Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/0e38b2b0-079e-3a1a-85b2-69cf6e7b13e9.roa
File:                     0e38b2b0-079e-3a1a-85b2-69cf6e7b13e9.roa (raw, json)
Hash identifier:          M3nqkdWESb2D+CiXUpPlslm59GtYCjwgGgJ4xp4NKUA=
Subject key identifier:   93:FF:F7:71:74:43:04:64:15:CA:6B:3C:A7:95:E6:15:13:89:E1:6A
Certificate issuer:       /CN=2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f
Certificate serial:       010D0C9F43285847792BB828955201F708DEAE00
Authority key identifier: E7:C3:4D:92:13:BD:90:DE:BE:98:53:B6:75:61:97:86:5B:27:46:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/0e38b2b0-079e-3a1a-85b2-69cf6e7b13e9.roa
Signing time:             Tue 08 Oct 2024 13:00:40 +0000
ROA not before:           Tue 08 Oct 2024 13:00:40 +0000
ROA not after:            Mon 06 Jan 2025 14:00:40 +0000
asID:                     0
IP address blocks:        2001:504:110::/48 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:79:2b:b8:28:95:52:01:f7:08:de:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f
        Validity
            Not Before: Oct  8 13:00:40 2024 GMT
            Not After : Jan  6 14:00:40 2025 GMT
        Subject: CN=0d6eacc5-4951-49c7-bd6e-7532b22998cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:1e:92:de:32:2c:f7:0b:a5:c8:9b:c4:4d:72:
                    0c:55:0c:32:a5:e1:4c:28:a6:1b:26:90:ac:dd:e8:
                    cc:b5:7d:16:69:1c:02:11:3a:52:5e:01:5f:fe:28:
                    8d:7b:17:cc:a3:d0:54:f8:d8:e8:66:98:c4:7c:59:
                    96:d4:85:97:22:e0:57:55:a7:56:35:22:38:30:ca:
                    f9:62:32:b5:fc:33:38:d4:f9:5e:eb:d3:1e:ba:9f:
                    dd:b1:e3:b4:04:92:c3:24:df:40:96:21:8e:64:dc:
                    37:e8:63:35:6e:b6:ef:2d:f5:80:01:6c:e2:1e:d4:
                    0e:20:92:b6:6a:e5:07:f9:13:03:69:b9:c6:bc:06:
                    db:7b:8c:88:a5:f5:e3:2c:2e:58:a4:e4:b5:8a:d9:
                    a6:54:d8:2f:43:83:37:dc:0b:28:86:5a:a8:f7:8d:
                    cc:99:61:85:1d:5a:de:c6:d2:0f:1c:9c:0c:90:ac:
                    58:e8:63:c1:1c:8b:15:a7:c5:db:e3:d9:51:b4:8e:
                    7e:89:20:da:87:5d:df:37:ea:ac:19:d8:90:f5:2d:
                    87:2c:31:60:78:2b:8e:e3:94:43:ff:33:1b:1b:f7:
                    d4:27:f1:fa:53:12:f5:70:f1:d1:f1:29:39:8e:67:
                    1c:c7:10:0a:25:87:9c:7c:09:d8:ce:8b:a7:39:49:
                    32:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:FF:F7:71:74:43:04:64:15:CA:6B:3C:A7:95:E6:15:13:89:E1:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/0e38b2b0-079e-3a1a-85b2-69cf6e7b13e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.crl

            X509v3 Authority Key Identifier:
                keyid:E7:C3:4D:92:13:BD:90:DE:BE:98:53:B6:75:61:97:86:5B:27:46:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:504:110::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:1c:a5:d8:63:f9:20:d3:9c:e0:81:3d:7d:5b:b1:d9:64:e8:
         43:1d:d0:8f:04:81:6f:35:3d:cd:7b:93:c3:17:c1:d1:4a:0d:
         a0:31:0e:13:b2:d8:4f:41:46:dc:97:ac:bc:55:54:8a:49:f9:
         ab:69:95:c4:b2:4a:86:9f:1e:39:0b:d9:e6:1f:f8:03:56:67:
         93:3c:0e:ef:4b:84:44:36:a9:22:17:5d:b8:83:d8:87:43:18:
         f2:7d:a9:ca:e1:5e:f9:31:27:b7:4f:ac:41:19:2d:71:d7:08:
         8d:f5:2d:76:b7:5d:8e:d5:29:92:2b:54:e8:f5:ca:0e:ab:88:
         a9:0f:38:f2:09:61:b5:c5:d0:e4:01:25:5f:ab:24:6a:b2:79:
         fe:20:93:fa:8f:c4:6d:72:ba:97:68:fc:67:a1:14:c7:02:e9:
         38:88:a4:22:10:c8:63:06:74:b6:1b:08:3e:33:ea:ca:0f:3e:
         0c:b5:09:53:9f:53:df:74:42:a9:0c:86:b6:a2:18:fc:44:4a:
         b2:41:08:e6:ef:9f:76:74:1c:0e:db:45:0e:ba:8e:54:2a:b0:
         56:bf:b6:3c:be:d7:fb:8a:ec:cb:e8:70:a8:3c:03:13:72:b3:
         7a:ec:86:d8:d9:d1:c3:3d:2c:8d:9d:dd:d2:12:27:46:d1:9a:
         38:e3:d6:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:55:53 2024 by rpki-client on console-ams.rpki-client.org