Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/12797d33-d775-45fc-9d2a-a3e7bbe51152/5d993454-0791-3f69-942d-d641d50ae8c7.roa
File:                     5d993454-0791-3f69-942d-d641d50ae8c7.roa (raw, json)
Hash identifier:          zQrqg1nGSzkRjmcPhdQQkgeMCe/FnCd26IogifABwZc=
Subject key identifier:   D7:6A:FB:57:54:23:9A:CB:3A:1C:87:AF:FE:A8:7C:5F:A4:C2:CF:0E
Certificate issuer:       /CN=12797d33-d775-45fc-9d2a-a3e7bbe51152
Certificate serial:       010D0C9F432858478F812EB1B8B9746323A57680
Authority key identifier: 9E:FA:EF:7E:45:43:9E:B6:9C:B0:84:8E:C2:07:C7:A4:26:5B:71:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/12797d33-d775-45fc-9d2a-a3e7bbe51152.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/12797d33-d775-45fc-9d2a-a3e7bbe51152/5d993454-0791-3f69-942d-d641d50ae8c7.roa
Signing time:             Wed 16 Oct 2024 13:00:43 +0000
ROA not before:           Wed 16 Oct 2024 13:00:43 +0000
ROA not after:            Tue 14 Jan 2025 14:00:43 +0000
asID:                     17
IP address blocks:        2001:18e8:800::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/12797d33-d775-45fc-9d2a-a3e7bbe51152/12797d33-d775-45fc-9d2a-a3e7bbe51152.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/12797d33-d775-45fc-9d2a-a3e7bbe51152/12797d33-d775-45fc-9d2a-a3e7bbe51152.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/12797d33-d775-45fc-9d2a-a3e7bbe51152.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8f:81:2e:b1:b8:b9:74:63:23:a5:76:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12797d33-d775-45fc-9d2a-a3e7bbe51152
        Validity
            Not Before: Oct 16 13:00:43 2024 GMT
            Not After : Jan 14 14:00:43 2025 GMT
        Subject: CN=28696981-1385-4a25-b665-6a0b70d51ade
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:2f:9a:5d:fc:17:32:d4:17:70:1e:6f:19:5e:
                    cb:8d:00:b7:9e:17:0c:01:d8:bc:3c:9c:ae:d8:bf:
                    7b:33:c0:1f:cf:dd:28:79:6b:21:e6:a5:f2:8a:67:
                    39:fa:49:c8:b4:7e:aa:ad:e7:72:78:93:bd:19:4d:
                    73:31:d9:43:3e:28:68:6d:f9:c3:e1:3a:cb:0f:b2:
                    f9:66:cf:d7:c5:b7:76:a3:a8:ad:0a:ad:9a:ee:c2:
                    89:10:31:e9:ed:b9:f8:1f:e2:8a:06:28:13:1f:5c:
                    fd:e1:fb:16:16:92:2d:18:d9:0b:91:f2:21:07:b0:
                    9e:ab:ed:fc:26:65:a3:61:d2:46:9a:eb:80:05:18:
                    c7:11:b6:2e:85:e0:68:85:11:83:2e:7f:72:fb:1b:
                    89:cf:fa:1b:68:62:8f:30:2d:e1:f2:8b:a3:0e:9d:
                    83:80:33:4e:16:f9:33:86:55:bb:02:4a:61:d2:e3:
                    93:ae:a6:5f:2a:cd:31:fc:52:d3:bb:ba:22:58:4d:
                    1a:cd:e0:7d:95:b5:42:cc:af:c2:3b:f0:41:66:d3:
                    88:21:09:63:d9:a9:09:b9:b4:24:e7:38:b4:98:1d:
                    23:8c:59:21:66:5e:46:07:90:a7:a0:9d:92:6c:e3:
                    2c:f6:b4:9a:c8:be:72:5a:5a:a9:02:fe:d9:ee:79:
                    76:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:6A:FB:57:54:23:9A:CB:3A:1C:87:AF:FE:A8:7C:5F:A4:C2:CF:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/12797d33-d775-45fc-9d2a-a3e7bbe51152/5d993454-0791-3f69-942d-d641d50ae8c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/12797d33-d775-45fc-9d2a-a3e7bbe51152/12797d33-d775-45fc-9d2a-a3e7bbe51152.crl

            X509v3 Authority Key Identifier:
                keyid:9E:FA:EF:7E:45:43:9E:B6:9C:B0:84:8E:C2:07:C7:A4:26:5B:71:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/12797d33-d775-45fc-9d2a-a3e7bbe51152.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:18e8:800::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:1c:a4:fa:63:09:98:c2:a4:86:39:94:1e:81:3b:b4:ab:e0:
         e7:71:fb:95:b5:b9:a2:32:c7:a2:9b:4b:71:9d:ac:19:5b:23:
         4b:be:5c:e7:24:d2:16:97:8d:b3:84:4f:61:a8:98:6d:ea:28:
         fa:43:58:dd:08:cf:d7:96:e7:38:75:88:2e:56:87:bb:11:78:
         de:ce:8f:7b:4b:d7:a1:74:07:12:64:1d:d0:8f:65:be:50:f6:
         54:f7:bb:45:c7:7f:83:23:37:bb:e0:d1:0a:aa:39:4c:6d:16:
         04:e8:01:94:e5:ad:13:90:f4:b4:06:48:21:06:09:f7:1c:b5:
         b7:51:e8:0c:61:ad:00:a4:6a:0f:ea:8d:a0:b7:09:fb:90:12:
         3b:30:ad:e4:6f:6e:ed:11:8c:cf:5a:d1:cc:79:11:76:3f:ac:
         65:24:76:6a:87:ed:01:cb:bc:89:06:af:48:c4:61:97:1d:cc:
         84:40:00:d3:41:f7:e3:cd:c7:e8:a7:8c:14:c1:99:ae:84:2a:
         fa:fa:2e:94:16:d1:88:b5:4b:7c:7c:b9:3a:a8:47:2a:bc:f8:
         04:f4:72:4b:b1:a5:a2:40:c0:bb:04:a4:2d:c3:b5:37:74:5f:
         74:2f:01:55:52:62:1e:2a:1b:96:cd:a1:1c:99:10:b5:5a:96:
         3c:ad:75:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:04:12 2024 by rpki-client on console-fra.rpki-client.org