Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3/891fdfea-2051-34f1-a69e-9fb5e82a2d1b.roa
File:                     891fdfea-2051-34f1-a69e-9fb5e82a2d1b.roa (raw, json)
Hash identifier:          OpkTRL2JyBLECmB9NNKm3xEaC1dJP67J6FvAW4tM51w=
Subject key identifier:   48:65:D0:31:73:7D:47:4E:24:0C:94:74:4F:45:5A:16:A9:81:00:F0
Certificate issuer:       /CN=fd865c6a-54c8-4f58-ac80-9f9bdd368ee3
Certificate serial:       010D0C9F432858474850A089321C6D2D4F9C6280
Authority key identifier: 9C:5E:DB:84:DA:D7:B5:46:10:65:08:BB:F3:24:5A:F8:71:1F:CE:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3/891fdfea-2051-34f1-a69e-9fb5e82a2d1b.roa
Signing time:             Sat 21 Sep 2024 01:00:33 +0000
ROA not before:           Sat 21 Sep 2024 01:00:33 +0000
ROA not after:            Fri 20 Dec 2024 02:00:33 +0000
asID:                     209242
IP address blocks:        2620:117:bfb0::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:48:50:a0:89:32:1c:6d:2d:4f:9c:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd865c6a-54c8-4f58-ac80-9f9bdd368ee3
        Validity
            Not Before: Sep 21 01:00:33 2024 GMT
            Not After : Dec 20 02:00:33 2024 GMT
        Subject: CN=91c7591b-d4cd-401e-9e25-93c7b0792d02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:2d:e5:94:8e:48:ee:52:a8:59:81:3c:e1:33:
                    09:e3:d7:c4:30:95:ff:31:d5:4f:9f:60:10:e7:96:
                    f6:bc:69:a4:ed:64:06:12:f2:f8:8a:22:49:f8:46:
                    69:44:a7:db:5c:d6:de:54:88:6f:3e:88:82:cb:89:
                    b9:10:60:2e:45:1e:05:89:b9:91:1e:8e:cc:9c:ff:
                    73:50:6f:31:72:af:65:1b:7c:dd:93:1a:50:6d:b9:
                    11:7b:65:a2:90:c9:cc:2b:4b:68:cb:7e:8e:15:f6:
                    8f:17:63:de:65:44:db:7b:70:79:ab:c5:f4:cf:ee:
                    79:d2:5e:43:c1:68:a1:96:46:ce:f8:66:07:2b:b8:
                    38:8a:9e:a4:dc:3b:76:aa:07:06:d6:0e:56:19:2b:
                    d8:4e:84:24:65:16:79:26:23:33:8f:f8:d7:9f:d8:
                    94:cd:c3:18:3e:5f:3c:db:37:99:6a:35:20:c4:38:
                    a3:cb:ff:27:82:41:0a:07:11:fb:78:14:29:e8:61:
                    88:15:71:47:8f:5a:b6:64:c1:bb:36:fc:a0:2a:87:
                    23:3a:eb:fa:0e:8b:58:7c:79:a5:5b:dd:a0:17:58:
                    23:aa:df:69:08:94:a3:31:52:f3:db:39:d0:98:05:
                    81:2f:0d:1d:b8:66:74:7f:c5:f0:29:a8:11:24:a5:
                    a7:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:65:D0:31:73:7D:47:4E:24:0C:94:74:4F:45:5A:16:A9:81:00:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3/891fdfea-2051-34f1-a69e-9fb5e82a2d1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3.crl

            X509v3 Authority Key Identifier:
                keyid:9C:5E:DB:84:DA:D7:B5:46:10:65:08:BB:F3:24:5A:F8:71:1F:CE:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:117:bfb0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:f7:1d:36:60:7b:94:ac:90:f6:b1:4b:4f:dd:20:9f:9f:b1:
         64:87:a1:05:27:ac:bb:98:50:45:19:30:b5:a4:4a:71:07:ec:
         d2:64:77:0f:f8:12:a3:03:e1:32:44:56:b6:50:37:d9:f5:7b:
         f6:a3:e5:e3:53:e8:b9:50:50:dd:87:48:49:31:0c:71:77:75:
         16:99:a1:bf:74:57:fa:82:dc:7c:4c:c0:75:41:b3:68:82:cb:
         f8:cc:64:42:81:5f:45:dc:c4:4b:b0:51:c2:c7:97:8d:49:44:
         6e:3a:c7:24:7d:c0:73:f2:69:18:98:b3:cc:c6:b6:61:09:1a:
         cd:b6:32:93:00:35:a6:33:bf:c4:b8:f7:d6:58:c7:b6:15:a7:
         db:5a:9b:3c:02:2a:67:09:a5:75:06:d9:b6:77:2c:ab:48:b8:
         d1:59:19:62:97:bc:1f:e4:67:71:90:7c:98:ba:46:2b:06:74:
         6e:79:17:0d:75:c1:c6:80:8b:c5:ad:d8:76:85:84:1b:da:53:
         58:a9:6a:55:f0:0c:72:6c:74:de:9c:4d:da:41:36:34:29:39:
         17:14:fb:ba:7b:37:07:af:36:36:87:b5:f7:60:72:54:38:c8:
         c1:73:bd:ca:f0:d9:06:a0:09:dd:78:6d:3a:c5:29:83:cd:c5:
         61:33:a0:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:26:02 2024 by rpki-client on console-fra.rpki-client.org