Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/0f4421e9-f24b-3fb4-80a3-278119725959.roa
File:                     0f4421e9-f24b-3fb4-80a3-278119725959.roa (raw, json)
Hash identifier:          ZWPLNfekgaPXvA7vWDt179ucVQ9uLi6/cCNtBY04xGI=
Subject key identifier:   57:13:69:A9:26:60:91:C7:DB:55:C3:FA:34:92:A2:F4:F5:2A:0A:6C
Certificate issuer:       /CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf
Certificate serial:       010D0C9F43285847D569FB167FE519EA42068720
Authority key identifier: D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/0f4421e9-f24b-3fb4-80a3-278119725959.roa
Signing time:             Sun 10 Nov 2024 14:00:37 +0000
ROA not before:           Sun 10 Nov 2024 14:00:37 +0000
ROA not after:            Sat 08 Feb 2025 14:00:37 +0000
asID:                     4213
IP address blocks:        2607:f820::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d5:69:fb:16:7f:e5:19:ea:42:06:87:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf
        Validity
            Not Before: Nov 10 14:00:37 2024 GMT
            Not After : Feb  8 14:00:37 2025 GMT
        Subject: CN=793c736f-2ad8-4626-acc6-d58cdfe7cdac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:37:d1:67:bf:1a:36:4f:05:ae:a5:8d:87:b3:
                    fb:f5:26:bd:0f:46:de:ba:0e:62:cc:73:ba:e9:ab:
                    02:a2:74:71:33:54:39:69:ae:d9:09:82:66:dc:42:
                    a6:ae:f1:c5:db:e7:15:14:c7:ee:f0:79:0f:fd:4d:
                    05:ef:92:02:b2:fe:66:81:59:13:99:f6:19:8f:68:
                    04:f2:ef:21:8a:e2:22:a3:b3:af:dd:24:95:01:40:
                    ad:af:99:49:ce:3e:82:31:1e:79:f0:bb:78:29:0c:
                    c0:51:47:a1:84:52:d3:dc:4f:a7:89:d1:ad:fa:a9:
                    71:69:93:e2:fe:f3:d5:50:f4:ee:71:39:82:a1:fa:
                    6d:7d:02:68:36:70:dc:05:f7:0b:8c:20:28:e1:4c:
                    1f:2b:2e:66:bd:fd:63:6d:4e:81:ad:a6:8d:fd:3a:
                    97:39:b3:0b:4f:f0:01:f4:f4:46:9b:6b:92:31:09:
                    65:24:4b:4a:2d:de:05:12:9e:66:f3:d0:0a:eb:3a:
                    c3:20:79:2b:8c:ed:8d:db:41:f5:fc:0f:95:e2:1b:
                    8e:36:ee:22:9f:4b:08:cf:c0:98:32:ff:fd:84:da:
                    ba:bf:26:bd:83:60:37:b4:e6:ed:a5:7c:05:f4:ce:
                    7e:d8:8b:cf:1d:07:17:95:40:20:9c:88:ee:eb:53:
                    fe:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:13:69:A9:26:60:91:C7:DB:55:C3:FA:34:92:A2:F4:F5:2A:0A:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/0f4421e9-f24b-3fb4-80a3-278119725959.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl

            X509v3 Authority Key Identifier:
                keyid:D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f820::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:16:01:ad:32:f2:4d:bf:e3:be:c2:fb:87:9a:09:d7:d2:7a:
         bd:6e:cf:ff:43:b2:03:40:1b:de:94:73:15:dc:dd:dc:50:52:
         eb:86:b6:44:c5:f3:69:47:d7:ac:be:6e:38:cd:87:41:49:03:
         82:a9:44:a5:40:31:8b:87:df:14:cb:2a:d6:b4:71:71:93:83:
         86:69:8d:b2:08:b5:31:77:a9:55:0c:17:91:d7:ea:83:07:8e:
         ae:27:d1:f9:e4:b8:f6:76:8d:3a:7e:34:fb:c9:95:46:20:32:
         cc:e5:67:e8:43:20:59:89:0f:15:dd:29:93:69:f7:bc:ef:12:
         5d:56:1c:3a:53:c6:9b:0e:3a:f9:22:1f:4e:e9:cd:0e:c3:bf:
         a8:0f:3c:e6:40:f7:dd:5a:6f:b1:a7:fb:0e:36:12:f8:d5:72:
         ac:9a:97:f0:2e:3f:b0:b8:b9:f4:ac:d4:b4:f1:3d:f9:cb:b6:
         1a:d0:9f:c6:b7:ca:63:e2:1a:73:d0:46:c9:89:14:d8:e8:ba:
         c0:6c:93:e9:96:8a:01:bb:83:0b:de:11:85:1e:7f:f9:00:00:
         68:87:7c:0f:06:1d:48:09:33:01:c3:e2:22:8b:b9:83:44:3b:
         80:e6:74:06:06:29:9c:94:da:dc:57:48:d4:74:6b:3a:c5:32:
         f2:6e:38:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:17:43 2024 by rpki-client on console-ams.rpki-client.org