Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2fcde55-dd78-49f8-8c66-802a68b8f6c4/f8ed1838-7ca7-384a-990b-6e78286fd5e5.roa
File:                     f8ed1838-7ca7-384a-990b-6e78286fd5e5.roa (raw, json)
Hash identifier:          avHl9BmrXDjj4CLKa9nDzGfEA4hbtONEM3/jO53cOlI=
Subject key identifier:   CD:97:9A:7B:9D:2D:CF:E5:6F:5F:88:90:7A:CD:6B:4E:A8:2C:D2:CF
Certificate issuer:       /CN=f2fcde55-dd78-49f8-8c66-802a68b8f6c4
Certificate serial:       010D0C9F43285845B7B38BF8FDB84EA67D40C980
Authority key identifier: 59:20:26:E6:D7:C6:47:62:EE:A3:1C:A3:AC:33:A5:32:CC:CD:15:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2fcde55-dd78-49f8-8c66-802a68b8f6c4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2fcde55-dd78-49f8-8c66-802a68b8f6c4/f8ed1838-7ca7-384a-990b-6e78286fd5e5.roa
Signing time:             Tue 30 Apr 2024 13:00:34 +0000
ROA not before:           Tue 30 Apr 2024 13:00:34 +0000
ROA not after:            Mon 29 Jul 2024 13:00:34 +0000
asID:                     12129
IP address blocks:        2620:11f:7008::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2fcde55-dd78-49f8-8c66-802a68b8f6c4/f2fcde55-dd78-49f8-8c66-802a68b8f6c4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2fcde55-dd78-49f8-8c66-802a68b8f6c4/f2fcde55-dd78-49f8-8c66-802a68b8f6c4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2fcde55-dd78-49f8-8c66-802a68b8f6c4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b7:b3:8b:f8:fd:b8:4e:a6:7d:40:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2fcde55-dd78-49f8-8c66-802a68b8f6c4
        Validity
            Not Before: Apr 30 13:00:34 2024 GMT
            Not After : Jul 29 13:00:34 2024 GMT
        Subject: CN=0793a6bc-0194-4a37-89e2-d81d07b716d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:85:c0:8a:44:4e:54:26:dd:30:a7:c1:4c:85:
                    7b:76:76:59:a3:bc:97:1b:00:cb:a0:39:45:b6:ff:
                    7f:a3:c0:cd:79:c0:63:fa:46:09:66:fb:a9:26:f5:
                    b2:27:d8:62:86:7a:02:ae:58:68:95:eb:93:22:ae:
                    d8:ba:ef:0e:96:96:b9:4f:8a:45:21:70:41:18:ac:
                    60:42:62:35:28:e1:e1:d8:a3:33:33:dc:e7:02:77:
                    7a:b9:96:37:72:54:2c:19:2f:19:cf:39:2a:06:ff:
                    35:bc:86:83:96:16:6c:34:4a:62:21:cf:4b:fb:48:
                    21:7c:c3:a7:bd:22:23:4a:fa:86:df:35:c8:cb:8a:
                    af:ad:cd:eb:07:12:5f:51:42:b7:ce:11:89:0d:63:
                    98:a7:58:e9:d4:f0:03:46:5a:7c:f3:67:f2:cb:3a:
                    28:14:52:49:94:0e:5a:27:65:ef:95:67:3d:1f:ec:
                    81:8b:27:ef:d6:ac:31:99:f1:dc:b9:9d:6c:17:4b:
                    dd:ec:4b:e2:70:e1:d8:c1:08:e2:41:6b:c1:23:7e:
                    8d:d0:9c:38:54:9c:a4:3d:4f:84:3f:fc:e3:f8:6f:
                    0a:62:12:7c:7d:9e:7c:95:f1:f5:c7:cd:9c:c1:6a:
                    b7:d8:ce:f0:f2:5c:c7:06:ff:28:c6:c0:13:ac:c5:
                    02:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:97:9A:7B:9D:2D:CF:E5:6F:5F:88:90:7A:CD:6B:4E:A8:2C:D2:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2fcde55-dd78-49f8-8c66-802a68b8f6c4/f8ed1838-7ca7-384a-990b-6e78286fd5e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2fcde55-dd78-49f8-8c66-802a68b8f6c4/f2fcde55-dd78-49f8-8c66-802a68b8f6c4.crl

            X509v3 Authority Key Identifier:
                keyid:59:20:26:E6:D7:C6:47:62:EE:A3:1C:A3:AC:33:A5:32:CC:CD:15:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2fcde55-dd78-49f8-8c66-802a68b8f6c4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:11f:7008::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:8e:e3:15:78:66:1c:c5:26:04:0d:c3:a8:5c:6e:c9:40:3c:
         6a:5a:af:92:70:cb:62:9a:14:c6:de:ad:9e:6a:f6:09:0b:7b:
         05:80:11:fd:7c:d2:d2:d5:f9:20:39:28:b1:1c:e8:b6:74:51:
         55:03:10:e9:5c:b5:8d:ac:d9:d5:34:1f:a2:63:2d:07:49:ae:
         57:d1:db:69:32:6f:39:85:59:3e:11:4b:ee:18:38:99:ad:37:
         67:46:3e:bc:a7:c6:65:e2:fe:b1:76:f4:03:99:a2:99:bc:b9:
         df:7a:08:be:74:d7:44:b1:1e:f8:ba:c8:ff:fa:f1:ad:8b:a6:
         61:72:54:63:91:38:13:de:a3:60:42:ae:ff:40:ba:2b:66:21:
         95:ae:7c:ee:76:1f:cd:3b:54:dc:a4:a1:14:c2:82:16:e6:58:
         05:61:33:9b:fb:f9:d8:32:8c:d7:04:cb:b1:8b:9e:72:3f:a5:
         4f:16:ee:3f:48:a2:6c:ab:f6:05:63:44:ac:3f:e9:1f:a6:02:
         0a:7d:b8:92:ec:62:ad:bd:bc:c0:7d:ab:02:d0:1c:9b:df:f7:
         e9:5d:a4:a3:17:5d:0f:6e:5d:47:be:18:18:18:ec:66:97:91:
         ef:c1:72:b9:a1:f5:d3:a6:f9:ea:e8:41:e6:cf:5f:e1:ba:da:
         5a:0a:3b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 16:30:08 2024 by rpki-client on console-fra.rpki-client.org