Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/26a18a22-3b6a-36ee-bd03-21bd34dc8972.roa
File:                     26a18a22-3b6a-36ee-bd03-21bd34dc8972.roa (raw, json)
Hash identifier:          a1YY5toOMnqJ/3tkMfk9BPwojZ9SQbVJBZUx+pktWRc=
Subject key identifier:   5A:EF:8E:93:99:10:5C:1C:4F:69:A7:33:9B:79:C1:2F:CE:FD:7C:A0
Certificate issuer:       /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Certificate serial:       010D0C9F432858473D25FA7342AB2EBFC8B17100
Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/26a18a22-3b6a-36ee-bd03-21bd34dc8972.roa
Signing time:             Tue 17 Sep 2024 01:00:31 +0000
ROA not before:           Tue 17 Sep 2024 01:00:31 +0000
ROA not after:            Mon 16 Dec 2024 02:00:31 +0000
asID:                     13778
IP address blocks:        2620:147::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3d:25:fa:73:42:ab:2e:bf:c8:b1:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
        Validity
            Not Before: Sep 17 01:00:31 2024 GMT
            Not After : Dec 16 02:00:31 2024 GMT
        Subject: CN=5e481d0f-58aa-4408-8d23-0ca2977eedce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d4:03:47:52:7d:8f:be:4b:d5:c3:73:63:9b:
                    da:5f:0c:96:0b:8a:33:29:92:0f:67:6c:3b:5b:ed:
                    2a:05:3a:0c:95:8e:94:ef:c6:70:f9:a3:75:fb:f5:
                    c8:d7:59:15:41:7c:8d:91:d7:91:59:77:b2:21:a4:
                    a1:40:f7:08:db:1b:ca:d6:52:ff:0a:c2:45:ac:17:
                    4f:79:07:ab:ff:b5:78:8d:b9:09:f4:10:13:3e:81:
                    29:95:dc:0e:2e:77:be:ff:21:f6:eb:36:d7:1d:ff:
                    33:6a:e7:f2:42:9c:b9:92:5d:7a:73:d0:11:79:94:
                    ef:ec:2b:e0:94:60:ce:a4:9f:4a:db:a2:29:a2:ea:
                    20:3e:26:d7:7e:9c:93:7d:14:40:87:66:a9:c5:9f:
                    9b:43:70:1c:be:8c:b8:c8:00:dd:84:91:c0:d8:3a:
                    1d:0e:a0:ab:1d:1f:79:9d:9d:4d:a9:7e:62:28:12:
                    ee:ad:79:88:5e:be:2c:81:ad:b9:10:73:92:93:82:
                    79:60:7a:46:56:3d:1c:94:87:20:25:79:67:e3:bc:
                    d5:38:3b:8b:59:6a:2a:41:ff:1d:a2:f1:f7:42:6f:
                    bb:67:cc:a4:f6:df:55:15:74:75:ef:5c:9c:32:44:
                    f5:c3:7b:31:47:a6:de:f9:e6:89:ac:48:86:2d:c7:
                    9d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:EF:8E:93:99:10:5C:1C:4F:69:A7:33:9B:79:C1:2F:CE:FD:7C:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/26a18a22-3b6a-36ee-bd03-21bd34dc8972.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl

            X509v3 Authority Key Identifier:
                keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:147::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:0e:c1:38:84:db:a0:b0:ab:49:5c:68:41:83:bf:30:bc:2f:
         13:d1:2c:4d:28:b3:3f:bd:2d:80:ed:da:5e:8f:84:e6:fd:87:
         30:9a:d1:21:61:45:ac:79:e4:68:ed:e9:ff:b0:7e:db:4e:6b:
         37:f6:8d:6b:e7:b4:d3:c1:10:da:27:aa:d9:7f:4b:d2:33:8e:
         fc:a3:1f:5e:c3:4a:c2:bc:b6:e0:4d:5b:e1:15:55:ff:c5:94:
         45:5c:32:39:40:28:fb:c0:ab:e4:b1:75:2e:a2:01:79:ab:c0:
         61:45:d2:58:63:22:fb:fb:3b:ed:6f:f6:93:f6:e8:1a:67:19:
         8e:70:12:33:dd:0c:87:4a:f4:22:0a:72:ce:2b:52:52:08:ef:
         61:18:5e:2b:fe:b3:c3:a3:6d:47:cc:83:bf:3b:b6:5c:f5:0b:
         8f:35:92:51:11:9a:c7:66:11:c9:8b:9b:12:6e:36:d5:7f:b6:
         70:e0:41:80:52:ce:0f:d2:26:ae:18:57:b2:37:a0:57:d8:14:
         d8:34:24:34:a0:c4:5d:cd:f7:97:5d:12:c5:e3:09:f0:56:af:
         8d:e3:7a:b1:31:74:ce:68:07:5f:c6:f6:05:30:1a:34:71:72:
         7a:5f:90:ed:42:9d:75:6f:33:b3:a6:7c:2a:37:c9:17:f0:69:
         b5:ea:b0:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:13 2024 by rpki-client on console-ams.rpki-client.org