Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/50bb1a37-bc86-32c4-b7ae-9af6e405d4be.roa
File:                     50bb1a37-bc86-32c4-b7ae-9af6e405d4be.roa (raw, json)
Hash identifier:          XjLCPnUb6NShD0RanPjCjSEw3ZNzCoGuQu6m8Z6jn1M=
Subject key identifier:   21:AD:75:B5:42:69:A9:92:27:6E:83:F3:1C:4B:E9:85:71:8D:41:7C
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285847F50E97F79B86FF1B0DAD0E80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/50bb1a37-bc86-32c4-b7ae-9af6e405d4be.roa
Signing time:             Thu 21 Nov 2024 22:02:24 +0000
ROA not before:           Thu 21 Nov 2024 22:02:24 +0000
ROA not after:            Wed 19 Feb 2025 22:02:24 +0000
asID:                     22773
IP address blocks:        2600:8807:a840::/43 maxlen: 43

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f5:0e:97:f7:9b:86:ff:1b:0d:ad:0e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Nov 21 22:02:24 2024 GMT
            Not After : Feb 19 22:02:24 2025 GMT
        Subject: CN=8602269a-6257-4898-be11-acd19cde77a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:9c:f9:0d:23:3e:be:61:04:cf:bc:12:45:ef:
                    20:f1:67:82:ba:54:d4:b0:b6:b6:41:f8:f3:08:85:
                    ea:c0:76:16:3f:b9:5d:5a:8b:67:10:20:72:75:b9:
                    0f:f5:68:35:fe:16:7e:7e:cc:80:44:2e:bd:64:f0:
                    8a:df:fd:5f:f7:17:05:27:06:9b:00:b4:4a:92:6e:
                    55:28:d3:b1:ee:9f:32:a6:9f:ee:8d:9c:6d:f9:dd:
                    5d:67:83:4b:89:d6:17:6a:ca:3f:fc:bb:02:1e:b1:
                    0c:98:18:0d:0a:cc:fc:74:4b:e3:00:65:67:07:c3:
                    b7:04:90:a0:ab:ff:d7:2a:47:72:75:a4:5e:9b:60:
                    1c:b9:cc:14:9b:5b:bd:e1:88:6c:00:1d:8e:e8:54:
                    a9:0a:d4:fc:7f:47:79:56:4a:f7:5d:77:eb:76:df:
                    9a:ba:59:37:c7:af:ef:cc:85:10:b7:dd:ed:d3:1b:
                    8b:4a:08:06:9a:c5:a8:02:a3:b5:c7:6f:11:22:9e:
                    b0:e7:cd:83:03:c7:95:5a:87:45:10:1b:b3:d1:65:
                    b0:02:59:9f:49:e3:89:5c:0b:0b:56:56:74:27:ff:
                    2f:63:b8:02:3a:a7:11:e0:9e:c9:6d:f9:3b:26:cf:
                    da:43:7e:b6:dc:d3:fb:4f:1d:88:93:68:dc:71:49:
                    c8:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:AD:75:B5:42:69:A9:92:27:6E:83:F3:1C:4B:E9:85:71:8D:41:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/50bb1a37-bc86-32c4-b7ae-9af6e405d4be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:8807:a840::/43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:c1:6f:9e:ed:9a:25:c3:58:42:f3:61:5e:f3:94:03:86:b6:
         da:0a:23:91:5d:a1:57:c8:f6:1f:85:a3:d0:97:77:d9:ba:4b:
         9f:91:63:bc:9e:8b:26:ec:1b:14:e9:b9:cc:73:d6:60:e3:3b:
         32:5d:5b:70:de:02:4a:4d:e8:68:eb:02:7d:d7:73:d3:bd:ae:
         b4:ae:e5:33:58:2d:a6:fa:d9:26:d7:9b:41:c1:ee:cb:0c:1a:
         ca:da:a1:43:68:c1:39:af:38:10:10:2f:03:3c:be:db:17:3c:
         70:28:a1:78:b8:78:5d:41:26:50:a4:9f:11:a0:7b:dc:27:3a:
         a8:e0:d0:ce:e7:ba:01:ad:6c:ce:96:b4:66:ce:d9:b0:3b:ce:
         ed:36:26:36:18:0c:b7:d8:92:57:ef:38:a5:86:fa:16:b1:5e:
         f2:59:b1:13:9a:fd:6c:c6:9a:07:8c:8e:56:f0:43:75:56:92:
         0f:a5:71:b5:7f:99:40:7f:14:39:31:32:cf:9c:c8:c2:cd:7c:
         87:a6:ee:ab:bc:c5:3b:4f:f7:70:2f:8f:1c:95:c3:c0:3b:e6:
         df:db:27:39:5d:d5:ce:85:06:d9:88:67:36:35:29:ab:2e:39:
         a4:16:dc:ca:e4:34:aa:5c:ec:77:1c:d5:ab:ed:ac:c3:ef:79:
         9f:a3:96:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:38:19 2024 by rpki-client on console-ams.rpki-client.org