Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/35c6001a-b4fa-378a-ac14-5506718c4e2b.roa
File:                     35c6001a-b4fa-378a-ac14-5506718c4e2b.roa (raw, json)
Hash identifier:          I8IxRhcciAXx/8ccb9/u+eOtGtcBlAy1Q08uWt4a7ZI=
Subject key identifier:   56:43:BA:85:8D:9D:A8:D2:A0:24:6E:8E:82:FB:FD:BE:D6:73:47:20
Certificate issuer:       /CN=d12ff9c7-ced8-4cc2-b3d5-adf1859a808c
Certificate serial:       010D0C9F432858474C80B629C15AE45881736140
Authority key identifier: 5A:CD:BF:B9:70:80:A4:AA:F3:8E:B8:58:29:11:41:07:9C:EE:FD:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/35c6001a-b4fa-378a-ac14-5506718c4e2b.roa
Signing time:             Sun 22 Sep 2024 13:00:40 +0000
ROA not before:           Sun 22 Sep 2024 13:00:40 +0000
ROA not after:            Sat 21 Dec 2024 14:00:40 +0000
asID:                     16509
IP address blocks:        2620:121:5080::/43 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4c:80:b6:29:c1:5a:e4:58:81:73:61:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d12ff9c7-ced8-4cc2-b3d5-adf1859a808c
        Validity
            Not Before: Sep 22 13:00:40 2024 GMT
            Not After : Dec 21 14:00:40 2024 GMT
        Subject: CN=249e9d74-1c70-40c0-9cab-8156b733ee69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:73:64:60:c2:c7:77:4a:bd:b6:9a:8c:9d:36:
                    aa:26:78:b7:fd:ed:45:a7:5e:82:13:29:26:23:3c:
                    04:2c:51:e1:7d:d9:61:91:aa:4f:da:af:76:27:8f:
                    69:12:c7:e9:60:6a:57:9d:a1:d6:f1:3e:85:19:f4:
                    82:1a:f5:47:13:07:6b:a9:49:21:02:8f:7f:f5:62:
                    ad:87:93:81:7a:91:bf:93:c4:77:50:51:ce:62:82:
                    f5:8d:c8:a5:a9:e6:8f:a1:52:e3:92:8f:be:4a:1f:
                    ad:98:5c:dc:a6:ef:9e:cd:e5:7b:28:9b:e5:09:a4:
                    5f:00:33:0c:1c:fb:2c:5e:63:70:32:0b:96:c9:f2:
                    2c:25:a1:c2:71:40:5d:ee:d0:35:09:46:66:57:5c:
                    2a:ff:7e:83:15:af:30:13:1e:c6:9b:18:03:9f:ed:
                    24:0a:41:61:10:83:84:b8:25:71:19:85:03:c4:a4:
                    22:d9:bb:9f:99:5d:0b:44:7d:ca:c3:63:67:82:76:
                    b9:6f:0d:68:3f:18:65:bb:0c:2a:6b:91:11:2f:7d:
                    e1:f3:4b:dc:c4:20:49:b8:3d:d5:e3:f5:a9:d5:f3:
                    57:6c:65:2e:6b:c1:1b:56:ab:a5:02:cb:8a:49:9d:
                    83:d5:25:0a:b0:b5:43:94:ef:b1:c7:da:44:7e:ee:
                    ea:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:43:BA:85:8D:9D:A8:D2:A0:24:6E:8E:82:FB:FD:BE:D6:73:47:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/35c6001a-b4fa-378a-ac14-5506718c4e2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.crl

            X509v3 Authority Key Identifier:
                keyid:5A:CD:BF:B9:70:80:A4:AA:F3:8E:B8:58:29:11:41:07:9C:EE:FD:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:121:5080::/43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:e9:06:53:1e:79:c6:ee:a7:99:e4:f5:77:58:7f:fd:cd:0b:
         19:73:3f:77:07:b5:d8:cf:29:b0:fd:ee:df:42:7f:13:62:9b:
         4e:d3:9e:17:94:2e:cd:e9:28:ce:dd:ba:da:52:fd:78:4b:d4:
         d2:24:22:52:ca:88:b4:17:c8:f8:27:4d:18:5b:27:d5:4e:26:
         3f:d7:06:5d:aa:0e:b9:91:b1:09:5e:d7:b8:45:56:89:e4:cf:
         5e:97:c6:fd:27:a8:7a:ad:26:a1:48:aa:a0:bf:db:7d:97:38:
         09:19:b0:2e:89:0f:12:64:c6:88:a1:70:8c:4c:95:c8:7c:c9:
         f4:27:a6:84:00:8c:2b:00:35:fc:e6:11:c8:da:8f:f3:f4:b3:
         71:4d:22:9f:bf:8d:fd:d6:93:d5:e4:e3:e7:de:a6:d3:06:33:
         f0:9f:f2:fe:d6:e1:24:8b:66:04:e0:7c:83:91:00:d1:70:2c:
         73:9c:7b:f5:5d:0c:49:b8:7a:10:df:1f:53:6a:ed:4f:64:3e:
         bf:84:11:0b:52:d4:a7:d8:ff:1d:a8:56:f4:12:0e:48:bc:59:
         d0:e7:81:6a:40:ee:71:2d:b7:26:51:f4:c4:ea:f6:e6:42:22:
         8a:62:1f:0f:05:aa:5f:b8:62:68:8b:e2:37:e5:cc:20:e2:7a:
         88:ad:71:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:57:40 2024 by rpki-client on console-ams.rpki-client.org