Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/b32773bb-d4ae-3098-973a-829b3e7c56b8.roa
File:                     b32773bb-d4ae-3098-973a-829b3e7c56b8.roa (raw, json)
Hash identifier:          wQ3psVxDi3QHAOgROIHqg5oD6hm6muOyXUsCF9oplGs=
Subject key identifier:   85:3E:A8:1A:85:29:19:80:63:92:6E:4A:53:BC:D6:86:45:B6:F6:A0
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F4328584774FB93C2DDCE9474D162E580
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/b32773bb-d4ae-3098-973a-829b3e7c56b8.roa
Signing time:             Mon 07 Oct 2024 01:00:31 +0000
ROA not before:           Mon 07 Oct 2024 01:00:31 +0000
ROA not after:            Sun 05 Jan 2025 02:00:31 +0000
asID:                     11055
IP address blocks:        2001:48f8:f328::/45 maxlen: 45

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:74:fb:93:c2:dd:ce:94:74:d1:62:e5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: Oct  7 01:00:31 2024 GMT
            Not After : Jan  5 02:00:31 2025 GMT
        Subject: CN=4ed97224-de4e-4e95-aea4-52a3b6061a4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:91:f0:0e:18:38:8d:e0:47:71:e1:b1:95:76:
                    01:87:26:2c:20:31:09:4a:d9:fc:4e:21:68:9e:47:
                    e7:0d:61:fc:de:8c:90:43:88:27:b3:79:81:a1:53:
                    10:a5:e8:cf:bd:e9:a6:e8:a5:1a:a4:91:52:8a:d0:
                    c4:f3:28:1a:11:8c:32:0a:00:fb:8a:ad:37:07:e9:
                    d5:fa:62:c7:0b:97:5b:90:ec:a7:48:f2:17:d2:c1:
                    84:83:25:83:b7:01:57:29:1f:ad:52:8c:1a:06:f4:
                    8f:26:c5:66:0d:a0:73:78:8c:9a:ad:3b:96:65:94:
                    50:80:a7:62:35:54:7d:37:f9:91:04:2b:7a:2b:c8:
                    1d:32:fc:6a:0a:6e:9e:da:5e:fd:25:8f:d9:61:a4:
                    0f:24:94:fc:9d:37:b8:80:39:4c:e5:84:ef:92:0f:
                    ac:3b:e5:1b:0e:a6:77:cf:27:8d:d2:ff:d0:03:ee:
                    54:de:30:3c:47:db:a6:bf:af:7c:00:c1:51:e0:f0:
                    2b:5c:54:c8:c9:21:ee:b4:cd:e2:83:db:26:9a:41:
                    9a:20:33:38:a0:e6:cf:da:2a:9a:a8:e8:2b:22:16:
                    c5:56:eb:ae:d0:cf:30:c8:7e:8d:0d:a3:93:2d:c5:
                    69:8b:c8:d3:cf:97:80:d9:f9:10:93:0c:df:b6:c8:
                    37:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:3E:A8:1A:85:29:19:80:63:92:6E:4A:53:BC:D6:86:45:B6:F6:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/b32773bb-d4ae-3098-973a-829b3e7c56b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:48f8:f328::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:09:93:02:2a:f2:67:35:53:02:60:90:6e:ee:3b:e5:57:58:
         32:48:47:ec:df:c2:b9:8f:83:bc:55:0d:96:0f:13:ba:c4:30:
         7f:87:7e:df:bf:f9:39:be:02:0a:11:7e:84:e1:06:78:a5:14:
         4b:d4:bc:84:80:f1:92:a1:c0:88:77:de:5a:b0:53:34:5d:aa:
         56:24:be:61:65:24:2a:bf:05:6f:fe:b6:cc:c2:30:50:9f:6d:
         14:f1:c9:9d:38:ba:b9:cc:d6:5f:6c:ad:d9:fe:a9:01:d2:2d:
         de:48:6d:d5:94:cb:b8:44:be:90:cd:a0:87:2e:81:7c:2a:4e:
         70:e9:1f:b0:b1:a2:b9:a6:f0:de:99:16:54:42:54:80:0f:76:
         13:fb:71:a1:2a:94:4a:e7:34:4c:f0:de:a9:e2:b3:f9:fa:24:
         b6:2b:7e:b7:aa:e8:e7:f6:53:bb:2f:15:c1:93:b9:8b:7b:8b:
         c2:ca:39:3f:ee:4f:48:38:5d:59:1f:5b:1a:d0:48:ba:ab:ba:
         c6:55:2f:4d:f8:53:c7:a0:e6:42:cd:ac:42:9b:3d:10:84:ec:
         5e:db:57:d6:ed:29:99:20:28:9e:0e:f5:b2:f3:16:83:d4:89:
         3f:21:f8:77:e1:c0:ad:e1:81:c8:9a:36:7f:31:25:cd:18:9c:
         8c:57:63:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:23:04 2024 by rpki-client on console-fra.rpki-client.org