Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/0735d197-9273-3075-b268-f6a4054268df.roa
File:                     0735d197-9273-3075-b268-f6a4054268df.roa (raw, json)
Hash identifier:          7VutGRi4C5LoE76f5SILKbBrdxnFmBezB0eOmbxZ9HU=
Subject key identifier:   BF:6F:CE:5C:DA:B4:53:C3:8C:8B:81:E1:83:83:46:56:DE:7E:61:5C
Certificate issuer:       /CN=21dd6860-719e-46c0-8b7c-89b9e8d88da6
Certificate serial:       010D0C9F432858478456716C56962A9452266600
Authority key identifier: 42:79:8D:AA:08:72:7C:74:A2:5D:C9:91:AD:DB:EA:CA:2E:FC:A5:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/0735d197-9273-3075-b268-f6a4054268df.roa
Signing time:             Sat 12 Oct 2024 13:00:42 +0000
ROA not before:           Sat 12 Oct 2024 13:00:42 +0000
ROA not after:            Fri 10 Jan 2025 14:00:42 +0000
asID:                     12129
IP address blocks:        2620:84:c000::/48 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/21dd6860-719e-46c0-8b7c-89b9e8d88da6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/21dd6860-719e-46c0-8b7c-89b9e8d88da6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:84:56:71:6c:56:96:2a:94:52:26:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21dd6860-719e-46c0-8b7c-89b9e8d88da6
        Validity
            Not Before: Oct 12 13:00:42 2024 GMT
            Not After : Jan 10 14:00:42 2025 GMT
        Subject: CN=1dc33b20-5731-4079-8211-cb7053d52939
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:7d:31:94:f5:2d:ef:ab:ba:e3:a3:32:c6:7a:
                    18:24:92:12:11:41:51:01:6c:46:0b:f9:ac:7d:87:
                    ba:36:c4:8b:a9:e2:12:38:08:13:e9:45:5b:31:32:
                    38:7f:b0:03:6e:84:33:2b:7c:87:d8:90:2d:66:5f:
                    39:5e:52:16:63:68:14:40:ef:dd:ed:36:11:7c:b0:
                    45:c8:6c:3c:de:f3:ca:9f:29:80:48:a9:0d:db:7d:
                    e2:e5:50:4b:3f:2e:a2:12:22:d1:e0:53:b0:b1:48:
                    24:11:e6:e5:95:9a:4d:60:99:12:02:65:7e:ae:ef:
                    8e:9d:39:01:b4:b9:b9:79:3a:4f:08:83:34:5c:44:
                    35:e2:36:66:a0:a6:b0:86:85:ee:da:af:28:08:c1:
                    2a:14:3b:70:52:83:79:98:d0:e8:87:67:b1:ae:86:
                    8e:c5:8a:92:dd:10:09:c9:b8:7f:b4:14:90:db:1f:
                    6c:85:d3:b0:55:26:4d:1b:b4:58:2f:8a:bb:73:4b:
                    e0:bb:5a:58:c7:45:94:60:5b:6a:70:69:59:2d:9f:
                    dc:84:72:9f:0a:f5:ec:b8:dc:f8:7f:67:ea:c4:4a:
                    59:04:a8:0c:b2:e3:c0:24:d4:4d:41:11:3d:1d:fa:
                    e1:65:8a:ba:9e:fc:5a:3c:db:cf:1c:77:05:24:3d:
                    cd:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:6F:CE:5C:DA:B4:53:C3:8C:8B:81:E1:83:83:46:56:DE:7E:61:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/0735d197-9273-3075-b268-f6a4054268df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/21dd6860-719e-46c0-8b7c-89b9e8d88da6.crl

            X509v3 Authority Key Identifier:
                keyid:42:79:8D:AA:08:72:7C:74:A2:5D:C9:91:AD:DB:EA:CA:2E:FC:A5:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:84:c000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:e6:61:0d:fc:5a:84:34:23:8c:7a:89:ef:e0:b7:0d:f3:dd:
         a5:88:65:d8:95:8d:f8:8c:9b:c1:22:f8:10:aa:0f:c0:95:86:
         f1:01:52:4b:49:4b:5c:9f:df:14:f2:41:9f:10:77:df:a8:66:
         0c:4f:b8:80:0c:2d:f5:22:53:d1:82:cc:a7:db:52:19:7e:19:
         74:e9:76:5c:e9:96:a3:3d:66:3e:30:0a:22:be:4c:4d:74:3b:
         6c:c3:d2:6c:c7:2a:c2:18:f3:36:eb:c8:f3:38:bd:09:84:67:
         ce:50:84:87:48:ad:3e:12:92:1d:fe:8e:19:59:12:8c:4a:a7:
         17:a8:1e:c6:e0:13:92:0f:bb:ce:21:f5:45:96:1f:61:fa:fa:
         f2:1e:80:34:de:f9:8d:52:77:9f:34:8b:87:44:1d:34:e4:cf:
         e7:e4:85:c3:cc:da:01:51:82:46:48:b7:7c:f9:c8:b6:fe:8c:
         91:0a:73:20:15:18:fd:05:6f:99:56:4a:cf:9b:00:1c:29:76:
         07:e7:2c:f8:90:4e:4d:bb:df:72:23:58:e9:e2:d5:78:c8:62:
         6b:9f:1d:43:7e:b9:51:61:28:0d:fa:49:a9:59:b6:76:dd:e6:
         57:bb:a8:c3:6d:21:c5:70:f6:e9:18:91:12:ba:34:ab:3c:e9:
         52:86:b5:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:00 2024 by rpki-client on console-fra.rpki-client.org