Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ef04fbb-44d8-4d48-8d23-e4b20831a0ec/3054e161-067e-3d75-9c80-741ae64f0f71.roa
File:                     3054e161-067e-3d75-9c80-741ae64f0f71.roa (raw, json)
Hash identifier:          D54FLhEOOoWpONgYHeKmA8vFWQGGr5HIpRPRfWAPX7g=
Subject key identifier:   CC:56:3D:A5:55:1E:5D:D9:66:DB:BF:EE:41:51:B3:C1:86:24:1B:8D
Certificate issuer:       /CN=4ef04fbb-44d8-4d48-8d23-e4b20831a0ec
Certificate serial:       010D0C9F4328584728CD3F898E01FD8732A167C0
Authority key identifier: 12:2D:44:D1:92:67:81:58:AB:13:64:E2:9E:CF:E4:76:BB:52:1C:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ef04fbb-44d8-4d48-8d23-e4b20831a0ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ef04fbb-44d8-4d48-8d23-e4b20831a0ec/3054e161-067e-3d75-9c80-741ae64f0f71.roa
Signing time:             Mon 09 Sep 2024 18:05:50 +0000
ROA not before:           Mon 09 Sep 2024 18:05:50 +0000
ROA not after:            Sun 08 Dec 2024 19:05:50 +0000
asID:                     46641
IP address blocks:        2620:13:6000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ef04fbb-44d8-4d48-8d23-e4b20831a0ec/4ef04fbb-44d8-4d48-8d23-e4b20831a0ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ef04fbb-44d8-4d48-8d23-e4b20831a0ec/4ef04fbb-44d8-4d48-8d23-e4b20831a0ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ef04fbb-44d8-4d48-8d23-e4b20831a0ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:28:cd:3f:89:8e:01:fd:87:32:a1:67:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ef04fbb-44d8-4d48-8d23-e4b20831a0ec
        Validity
            Not Before: Sep  9 18:05:50 2024 GMT
            Not After : Dec  8 19:05:50 2024 GMT
        Subject: CN=b1a100fc-ccdc-49f6-8840-b087759b1115
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:a7:79:99:dd:64:af:3f:f9:55:3c:29:b6:42:
                    e1:d5:07:c6:aa:35:f0:70:f9:6e:19:b5:90:88:0c:
                    0e:07:f4:95:e7:b1:26:19:55:b0:c2:ac:b1:b9:1b:
                    55:76:e1:9e:f8:3e:5e:a8:7e:79:38:bc:6b:c6:42:
                    87:a3:a6:2e:5c:b9:89:8a:f8:e9:1a:ed:89:b9:61:
                    bb:61:8d:4e:79:1a:20:e5:ed:a5:c2:7e:fe:71:23:
                    d9:e0:a4:3f:48:e5:66:7f:6c:5a:9b:f0:34:8e:e4:
                    2b:13:46:5d:a9:a3:38:73:49:c6:1d:a2:10:fd:50:
                    7b:48:ea:4c:c7:02:60:de:69:3e:1c:61:ea:eb:dc:
                    b5:17:d8:6c:fd:e8:a1:9e:a7:71:77:9c:40:9d:a1:
                    fd:d5:c8:77:db:9d:d3:6e:8c:18:de:4c:35:43:64:
                    25:5b:1e:6b:5f:d4:e7:5d:92:26:11:20:74:95:d6:
                    61:27:ba:cd:93:41:e9:66:83:b4:f1:23:5e:f7:a1:
                    74:43:00:75:ac:07:10:1d:03:37:52:22:0f:a9:2e:
                    5b:3a:77:29:c8:f4:29:a7:f0:fb:7c:a8:0c:41:2b:
                    f3:5c:85:a7:1a:f9:6c:4d:e2:fd:17:20:49:99:3c:
                    43:a5:be:46:dd:d7:be:67:b6:ba:9d:5e:51:49:31:
                    d7:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:56:3D:A5:55:1E:5D:D9:66:DB:BF:EE:41:51:B3:C1:86:24:1B:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ef04fbb-44d8-4d48-8d23-e4b20831a0ec/3054e161-067e-3d75-9c80-741ae64f0f71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ef04fbb-44d8-4d48-8d23-e4b20831a0ec/4ef04fbb-44d8-4d48-8d23-e4b20831a0ec.crl

            X509v3 Authority Key Identifier:
                keyid:12:2D:44:D1:92:67:81:58:AB:13:64:E2:9E:CF:E4:76:BB:52:1C:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ef04fbb-44d8-4d48-8d23-e4b20831a0ec.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:13:6000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:a1:61:14:62:6f:4e:50:0f:d4:58:0a:4d:9a:4e:12:f6:20:
         90:f4:2c:15:94:77:65:7d:56:cd:45:a2:83:2d:26:e7:eb:f2:
         ae:16:db:c2:63:37:03:93:2b:fd:c9:59:39:8b:f7:81:49:a2:
         88:e6:38:52:81:93:d5:8b:11:62:34:02:4e:c1:ab:eb:3f:ee:
         37:c1:15:d1:58:f5:be:8b:7b:ca:5f:6b:a7:10:e5:64:61:5b:
         9c:9c:d8:ea:ce:77:83:23:db:81:02:5d:58:0c:8f:e4:e5:c8:
         71:e0:f8:08:a5:cd:4b:d7:84:a5:02:48:37:0c:89:8a:c2:65:
         28:00:19:75:66:a0:38:3a:36:9e:be:62:5c:4b:79:b3:4a:37:
         14:50:49:a1:0a:4c:e3:12:d8:6f:1f:76:37:7e:2c:d5:78:4a:
         aa:19:4a:79:34:1f:90:5a:20:b1:b0:46:9b:1e:93:a3:01:77:
         07:a4:21:2c:9c:e1:8e:56:d5:65:38:0f:17:00:89:c5:01:84:
         80:2b:7c:2c:4a:00:51:b0:0a:ec:1d:02:73:97:65:d6:50:f3:
         fe:c7:f0:b8:30:e2:b9:fc:9a:92:51:78:d1:a8:d5:0f:89:54:
         39:17:6b:13:c0:30:b5:5d:95:82:cd:05:30:8d:b9:0c:cb:da:
         a2:9c:b5:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:55:31 2024 by rpki-client on console-ams.rpki-client.org