Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7981ca6b-952a-4908-a513-7b300be24271/f1b827ee-8ce2-367f-b286-128f6cdc4b98.roa
File:                     f1b827ee-8ce2-367f-b286-128f6cdc4b98.roa (raw, json)
Hash identifier:          5O3fgBKj8U8YJxleBKD3WHFHz09AHpbsQyc96a+7S8g=
Subject key identifier:   21:34:ED:5B:A6:78:A2:A9:50:14:EF:87:90:95:8F:CB:3F:5B:34:A2
Certificate issuer:       /CN=7981ca6b-952a-4908-a513-7b300be24271
Certificate serial:       010D0C9F43285847213B1E791C12406117314F00
Authority key identifier: 89:36:30:76:DB:B9:65:1A:6F:C1:5F:84:DD:9D:29:7C:7A:0D:D4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7981ca6b-952a-4908-a513-7b300be24271.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7981ca6b-952a-4908-a513-7b300be24271/f1b827ee-8ce2-367f-b286-128f6cdc4b98.roa
Signing time:             Sat 07 Sep 2024 01:00:31 +0000
ROA not before:           Sat 07 Sep 2024 01:00:31 +0000
ROA not after:            Fri 06 Dec 2024 02:00:31 +0000
asID:                     396950
IP address blocks:        2620:139:7000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7981ca6b-952a-4908-a513-7b300be24271/7981ca6b-952a-4908-a513-7b300be24271.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7981ca6b-952a-4908-a513-7b300be24271/7981ca6b-952a-4908-a513-7b300be24271.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7981ca6b-952a-4908-a513-7b300be24271.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:21:3b:1e:79:1c:12:40:61:17:31:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7981ca6b-952a-4908-a513-7b300be24271
        Validity
            Not Before: Sep  7 01:00:31 2024 GMT
            Not After : Dec  6 02:00:31 2024 GMT
        Subject: CN=00096134-e6fe-457b-b261-736546e752e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ec:09:7e:ba:46:8b:cb:ce:cf:bd:f6:2d:6b:
                    d9:4b:01:3b:f3:b5:52:c6:80:43:69:dc:86:78:9f:
                    39:69:55:b8:28:74:fc:d9:94:04:93:f9:59:ed:4e:
                    1c:3d:ef:c7:e9:ff:54:e2:42:50:92:00:da:ad:ca:
                    c8:c1:a8:a1:1c:ad:f6:69:45:de:af:bb:fa:64:e1:
                    76:89:8a:30:13:43:0a:18:6a:4a:61:35:a4:c6:5b:
                    00:f8:a5:36:9b:ff:b7:6e:1b:a4:0d:b1:73:59:90:
                    d9:ed:19:bd:23:fe:96:c7:56:e9:46:57:c4:20:bc:
                    68:7f:3d:da:57:07:04:b0:98:6a:a4:30:7f:09:42:
                    e3:b8:ed:6d:f5:6b:39:3b:fd:79:d8:1e:d4:5f:b1:
                    6f:da:b5:2e:72:d4:e3:6d:78:24:d8:83:24:72:f7:
                    90:96:6a:07:93:d3:e1:60:8e:d8:c9:2e:bd:b6:0c:
                    7f:f8:e3:98:16:3c:89:83:14:01:fc:a4:5d:6d:b6:
                    47:3c:30:02:af:2c:32:9b:c7:ba:47:03:d1:30:e5:
                    07:36:83:1d:0f:ce:64:85:04:73:d9:6d:d8:31:eb:
                    a8:6c:76:4c:f2:86:9c:98:dc:96:d2:ee:e4:44:b5:
                    99:03:f8:4f:e8:2d:57:17:51:24:0b:e7:66:16:2c:
                    fb:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:34:ED:5B:A6:78:A2:A9:50:14:EF:87:90:95:8F:CB:3F:5B:34:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7981ca6b-952a-4908-a513-7b300be24271/f1b827ee-8ce2-367f-b286-128f6cdc4b98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7981ca6b-952a-4908-a513-7b300be24271/7981ca6b-952a-4908-a513-7b300be24271.crl

            X509v3 Authority Key Identifier:
                keyid:89:36:30:76:DB:B9:65:1A:6F:C1:5F:84:DD:9D:29:7C:7A:0D:D4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7981ca6b-952a-4908-a513-7b300be24271.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:139:7000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:61:7c:ea:49:42:fe:e3:14:26:c4:bc:03:2f:8d:04:4e:46:
         60:35:23:06:f2:2b:3d:04:12:fd:b1:cb:6e:62:61:e0:cf:65:
         ce:a0:a0:4f:d0:a7:45:2e:30:62:0e:42:37:96:4a:e5:8d:c6:
         7c:d7:15:ee:9c:eb:73:19:92:0b:d8:d6:56:11:c5:a4:7c:32:
         a4:bc:72:f1:be:26:b1:d7:6d:27:05:f7:c4:de:fc:5c:bf:fe:
         1f:72:bd:cf:fb:3c:ce:04:e7:3a:ca:20:28:b8:37:5b:5b:d1:
         bf:f8:21:bd:23:89:5d:b0:96:a3:00:71:4e:b3:38:a2:f6:ec:
         b1:7a:f2:fc:dd:df:e9:b4:6e:9d:3f:ad:db:e3:e0:ea:ce:25:
         34:d5:93:04:6f:56:11:50:5a:dc:e2:9e:70:a1:a2:0e:66:1d:
         6a:2c:bc:24:34:7e:6d:11:2c:6e:f2:d2:6e:4f:56:3b:d6:16:
         a2:69:31:1f:eb:aa:fe:13:29:b1:c3:a2:1d:54:0e:1b:2c:03:
         3c:5c:d4:25:57:cc:fa:14:f4:b1:35:1c:76:8b:11:c5:d5:9f:
         ec:12:36:b9:49:18:c3:d6:f1:51:f9:6a:9d:63:fe:36:7a:7e:
         23:a7:d7:93:39:69:bc:ce:53:ce:8e:75:4b:7c:e7:a0:3d:30:
         8a:f9:16:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:20:03 2024 by rpki-client on console-fra.rpki-client.org