Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/2255066e-9ff0-38c8-9ca9-da39b830dabd.roa
File:                     2255066e-9ff0-38c8-9ca9-da39b830dabd.roa (raw, json)
Hash identifier:          bMxRkYVBUfxCeAPS10kutoBWxvnK4uWHfT+pvmLVjGE=
Subject key identifier:   79:80:45:68:90:B0:A8:11:A7:BA:F1:0B:B0:C2:AC:8D:66:A9:3B:56
Certificate issuer:       /CN=a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1
Certificate serial:       010D0C9F4328584765D19F7E33B27757ACD1A300
Authority key identifier: 5E:DC:0E:02:DA:6E:E4:15:BF:E2:23:91:E4:DC:A3:27:51:0B:7A:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/2255066e-9ff0-38c8-9ca9-da39b830dabd.roa
Signing time:             Tue 01 Oct 2024 14:38:57 +0000
ROA not before:           Tue 01 Oct 2024 14:38:57 +0000
ROA not after:            Mon 30 Dec 2024 15:38:57 +0000
asID:                     21766
IP address blocks:        2605:6600::/28 maxlen: 28

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:65:d1:9f:7e:33:b2:77:57:ac:d1:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1
        Validity
            Not Before: Oct  1 14:38:57 2024 GMT
            Not After : Dec 30 15:38:57 2024 GMT
        Subject: CN=3bc75b49-556a-4e80-889f-c30fd99319cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:aa:95:94:8d:c6:05:a5:2f:15:f6:51:cc:64:
                    b2:5c:6c:c6:ad:c7:06:ea:51:6e:8c:6e:bf:12:3d:
                    fa:61:15:11:05:f1:86:e9:6a:61:01:57:b7:c2:95:
                    07:0d:b3:44:65:1c:be:ce:db:c6:c0:1f:05:42:30:
                    60:60:78:41:59:12:3e:f2:0f:42:a6:ef:32:93:62:
                    b3:1d:e9:b6:ba:98:18:84:71:24:1a:60:33:bf:d9:
                    87:87:0c:1b:33:29:0f:63:43:c0:a9:98:b1:70:9d:
                    93:3a:df:d4:b2:03:76:89:0e:d8:8f:6c:83:1e:ef:
                    50:00:58:01:18:10:1c:d1:96:4e:78:14:f1:7b:5f:
                    23:a7:59:c0:84:c7:ab:86:96:3f:07:5e:8b:8d:b8:
                    62:b5:21:43:48:5e:90:c2:de:12:bf:a9:1a:a5:de:
                    bd:db:61:82:5e:2d:db:c1:f2:fb:eb:f1:4f:4e:e5:
                    0b:ea:8b:b6:a2:ec:c2:9e:10:32:0d:f0:ab:05:18:
                    26:08:5c:b3:df:7e:65:09:9e:a1:a0:e5:45:d2:cd:
                    d7:b9:85:e2:6c:24:1c:9f:b7:f0:5d:ef:84:ec:df:
                    56:b9:e0:da:d3:c5:7f:15:c3:0d:ff:04:b1:36:79:
                    7b:e3:e2:d3:c0:f7:43:f6:fd:28:31:9d:a0:1f:67:
                    95:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:80:45:68:90:B0:A8:11:A7:BA:F1:0B:B0:C2:AC:8D:66:A9:3B:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/2255066e-9ff0-38c8-9ca9-da39b830dabd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.crl

            X509v3 Authority Key Identifier:
                keyid:5E:DC:0E:02:DA:6E:E4:15:BF:E2:23:91:E4:DC:A3:27:51:0B:7A:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:6600::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:b7:cf:9c:22:ca:47:67:a8:88:fc:c0:c1:b1:1f:c6:29:e2:
         c7:f7:65:77:c5:32:08:05:6b:86:9e:ca:9e:00:f7:31:64:63:
         e3:5e:b0:7b:48:7d:1b:29:75:55:a4:03:c5:c8:7c:73:ed:cf:
         cf:49:42:70:5f:00:5e:7f:01:b3:b6:d2:25:41:86:a2:02:34:
         f6:63:fa:74:b3:60:34:1c:cd:d3:6a:f8:5b:72:25:04:cf:7f:
         d8:1c:bd:51:2a:9e:7b:fc:df:6b:ee:32:8f:d6:22:62:38:fa:
         87:9c:57:3b:f5:21:91:71:11:32:61:32:46:1e:58:3f:18:56:
         70:b3:27:57:f0:0d:95:0f:13:c7:f6:4e:54:e1:c7:e6:f5:3e:
         4d:54:70:71:68:e8:dd:51:b2:78:8d:3f:20:3b:41:d3:72:2e:
         9f:1a:44:1b:17:0b:6c:b3:0f:72:9e:ef:87:6d:7d:11:3e:ff:
         fe:7f:ce:81:84:76:62:7c:da:f3:35:d3:a6:07:88:65:de:df:
         66:9c:63:c9:36:c5:eb:30:65:99:c7:d3:36:e3:e2:5b:3f:d2:
         1f:9d:e5:4e:5d:13:1a:44:3e:86:e5:4f:e0:db:cf:19:94:41:
         a6:3c:83:54:e5:c8:6b:ed:1f:19:07:73:19:d9:e3:82:85:f7:
         ab:38:ba:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:32 2024 by rpki-client on console-fra.rpki-client.org