Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f886755a-d05a-3747-be0c-b6f09a625848.roa
File:                     f886755a-d05a-3747-be0c-b6f09a625848.roa (raw, json)
Hash identifier:          TSrmjWJNd9UR7NjLdhYNbNHSq8Y/mXsCd2Usm4IqOC8=
Subject key identifier:   F4:19:08:6E:71:55:8A:8C:C6:69:CC:5E:4E:B9:BB:12:BB:B1:61:6A
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328583F00DFE84FA9709124B47D30C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f886755a-d05a-3747-be0c-b6f09a625848.roa
Signing time:             Mon 22 Aug 2022 12:00:00 +0000
ROA not before:           Mon 22 Aug 2022 12:00:00 +0000
ROA not after:            Sun 19 Sep 2027 04:00:00 +0000
asID:                     13335
IP address blocks:        2606:4700:4020::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:00:df:e8:4f:a9:70:91:24:b4:7d:30:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 22 12:00:00 2022 GMT
            Not After : Sep 19 04:00:00 2027 GMT
        Subject: CN=02224e29-5e3b-4aa3-ae22-1b984022446b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:a2:49:ea:2d:6f:df:b8:cf:b3:29:2b:4c:f6:
                    0f:11:cc:40:48:f4:22:a9:3f:c3:46:90:98:cc:d1:
                    40:21:8a:1c:1c:09:1d:62:6e:c2:dc:aa:35:8e:89:
                    30:d0:47:db:e9:10:30:7f:16:d2:34:63:59:f9:f6:
                    d0:fa:9a:94:e5:50:38:7c:5b:75:10:d3:be:a4:e7:
                    ea:b8:48:83:a4:c5:9a:f7:39:52:83:4d:e1:82:d6:
                    58:f7:23:e7:4b:3d:04:d6:9d:c6:71:20:88:50:e7:
                    eb:9b:a8:08:bc:3f:54:ce:28:28:58:8f:9a:62:f7:
                    ab:5b:88:a8:f2:91:97:4e:bd:06:7e:4b:a4:93:b9:
                    c8:1c:6a:8d:d6:2d:ad:80:06:40:51:17:2b:f1:95:
                    93:dc:65:94:58:da:5a:cb:84:14:a1:e2:62:bf:80:
                    92:14:3e:71:13:9e:f2:1a:3d:26:38:83:0b:30:4b:
                    30:6e:1f:37:75:c7:f3:16:99:13:ca:5d:a4:6e:e1:
                    1d:8f:86:0a:5c:fa:18:87:13:41:b5:82:31:0c:a4:
                    57:62:f4:c7:c7:e1:76:4c:1b:bd:a8:84:f1:00:95:
                    eb:2e:30:e3:88:5c:68:b7:e7:08:c4:33:bb:5d:aa:
                    c1:2c:1c:a4:9f:05:de:c2:d8:19:b9:ff:c3:cf:b9:
                    bf:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:19:08:6E:71:55:8A:8C:C6:69:CC:5E:4E:B9:BB:12:BB:B1:61:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f886755a-d05a-3747-be0c-b6f09a625848.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4700:4020::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:8d:18:23:31:15:92:bd:36:f8:ec:2e:07:31:be:d3:71:cd:
         63:cd:e3:44:0e:8e:fa:dd:e6:16:4e:f6:1b:d6:e7:bf:05:8a:
         a0:8b:b5:a9:e7:66:3e:49:d5:93:85:a3:e3:fe:bb:d4:f9:32:
         f6:85:2f:cf:c1:67:61:6f:ec:f7:dc:76:bf:94:b7:2f:ef:1d:
         3a:bb:ca:ab:92:9d:b0:01:47:2e:db:13:7d:21:5b:45:1e:c6:
         96:77:73:df:e8:4f:04:3c:cf:7f:c5:1c:a4:84:bb:9a:c0:a4:
         51:4c:5b:2c:74:9c:f0:97:86:26:ed:bf:37:15:82:81:da:a6:
         39:d2:bd:3b:fa:70:fe:44:4a:f0:59:eb:de:82:b1:a7:0b:4d:
         59:24:20:de:b0:23:88:e3:38:14:fe:a4:20:2e:67:7d:19:40:
         f5:3c:a6:d7:e5:f3:e0:41:9a:46:c2:d8:5e:cb:91:ee:51:0d:
         60:72:cd:0e:02:8f:54:51:03:9a:10:53:ae:a3:9f:6f:53:1f:
         90:ff:b0:f5:39:cf:8e:3d:aa:35:d1:b5:7c:09:db:fc:08:70:
         ca:d3:30:1f:6a:b1:17:1d:11:f4:b1:96:64:8b:d9:c6:bd:f6:
         97:ec:78:00:10:40:0c:3e:a5:d1:5c:b1:a4:cd:9e:89:20:19:
         68:32:e9:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:01:17 2024 by rpki-client on console-ams.rpki-client.org