Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/27c1dec1-056b-4683-80a9-498890185763/7d23444a-8e86-32b2-8c1a-a2f94126877f.roa
File:                     7d23444a-8e86-32b2-8c1a-a2f94126877f.roa (raw, json)
Hash identifier:          a6soFgOtOdxQjjeQE3MqmJgQ/4E+CNBljASuNEmUwUs=
Subject key identifier:   45:B6:CB:BE:4E:29:DF:40:47:31:96:33:41:83:FA:F7:21:45:F7:33
Certificate issuer:       /CN=27c1dec1-056b-4683-80a9-498890185763
Certificate serial:       010D0C9F43285847256B20BED6E51BC0AF33AC40
Authority key identifier: 5B:F7:35:27:E5:64:B4:C1:F1:66:FA:A1:40:95:06:A3:08:52:85:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/27c1dec1-056b-4683-80a9-498890185763.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/27c1dec1-056b-4683-80a9-498890185763/7d23444a-8e86-32b2-8c1a-a2f94126877f.roa
Signing time:             Sun 08 Sep 2024 13:00:41 +0000
ROA not before:           Sun 08 Sep 2024 13:00:41 +0000
ROA not after:            Sat 07 Dec 2024 14:00:41 +0000
asID:                     16509
IP address blocks:        2001:19e8:282::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/27c1dec1-056b-4683-80a9-498890185763/27c1dec1-056b-4683-80a9-498890185763.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/27c1dec1-056b-4683-80a9-498890185763/27c1dec1-056b-4683-80a9-498890185763.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/27c1dec1-056b-4683-80a9-498890185763.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:25:6b:20:be:d6:e5:1b:c0:af:33:ac:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27c1dec1-056b-4683-80a9-498890185763
        Validity
            Not Before: Sep  8 13:00:41 2024 GMT
            Not After : Dec  7 14:00:41 2024 GMT
        Subject: CN=c1512f18-5a33-46ab-92e3-c8bce8912a71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:df:d3:7f:e2:40:8e:f9:f1:1f:62:d6:2f:76:
                    41:31:48:64:80:08:a0:b6:8c:b4:9b:74:20:e9:ba:
                    07:be:ba:f6:0d:55:8e:42:88:d4:d4:77:cf:f3:bd:
                    77:5c:1a:a0:00:77:c5:6e:2a:5d:65:7b:d9:e2:79:
                    32:df:21:0b:f1:af:6d:cf:42:28:76:08:89:44:99:
                    4f:ee:6b:73:01:2b:5f:97:64:f3:63:8d:b9:2e:72:
                    42:1f:a2:4d:19:42:60:77:99:c0:2c:3a:e3:cb:ce:
                    7e:a8:fc:35:25:b5:1a:22:71:40:ae:54:58:84:77:
                    92:b8:6e:78:c2:37:86:32:4b:3b:00:92:e7:1d:82:
                    82:f2:57:ee:21:94:8a:61:95:8b:74:eb:29:20:e3:
                    9c:c7:b7:37:cc:bd:1a:20:89:bc:d3:30:88:69:7f:
                    ff:bd:ce:b7:c4:a5:95:27:03:64:2a:f9:fd:ad:3c:
                    dc:f8:50:bf:bd:ae:d6:16:85:48:14:7f:f6:ee:e4:
                    00:30:c1:e0:9e:52:fd:48:e4:e6:47:b9:13:47:00:
                    a8:1f:d9:7f:60:b9:04:63:e9:cf:41:38:1d:23:09:
                    41:61:0b:3c:09:9c:70:ea:59:fc:7a:ab:60:78:a7:
                    77:b5:62:bd:20:15:6b:ed:73:13:88:de:7a:c8:b5:
                    7c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:B6:CB:BE:4E:29:DF:40:47:31:96:33:41:83:FA:F7:21:45:F7:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/27c1dec1-056b-4683-80a9-498890185763/7d23444a-8e86-32b2-8c1a-a2f94126877f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/27c1dec1-056b-4683-80a9-498890185763/27c1dec1-056b-4683-80a9-498890185763.crl

            X509v3 Authority Key Identifier:
                keyid:5B:F7:35:27:E5:64:B4:C1:F1:66:FA:A1:40:95:06:A3:08:52:85:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/27c1dec1-056b-4683-80a9-498890185763.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:19e8:282::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:94:9e:35:e6:f5:c5:4f:7a:f4:8d:04:9f:a4:5c:eb:12:9d:
         7c:a0:5d:d7:1b:08:db:63:50:91:88:a0:33:5a:e8:cc:c7:6c:
         da:73:f8:c1:da:73:15:0d:fb:47:c0:2b:fd:b6:6b:f0:b8:94:
         77:97:1a:8e:47:39:c7:58:73:1b:de:aa:52:88:79:39:2d:88:
         4f:86:a9:53:02:40:06:13:50:0b:bf:ee:0b:6c:54:7d:98:e7:
         99:18:5c:8f:3d:ae:68:3a:83:20:c9:55:87:73:58:94:5e:28:
         96:a0:b5:6c:df:d1:2c:e7:f9:7c:3d:01:b2:77:4b:4f:0e:7c:
         00:a7:db:14:5c:59:ee:8d:16:0d:30:82:c1:a8:53:16:cf:9c:
         d4:91:33:ee:44:6c:53:b0:93:34:d1:fb:cd:62:e8:0f:54:c6:
         47:af:c3:1e:c2:e1:c4:da:9b:c0:57:62:2e:f4:7b:81:74:e4:
         6f:f6:54:b7:13:25:0f:4e:3f:53:42:7e:9b:f6:3e:98:b2:f1:
         e4:93:56:99:95:fe:0d:9b:98:b8:04:fc:8b:69:67:30:84:3b:
         c9:de:f3:a0:57:9d:01:7a:38:17:39:1f:7a:81:01:48:d2:54:
         75:f3:a2:30:d3:33:15:84:ba:87:b5:2d:e9:21:d9:d7:7f:da:
         3d:0b:18:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:43:22 2024 by rpki-client on console-ams.rpki-client.org