Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8dc688c8-d263-3e7b-be29-d4ff4f73d1b2.roa
File:                     8dc688c8-d263-3e7b-be29-d4ff4f73d1b2.roa (raw, json)
Hash identifier:          1Zhh2qacAjfv+zVPepYL0ECQHVM42BuMMj3giFsVIFI=
Subject key identifier:   CE:13:05:56:63:E8:E0:5E:DD:0C:40:1C:ED:61:16:C9:EB:DB:84:38
Certificate issuer:       /CN=8e2da239-793e-4082-afde-6458f2319e7e
Certificate serial:       010D0C9F43285847A30BED042C2AC18FCAE5B600
Authority key identifier: B6:1E:B0:C8:29:6F:59:D0:64:2B:44:2F:41:AC:38:58:E0:07:01:E8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8dc688c8-d263-3e7b-be29-d4ff4f73d1b2.roa
Signing time:             Wed 23 Oct 2024 13:00:41 +0000
ROA not before:           Wed 23 Oct 2024 13:00:41 +0000
ROA not after:            Tue 21 Jan 2025 14:00:41 +0000
asID:                     3755
IP address blocks:        2620:f:2::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8e2da239-793e-4082-afde-6458f2319e7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8e2da239-793e-4082-afde-6458f2319e7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a3:0b:ed:04:2c:2a:c1:8f:ca:e5:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e2da239-793e-4082-afde-6458f2319e7e
        Validity
            Not Before: Oct 23 13:00:41 2024 GMT
            Not After : Jan 21 14:00:41 2025 GMT
        Subject: CN=ffa02477-a769-4d73-ab54-9f1ae6f6194b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:99:31:91:1c:9a:10:65:7d:9d:3f:b6:a4:d0:
                    2c:10:9c:22:7b:a9:73:23:a5:10:13:51:18:69:a4:
                    42:a7:7d:f6:38:4e:4d:57:45:a3:a7:f1:6e:67:c9:
                    2e:09:ba:b3:1f:50:a1:3f:e8:6c:79:3e:59:f3:da:
                    ff:ef:09:49:1b:8c:a3:41:c4:32:83:a4:b3:82:c6:
                    e9:b4:bc:b8:25:8e:3c:44:55:fa:76:56:6e:1c:27:
                    f2:bf:d8:02:bd:fd:60:58:e5:8c:ff:bc:64:17:14:
                    a6:6c:3e:2d:8a:a2:b8:71:c0:0f:fd:00:7d:4e:6b:
                    ac:3a:26:03:86:31:4d:d8:28:5f:75:8b:19:b8:a7:
                    4f:e4:ea:b9:90:e7:ee:d6:ed:98:eb:1b:81:f4:9d:
                    66:7f:ea:20:67:24:a7:ef:d9:bb:2a:da:6c:5d:94:
                    da:23:57:82:f3:72:e1:4b:91:4b:d8:e2:f7:fb:79:
                    a4:76:d7:8a:c5:2b:48:9d:da:69:aa:1b:4c:66:76:
                    7a:f3:67:9d:da:72:58:1d:47:e1:25:35:45:6d:fd:
                    3a:e2:18:b8:60:a4:5b:03:47:a0:d7:75:ef:05:73:
                    ca:e0:91:07:b5:6a:a3:69:be:0e:68:f8:ef:5e:b8:
                    fc:d6:26:89:97:b2:98:af:39:2d:56:43:3f:8d:28:
                    c3:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:13:05:56:63:E8:E0:5E:DD:0C:40:1C:ED:61:16:C9:EB:DB:84:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8dc688c8-d263-3e7b-be29-d4ff4f73d1b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8e2da239-793e-4082-afde-6458f2319e7e.crl

            X509v3 Authority Key Identifier:
                keyid:B6:1E:B0:C8:29:6F:59:D0:64:2B:44:2F:41:AC:38:58:E0:07:01:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:f:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:bb:13:13:ba:04:d7:62:99:d5:ee:ba:ce:c5:d0:0c:63:8d:
         4a:33:c2:cf:11:7f:df:6e:95:2d:c4:06:f8:94:bc:df:61:2c:
         68:a9:1a:63:1e:81:4b:3e:22:eb:0b:69:d3:29:26:31:88:b7:
         8f:ad:2e:34:0f:d2:26:fd:b0:2f:0a:4d:76:90:e0:13:ab:0c:
         aa:e6:2f:10:b3:da:c2:be:34:49:73:d6:dc:f9:1c:c1:3c:6e:
         93:30:aa:61:a2:3a:75:f5:d1:e4:16:0a:21:7b:82:24:cf:9a:
         3e:d5:72:17:1a:e6:9d:73:cb:1b:04:20:85:76:51:de:b7:c4:
         0e:06:e8:71:dd:45:6b:07:5c:b3:c8:d5:80:6a:27:c9:d2:6a:
         39:dc:45:36:7c:b3:d8:65:80:d5:82:ad:b3:48:78:56:32:6c:
         7b:e5:75:df:67:da:80:98:b7:f3:23:44:02:15:78:9f:d2:00:
         9b:ea:5c:b2:fa:e0:9e:79:b8:e5:ee:00:d6:18:a5:d3:e0:84:
         7c:7d:a9:0d:9e:36:d8:19:ea:a7:e7:30:2a:9e:e9:08:39:f2:
         59:35:2d:61:dc:8b:fe:d2:0a:cf:64:cc:a3:92:36:64:bf:28:
         a8:6f:df:d7:36:3a:79:52:a0:8d:aa:81:d1:39:d0:b6:1d:b8:
         b9:ca:00:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:08 2024 by rpki-client on console-fra.rpki-client.org