Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3a696e09-7384-38e4-8936-c5171efb8159.roa
File:                     3a696e09-7384-38e4-8936-c5171efb8159.roa (raw, json)
Hash identifier:          WHpGnBHhKp2NbUjCJtlLfSXuROWz4l+EjRAbf8pA20A=
Subject key identifier:   24:54:26:C7:54:C0:3F:09:B6:B8:A9:7B:32:9A:68:A3:CE:AE:76:1D
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F432858475910C4CE13FB7C764B638700
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3a696e09-7384-38e4-8936-c5171efb8159.roa
Signing time:             Fri 27 Sep 2024 01:00:31 +0000
ROA not before:           Fri 27 Sep 2024 01:00:31 +0000
ROA not after:            Thu 26 Dec 2024 02:00:31 +0000
asID:                     1225
IP address blocks:        2001:418:1401:12::/64 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:59:10:c4:ce:13:fb:7c:76:4b:63:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Sep 27 01:00:31 2024 GMT
            Not After : Dec 26 02:00:31 2024 GMT
        Subject: CN=03a93975-5413-451a-82e9-abfca7b6c8c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:c7:79:3a:97:4e:8f:42:87:77:e8:9b:5a:5a:
                    9e:03:38:a5:9d:eb:8d:84:63:02:7c:6c:b3:60:38:
                    da:05:30:14:47:60:5b:43:90:e3:18:ae:fd:73:9e:
                    15:93:7d:43:2a:cf:1c:50:bf:c4:04:3d:7a:07:55:
                    46:5f:e5:26:14:3a:ff:0c:92:eb:c5:8d:c6:e9:73:
                    88:b4:72:e6:c7:73:d5:8a:31:4b:0e:9b:09:af:bd:
                    27:8d:e8:1b:66:24:55:e0:fb:0c:99:53:e3:1c:40:
                    7f:11:b9:be:ee:81:e5:65:75:9c:2a:89:f2:74:b5:
                    47:6d:53:66:c6:f5:30:41:85:80:66:db:9f:cc:e1:
                    3a:d6:03:55:5e:a8:7d:fd:65:f9:b7:a6:0f:8b:1c:
                    1c:db:41:82:f6:e4:ef:70:f7:4d:eb:06:1d:df:f8:
                    fb:3e:ad:38:12:c5:9d:24:19:5f:fa:2d:b6:d0:b8:
                    97:bc:6b:7f:af:76:cb:f5:39:29:24:76:e8:2a:aa:
                    8c:a3:ae:aa:19:bd:63:4c:89:7f:f7:45:f4:a5:3c:
                    29:88:7c:97:1e:38:02:19:4e:5f:6c:cc:7e:84:8d:
                    f5:20:1a:18:b5:89:80:ab:e0:3a:97:e8:3a:75:18:
                    e2:2c:ae:f8:55:82:8f:55:04:12:b3:a5:22:df:c9:
                    cc:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:54:26:C7:54:C0:3F:09:B6:B8:A9:7B:32:9A:68:A3:CE:AE:76:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3a696e09-7384-38e4-8936-c5171efb8159.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:418:1401:12::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:4f:ab:e9:58:e2:6f:f6:ad:cf:cb:79:73:51:c1:18:36:a3:
         79:ef:e0:d1:2b:45:2d:37:15:e7:4b:06:10:2c:e4:8f:c3:ce:
         52:8d:11:a7:27:a1:0c:ae:9f:c0:c0:66:e3:c4:29:d7:25:c7:
         11:d8:7a:c1:36:88:f0:70:db:1e:e3:cd:68:75:9c:50:08:30:
         64:cd:2c:d7:22:7b:18:51:e8:73:fc:f7:b1:7c:96:56:e6:e8:
         17:cd:32:ca:3b:66:35:4e:89:49:3a:8d:8a:43:a3:6d:19:93:
         b0:2d:4a:8b:c7:b8:a5:4a:d5:ba:a3:85:24:b4:cd:66:2c:91:
         c7:4a:b6:06:9e:b4:8b:d2:4e:db:e4:d3:b5:47:65:83:de:44:
         df:9a:70:e7:d1:22:75:76:74:9b:f6:86:3b:96:90:cd:d4:1e:
         a1:b9:8c:15:1c:e3:fa:ae:49:ed:f5:42:3e:f4:29:9a:68:6b:
         af:71:e3:6b:e3:eb:20:49:36:c6:72:11:c3:6c:f8:6f:83:dc:
         d7:51:ee:72:4f:3d:a4:9d:29:90:46:cc:17:06:d1:3b:5c:74:
         00:a6:d7:83:57:13:16:47:44:07:b3:ba:8d:62:7f:b8:09:e2:
         15:65:f1:86:c5:ec:de:78:02:ad:93:d1:65:2a:65:f5:e1:83:
         75:d0:17:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:29:00 2024 by rpki-client on console-fra.rpki-client.org