Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/0d2d7fe3-bd63-31fa-8abe-c35f9dc6cd20.roa
File:                     0d2d7fe3-bd63-31fa-8abe-c35f9dc6cd20.roa (raw, json)
Hash identifier:          aqxQSgqvmWRINmZe1vl/RrTq7WiAJLBfZUi8EE0p+Ko=
Subject key identifier:   6C:60:62:EE:43:9A:A5:78:B1:F1:B0:57:64:45:9C:D4:47:CF:22:63
Certificate issuer:       /CN=c86a7ba5-67c5-481d-b278-0b265dc97144
Certificate serial:       010D0C9F432858478A3724D410436D8C444A5A00
Authority key identifier: 69:92:8D:83:C4:F4:B4:92:18:C1:FE:F0:78:A4:3C:F7:1D:D0:2B:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/0d2d7fe3-bd63-31fa-8abe-c35f9dc6cd20.roa
Signing time:             Mon 14 Oct 2024 15:32:37 +0000
ROA not before:           Mon 14 Oct 2024 15:32:37 +0000
ROA not after:            Sun 12 Jan 2025 16:32:37 +0000
asID:                     8075
IP address blocks:        2620:7d:f::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/c86a7ba5-67c5-481d-b278-0b265dc97144.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/c86a7ba5-67c5-481d-b278-0b265dc97144.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8a:37:24:d4:10:43:6d:8c:44:4a:5a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c86a7ba5-67c5-481d-b278-0b265dc97144
        Validity
            Not Before: Oct 14 15:32:37 2024 GMT
            Not After : Jan 12 16:32:37 2025 GMT
        Subject: CN=87937e88-a182-4faa-828c-8102e08cdf63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f8:0a:7e:61:f6:9d:6d:5a:a3:d0:74:c6:98:
                    88:6d:51:4f:89:47:8c:41:22:f7:07:07:50:47:bf:
                    10:a7:18:2e:f1:32:35:c4:2c:b1:e5:49:43:11:22:
                    90:6a:12:27:74:38:4e:10:60:74:f7:08:8b:fe:19:
                    62:7b:e2:90:77:cb:c4:1b:2d:6c:be:0a:93:69:df:
                    d1:57:5d:b2:81:e9:48:1a:c3:7f:0c:d0:fd:3f:26:
                    5f:9b:f7:3d:72:0f:56:78:4a:e3:0c:81:bc:f7:9a:
                    ec:83:5d:63:09:0a:88:e4:37:ca:c9:72:e0:aa:4c:
                    58:90:be:64:0e:2f:d3:f5:a9:60:8a:6e:d5:58:05:
                    31:ec:69:27:39:36:a6:8b:02:e0:a1:7f:7b:b3:68:
                    76:e7:e5:fc:6f:4b:7f:88:d4:6a:7a:6c:39:10:c0:
                    53:f3:c1:80:5f:fd:92:96:4c:4a:37:51:be:0e:c1:
                    02:a0:75:c4:81:10:2e:be:f8:a8:03:58:5b:68:6e:
                    b6:78:cf:30:e1:0c:15:40:7a:46:ae:92:90:98:28:
                    00:22:89:07:70:71:07:6d:f1:0f:dc:a4:65:f7:92:
                    b6:7e:ba:80:3c:19:24:38:74:91:87:24:51:89:42:
                    b2:f9:6e:66:5a:ed:b8:97:b0:52:f2:96:53:b5:4f:
                    ee:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:60:62:EE:43:9A:A5:78:B1:F1:B0:57:64:45:9C:D4:47:CF:22:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/0d2d7fe3-bd63-31fa-8abe-c35f9dc6cd20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/c86a7ba5-67c5-481d-b278-0b265dc97144.crl

            X509v3 Authority Key Identifier:
                keyid:69:92:8D:83:C4:F4:B4:92:18:C1:FE:F0:78:A4:3C:F7:1D:D0:2B:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:7d:f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:3d:d2:3f:8e:67:4c:4d:3d:2a:49:b7:b6:2d:c4:28:8f:62:
         0e:45:1d:86:02:df:ab:71:f2:0d:51:2a:d4:cf:3c:bd:4b:f0:
         95:65:3c:36:76:f5:2d:cc:76:b9:5b:9f:81:30:63:c9:f3:b3:
         25:39:c2:b1:ef:ae:53:aa:4f:27:52:49:3c:ff:bd:7e:74:2e:
         3d:84:4e:be:1f:fb:3a:e1:cb:aa:f6:ba:f7:7f:48:c6:62:cf:
         b1:80:fc:45:88:61:c4:5b:b6:61:ac:b4:e4:e2:45:b0:79:6e:
         18:87:cd:18:df:9f:55:df:28:53:4b:d1:6b:5b:4a:36:f5:01:
         9c:86:46:15:1d:22:44:77:fe:11:63:da:06:0c:cd:5d:81:20:
         b8:7e:73:1f:67:bf:b2:8c:3d:d9:b6:bc:bb:3b:4a:fe:6f:f3:
         71:dc:66:65:4a:83:fb:81:d4:41:59:54:eb:77:45:fa:27:40:
         41:a2:1d:36:51:52:00:f3:9c:eb:1a:60:6a:91:81:64:09:ad:
         10:cf:66:3e:d9:f1:a3:01:7d:ed:37:7a:72:c1:20:21:39:e2:
         c8:31:fb:9c:e0:93:1e:c4:2d:d7:79:3b:0a:00:d5:55:d5:bc:
         7f:d6:e9:a7:cf:51:20:53:6b:93:fe:58:fb:97:e0:06:d9:d1:
         83:cb:b9:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:20 2024 by rpki-client on console-ams.rpki-client.org