Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9/89fa7171-bce0-3688-ab6e-27f3cac68965.roa
File:                     89fa7171-bce0-3688-ab6e-27f3cac68965.roa (raw, json)
Hash identifier:          PG3XHVK2GFs/4DZUZZD3+CdTUypPpC8hYlIzu7jOAsY=
Subject key identifier:   6E:AC:E6:0E:7F:37:BB:2E:EE:2C:A3:09:23:0F:5E:6C:E0:77:F4:C6
Certificate issuer:       /CN=aa363d52-209b-47ac-aa24-f8c86d11fcb9
Certificate serial:       010D0C9F432858478CB67F43A55598AF3913C080
Authority key identifier: F2:BC:8C:E9:CC:0C:09:4F:50:2B:F4:AA:DE:CF:CE:3D:BA:40:58:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9/89fa7171-bce0-3688-ab6e-27f3cac68965.roa
Signing time:             Tue 15 Oct 2024 13:00:47 +0000
ROA not before:           Tue 15 Oct 2024 13:00:47 +0000
ROA not after:            Mon 13 Jan 2025 14:00:47 +0000
asID:                     12243
IP address blocks:        2606:1040::/32 maxlen: 32
                          2620:11f:e000::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9/aa363d52-209b-47ac-aa24-f8c86d11fcb9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9/aa363d52-209b-47ac-aa24-f8c86d11fcb9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8c:b6:7f:43:a5:55:98:af:39:13:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa363d52-209b-47ac-aa24-f8c86d11fcb9
        Validity
            Not Before: Oct 15 13:00:47 2024 GMT
            Not After : Jan 13 14:00:47 2025 GMT
        Subject: CN=50fd50fb-ea00-4531-a3ca-94882b433ba6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:2f:fd:99:8b:61:ce:45:f7:25:0c:98:b9:4f:
                    b2:28:6c:95:09:50:c1:cd:fd:5b:8d:b5:e4:0c:ef:
                    21:07:99:5f:f0:d0:86:b0:63:04:e2:71:3b:30:b6:
                    ad:bd:2d:33:cd:2b:c0:65:9b:90:d1:7e:ea:74:c0:
                    57:bd:6d:d9:ab:8c:c1:09:1e:63:60:3f:24:46:5a:
                    80:64:81:53:91:0e:b3:bf:44:f1:ff:50:79:ee:a0:
                    d5:bb:11:ff:b5:b0:87:ef:74:77:0a:76:c8:96:1a:
                    9c:d3:38:2f:92:29:9f:26:33:3e:79:a8:4a:1b:3b:
                    af:5c:6f:4c:74:3f:85:81:a0:28:53:69:8a:55:2f:
                    c2:8f:9b:d6:72:fb:32:5f:f1:2b:28:5e:ba:63:18:
                    7e:e2:e3:ab:d5:df:a8:94:2c:5f:68:69:bc:10:57:
                    55:98:0b:d2:cb:65:e1:2b:69:38:be:c4:0e:f7:b9:
                    e0:ad:ac:ce:5a:60:b5:cb:b3:ce:59:94:11:c5:da:
                    6a:96:25:29:35:e3:52:b9:52:db:70:7a:19:05:12:
                    9f:8b:52:3c:6b:a7:51:c0:a6:19:60:5b:f2:22:0f:
                    77:07:7c:b4:e9:4c:72:e4:c7:07:a6:99:9f:08:a7:
                    45:54:f3:da:19:4e:e7:a4:1c:a5:22:e7:99:5c:70:
                    30:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:AC:E6:0E:7F:37:BB:2E:EE:2C:A3:09:23:0F:5E:6C:E0:77:F4:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9/89fa7171-bce0-3688-ab6e-27f3cac68965.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9/aa363d52-209b-47ac-aa24-f8c86d11fcb9.crl

            X509v3 Authority Key Identifier:
                keyid:F2:BC:8C:E9:CC:0C:09:4F:50:2B:F4:AA:DE:CF:CE:3D:BA:40:58:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:1040::/32
                  2620:11f:e000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:c3:87:a3:e9:23:cc:7e:24:bf:a6:e8:f1:0f:40:83:59:3d:
         d0:1f:13:ac:72:bd:a4:d5:ce:3c:a7:89:65:10:6f:11:67:18:
         b6:82:03:0a:e4:77:c9:84:0c:9b:62:aa:8f:7f:01:20:5b:43:
         3d:18:bc:48:57:b2:25:31:c1:91:7b:74:6f:2e:75:60:ed:7e:
         c9:3d:b7:23:90:5e:9e:cc:ff:00:3d:38:c4:52:b1:db:b5:37:
         0d:76:eb:82:01:fb:4f:14:71:8d:7c:38:43:c1:30:2c:0d:4b:
         74:c6:c4:16:e6:ed:ca:08:ad:81:03:e4:38:9a:18:8d:63:08:
         e6:44:55:51:0d:2e:02:ea:57:d3:1f:8c:cf:a8:f4:80:2d:bf:
         f2:f7:e3:05:89:d3:a3:7d:7b:3b:6e:36:c0:fb:a2:9c:22:2b:
         b8:1e:47:d2:00:c2:c5:a6:60:1a:c1:53:7f:85:e8:85:af:0c:
         de:69:96:85:6c:0b:90:ef:78:0d:c1:de:e3:f8:78:ee:04:70:
         88:3b:e6:fb:fc:20:8e:b0:b4:e2:eb:3a:12:b5:47:d9:70:9b:
         83:94:68:ba:3a:9c:b6:08:8d:83:e1:90:09:6d:ba:b0:13:db:
         8b:42:14:e3:4e:63:04:da:3a:48:4b:03:3c:ac:52:7d:7a:d1:
         e1:9d:d6:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:19 2024 by rpki-client on console-ams.rpki-client.org