Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4916865d-494d-3a5a-97ff-61cb8a07702a.roa
File:                     4916865d-494d-3a5a-97ff-61cb8a07702a.roa (raw, json)
Hash identifier:          zg582ma+o4waBS2xM+WcFMRvhQp0PZDC090WMqneF3M=
Subject key identifier:   3B:48:BD:37:1E:EA:50:72:6D:14:D2:C9:E8:B7:35:13:11:E3:AF:44
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584763ACD2E19C80BB1F9F2AFDA0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4916865d-494d-3a5a-97ff-61cb8a07702a.roa
Signing time:             Mon 30 Sep 2024 20:13:12 +0000
ROA not before:           Mon 30 Sep 2024 20:13:12 +0000
ROA not after:            Sun 29 Dec 2024 21:13:12 +0000
asID:                     22773
IP address blocks:        2600:880b:e000::/35 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:63:ac:d2:e1:9c:80:bb:1f:9f:2a:fd:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep 30 20:13:12 2024 GMT
            Not After : Dec 29 21:13:12 2024 GMT
        Subject: CN=7083b329-af90-4304-a831-bee6886f994c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:b4:bc:02:eb:18:19:78:ae:25:71:e1:31:29:
                    ae:ee:0c:ab:f9:bc:0c:f0:53:7f:d9:70:6b:08:17:
                    e5:c6:09:9a:ba:6c:7b:ff:85:6a:91:4b:5b:8c:26:
                    3a:7a:be:65:51:b0:74:8f:54:1f:5f:14:f0:93:6c:
                    e9:0f:25:8a:a6:f3:82:8b:c3:0a:02:e9:97:51:57:
                    4c:3a:f5:0c:7c:02:c0:0f:91:d9:31:74:08:52:61:
                    16:2a:0d:2f:ad:c4:b7:03:51:10:38:7e:3e:5e:a0:
                    f2:e9:24:c8:7b:cd:6f:d7:dd:f6:b8:79:b6:df:0e:
                    7d:38:59:e4:02:42:cc:37:a8:f8:07:02:ac:43:d0:
                    06:0c:fc:62:8d:d9:e9:40:5c:4e:03:65:90:74:e7:
                    ed:78:ca:74:26:ef:d5:9e:a4:71:d9:72:f2:58:83:
                    41:d6:18:82:00:17:4b:54:17:da:18:99:d5:08:ef:
                    e6:02:22:21:3a:9b:b7:7a:cb:8b:56:c3:67:fc:1b:
                    28:e3:59:53:c2:0d:75:de:08:70:14:d3:88:fd:2d:
                    2b:cc:de:f7:2b:12:a7:8a:fd:b3:a8:a8:02:49:9f:
                    ae:74:71:2c:49:c7:7c:ba:0a:ff:9e:48:2e:11:e8:
                    13:5c:7d:03:20:56:57:ae:95:ae:66:67:cd:c4:d2:
                    e9:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:48:BD:37:1E:EA:50:72:6D:14:D2:C9:E8:B7:35:13:11:E3:AF:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4916865d-494d-3a5a-97ff-61cb8a07702a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:880b:e000::/35

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:21:ec:05:74:d3:57:11:ab:c4:f6:4c:e6:28:8b:d2:a8:0b:
         b7:6e:ee:3d:75:76:94:1a:5b:55:1e:4f:54:fb:14:a0:fc:08:
         5a:21:80:7c:9f:8e:2f:b1:78:2c:8d:2e:6c:83:a0:ef:ac:43:
         7c:89:21:c4:bb:3f:d4:53:67:85:e9:81:7a:dd:0a:25:2f:16:
         02:d7:3d:38:72:ec:24:aa:44:6c:11:33:a6:81:d3:b0:66:41:
         5f:7b:b6:11:ed:b3:2f:5b:ab:e1:22:19:6f:d8:cc:82:97:0b:
         bf:3d:50:8a:d8:37:45:4f:68:cc:d1:c6:70:21:76:44:45:94:
         da:dc:3c:a8:a8:89:5d:b7:18:59:4c:cb:7a:51:d5:c9:43:10:
         6a:8a:95:47:76:08:67:1a:b6:8d:2a:e7:92:80:d7:0a:4f:22:
         36:a7:22:3e:8b:2b:26:b1:4f:f5:64:56:8b:65:10:4f:b6:1b:
         b4:43:57:79:1e:5d:a3:47:c5:b0:54:5f:83:bb:32:37:14:5e:
         f2:bd:d5:14:50:bc:99:a9:c4:83:64:37:62:ef:ce:de:44:ae:
         32:d0:0a:37:b0:ad:e7:da:89:30:93:88:76:dc:ad:23:98:d8:
         1b:2d:3f:eb:09:9d:62:b9:3a:a6:cd:ca:55:86:19:d0:b4:14:
         27:f0:a7:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:36:54 2024 by rpki-client on console-ams.rpki-client.org