Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/888ee824-8672-3b73-977c-adf62630d235.roa
File:                     888ee824-8672-3b73-977c-adf62630d235.roa (raw, json)
Hash identifier:          J2z+Frp1PcZeeS9vZ6bldiJPKqw+XI99Nl3M012c7fw=
Subject key identifier:   D7:E0:C9:D2:69:A4:82:CC:2E:1E:29:DA:41:41:19:69:0E:0F:1F:0A
Certificate issuer:       /CN=22f3c152-12b6-441e-b4d6-66feab870c4d
Certificate serial:       010D0C9F43285847E35F7356155EDE13B5F71080
Authority key identifier: 91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/888ee824-8672-3b73-977c-adf62630d235.roa
Signing time:             Fri 15 Nov 2024 14:00:39 +0000
ROA not before:           Fri 15 Nov 2024 14:00:39 +0000
ROA not after:            Thu 13 Feb 2025 14:00:39 +0000
asID:                     1100
IP address blocks:        2605:8900:f000::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e3:5f:73:56:15:5e:de:13:b5:f7:10:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22f3c152-12b6-441e-b4d6-66feab870c4d
        Validity
            Not Before: Nov 15 14:00:39 2024 GMT
            Not After : Feb 13 14:00:39 2025 GMT
        Subject: CN=e3312449-78a2-4032-83f0-91108404cb50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:7d:88:a9:a5:b9:7d:6f:38:68:4c:91:73:51:
                    a7:4a:58:1e:2c:2b:87:c1:f9:f8:db:e1:78:74:dd:
                    50:c8:67:e4:72:23:76:32:bd:7d:b9:4a:2f:c4:fc:
                    27:66:34:f5:54:db:c2:09:5b:6b:80:2b:35:2d:8d:
                    ff:54:49:a9:c0:3e:15:eb:89:9f:de:1a:c6:e8:25:
                    a5:30:60:58:02:97:9a:ef:0f:0f:bb:a1:89:e7:ea:
                    5e:78:1f:fa:1f:fb:bf:43:57:5f:77:56:ad:ea:68:
                    b2:1b:8f:f6:26:92:43:27:d9:c5:cc:7e:bc:26:46:
                    54:78:c3:b0:1d:df:b2:38:13:1e:34:b6:73:c5:5d:
                    c2:c5:c7:f3:ea:a0:86:31:12:24:ae:cc:78:06:e7:
                    3a:fc:41:f3:ef:b6:b4:fc:61:44:ad:12:be:fd:07:
                    21:36:76:0c:0d:f4:15:43:b9:b8:4b:46:35:48:d4:
                    27:4b:14:6e:47:30:37:0b:f6:78:bb:1a:52:03:62:
                    0f:9f:08:0b:e3:3c:12:80:0d:c3:70:06:79:0e:a8:
                    5b:30:e2:e2:20:2a:e8:5b:22:75:b0:6c:8f:df:2f:
                    c5:46:3f:3f:04:32:e0:c7:35:2b:95:c6:69:3d:7b:
                    7c:0a:44:6d:55:38:59:d5:1a:1e:54:85:a6:45:2e:
                    17:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:E0:C9:D2:69:A4:82:CC:2E:1E:29:DA:41:41:19:69:0E:0F:1F:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/888ee824-8672-3b73-977c-adf62630d235.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl

            X509v3 Authority Key Identifier:
                keyid:91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:8900:f000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:58:93:57:24:cb:f3:c9:c5:a9:15:e9:4f:ed:28:9f:43:16:
         bc:23:06:af:a1:62:12:f0:7e:39:9c:b7:55:93:9a:10:ee:98:
         c9:ba:fc:82:16:f1:c7:81:d0:ad:ac:73:9f:43:91:4b:97:e5:
         f2:25:34:57:62:15:9d:2d:c1:1e:e4:fa:3f:12:18:38:5f:78:
         93:32:d6:c1:0a:bd:ce:44:35:30:7b:1a:1f:6a:b4:67:68:d7:
         1b:af:de:4f:65:9d:8f:31:3a:c1:06:01:67:7f:42:b1:7a:5c:
         bf:87:24:1e:84:2b:ab:45:bd:56:7b:f6:60:2c:e4:28:8b:0e:
         97:e8:df:0d:ab:12:1e:01:6e:2b:9c:8b:43:3f:ec:4a:9b:97:
         06:27:a8:91:76:c8:de:f6:3c:3c:ad:ee:a5:0f:34:63:a8:6d:
         c3:91:d9:51:1b:c7:e7:af:24:f0:39:0e:82:42:e8:b4:3e:6e:
         93:1a:bd:ac:06:29:ba:ec:c9:1b:f4:18:6f:50:14:e0:ba:16:
         a9:a3:9f:1c:af:af:a3:ea:ea:d7:ba:c7:4c:a1:13:49:2b:e9:
         61:55:38:65:bc:b0:69:d0:b2:73:46:92:e4:2b:13:f8:5e:b7:
         39:41:c3:c3:ee:0e:da:57:e9:12:87:d2:d5:a9:7d:84:70:9d:
         d4:60:a1:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:06:59 2024 by rpki-client on console-ams.rpki-client.org