:fc:52:95:70:33:4f:05:49:
                    df:d6:3c:a7:ee:9e:36:24:6c:09:0b:fc:93:4b:07:
                    e0:b6:61:ab:95:83:d0:77:1e:40:e1:e8:01:be:04:
                    ec:47:91:41:13:1f:78:33:a4:9d:b5:7f:28:be:b9:
                    04:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:CF:B2:EE:A7:EC:44:53:C0:23:9A:B0:15:D4:C4:4C:76:F0:B5:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bfe0eb0-0689-4c02-9a46-078ee028d631/f2449e41-f362-385f-a619-ab8e715445cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bfe0eb0-0689-4c02-9a46-078ee028d631/9bfe0eb0-0689-4c02-9a46-078ee028d631.crl

            X509v3 Authority Key Identifier:
                keyid:17:62:FB:04:68:09:92:DF:F1:AF:03:8F:81:D9:23:98:B1:2B:25:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bfe0eb0-0689-4c02-9a46-078ee028d631.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fe78:8000::/33

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:2f:0e:ac:32:10:be:1c:b4:70:d6:ce:48:4d:95:e3:bd:9e:
         e6:1b:c1:ab:46:9c:11:62:5d:f0:90:b7:ea:99:99:a5:34:9f:
         16:a9:25:ae:0d:74:03:d6:bf:37:34:b4:26:3d:83:74:78:24:
         50:ec:29:07:cd:28:d0:7c:61:62:21:e4:9b:57:8e:fb:38:f1:
         1c:6c:a8:59:78:19:db:51:ad:c6:6d:10:e7:6b:f2:bb:c5:77:
         e8:f8:98:50:18:a6:fc:2b:b3:69:8f:5a:1d:3b:5c:70:6e:1b:
         ef:8b:f2:2c:08:80:1a:de:da:8f:30:4b:a5:b8:6f:55:79:a1:
         ad:e3:b7:6b:de:b0:18:44:f0:b6:de:20:35:b9:9e:d4:e5:b8:
         5b:31:1a:d1:5a:cd:b2:84:09:43:e1:c6:73:8b:e9:8f:2e:60:
         b9:12:3a:e2:0d:c4:67:7d:9c:3f:cb:26:a6:ed:04:1d:3a:b4:
         80:95:9e:98:cd:90:f9:c4:7e:19:7b:09:db:fe:68:fe:26:a3:
         72:cf:b3:f9:d4:f8:26:6a:cf:b7:19:46:1a:15:17:02:47:83:
         8b:43:65:0e:0f:e0:a6:1f:9c:44:84:90:1b:a2:43:00:db:fa:
         23:f6:53:34:2a:6a:11:8e:e7:8a:06:cf:6b:09:27:6c:8b:eb:
         d6:33:8c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:42:41 2024 by rpki-client on console-ams.rpki-client.org