Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/216d1b01-5a89-3872-ae8e-416135965cb6.roa
File:                     216d1b01-5a89-3872-ae8e-416135965cb6.roa (raw, json)
Hash identifier:          CfveBNvQWt1ubc143t8o7hwezXUVrwKMTesLeamDeIY=
Subject key identifier:   6A:25:4F:2F:71:F8:ED:BC:89:63:C4:AB:D3:94:7B:3F:93:8F:4F:F3
Certificate issuer:       /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial:       010D0C9F432858478E1BB882EE6C77C0E2DADE00
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/216d1b01-5a89-3872-ae8e-416135965cb6.roa
Signing time:             Wed 16 Oct 2024 01:00:31 +0000
ROA not before:           Wed 16 Oct 2024 01:00:31 +0000
ROA not after:            Tue 14 Jan 2025 02:00:31 +0000
asID:                     396881
IP address blocks:        2604:880:52::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8e:1b:b8:82:ee:6c:77:c0:e2:da:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
        Validity
            Not Before: Oct 16 01:00:31 2024 GMT
            Not After : Jan 14 02:00:31 2025 GMT
        Subject: CN=bf93d19a-cb99-4cc1-a2b3-e16e1231aaf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:32:66:1b:02:49:b0:b0:50:f0:7b:25:84:c9:
                    64:be:67:0d:15:09:78:53:80:b6:df:37:cd:28:f9:
                    e8:50:ba:b0:3f:67:be:d6:bc:c2:30:ce:78:d7:19:
                    6c:7c:12:e8:99:41:61:55:62:a0:3f:59:37:2c:6e:
                    82:80:4b:98:ce:2a:82:64:1e:26:df:b1:0a:eb:6a:
                    e9:af:c1:0b:97:17:93:5e:6b:ed:62:ad:38:90:1e:
                    06:f8:39:f2:16:53:8c:d4:e6:c6:c5:8b:50:77:d4:
                    21:80:3c:b0:30:5c:f8:b7:a9:1b:66:aa:48:5c:4d:
                    f0:ea:6a:fb:4e:0f:5a:3d:de:66:16:8a:57:ba:e8:
                    1c:31:37:17:93:07:d1:30:d2:fb:e3:d8:f3:c7:7d:
                    e3:cd:24:e3:43:00:5a:4f:ed:30:af:63:73:3a:ce:
                    e1:ea:84:50:9d:cd:35:f1:fc:db:b9:9d:cc:b2:65:
                    23:08:6d:39:61:37:b7:b0:7d:4a:7a:b3:08:54:d8:
                    d5:89:e4:a3:73:d2:fa:63:32:a8:16:83:9e:19:93:
                    75:a7:3e:e9:7e:c4:12:f4:75:e0:af:ff:e1:13:79:
                    0e:35:e1:26:fa:98:ac:40:1d:f9:f1:ee:1c:0f:54:
                    c3:b4:92:d6:c6:6f:fc:eb:bb:ba:a5:ed:d0:e6:52:
                    a7:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:25:4F:2F:71:F8:ED:BC:89:63:C4:AB:D3:94:7B:3F:93:8F:4F:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/216d1b01-5a89-3872-ae8e-416135965cb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl

            X509v3 Authority Key Identifier:
                keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:880:52::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:e2:af:59:07:29:95:c5:f5:15:7e:28:b9:d5:89:b2:6b:4a:
         c6:e6:21:0a:09:6a:3b:72:de:e0:0c:5a:6a:d8:f3:7f:6b:4c:
         34:27:cf:0c:f3:b8:44:1d:c9:6a:51:a6:63:8a:3b:56:2e:3b:
         bd:72:1a:9f:d7:75:c6:3c:cd:0e:67:48:23:ac:e4:20:5f:aa:
         1b:7f:59:64:4d:5c:15:7c:0b:08:96:6a:4e:74:b0:1b:9e:20:
         86:a5:37:8e:5e:c8:bf:7f:c0:59:0a:80:83:ef:e7:fe:6f:6a:
         b4:fb:b1:7a:8f:88:29:c2:e9:14:68:33:dc:25:5e:91:55:b6:
         66:72:1b:c7:82:d1:cc:19:ef:15:3e:bf:d5:d2:5f:bc:6e:22:
         92:3c:1f:53:63:48:01:32:26:a5:6b:4b:e4:bb:36:97:fc:07:
         77:ae:c9:39:d9:3f:af:2d:72:20:e5:cf:99:c7:8f:cb:f4:6c:
         7d:22:e4:31:e0:67:74:16:a9:ba:6f:5f:16:a9:19:67:e0:9e:
         13:59:11:92:03:34:32:fe:6a:fc:93:89:e7:74:55:42:77:3c:
         ce:bd:b7:4f:97:eb:7d:d4:fc:c9:ad:09:25:0f:66:d0:f2:8f:
         e5:9f:97:85:9c:69:5d:e1:33:c2:1b:56:36:e7:be:9c:15:ed:
         fc:8f:78:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:22:49 2024 by rpki-client on console-fra.rpki-client.org