Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/7022cbca-61ed-3ba2-905e-3e0305b2cd42.roa
File:                     7022cbca-61ed-3ba2-905e-3e0305b2cd42.roa (raw, json)
Hash identifier:          bQ0H7uOU+GeL1wJ1TzBXSs1gVjMBeVavTZoxqzjFEG0=
Subject key identifier:   B6:57:BC:3A:1D:1C:25:FD:0A:09:DF:FD:28:61:8C:5A:58:28:D2:EF
Certificate issuer:       /CN=2d448124-6e45-40ca-b551-28ef364c99c7
Certificate serial:       010D0C9F432858476E010759FA493FEC2A161D80
Authority key identifier: 25:7D:1B:53:85:94:FC:AD:91:3E:C3:91:34:7B:77:79:5E:58:F5:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/7022cbca-61ed-3ba2-905e-3e0305b2cd42.roa
Signing time:             Fri 04 Oct 2024 13:00:42 +0000
ROA not before:           Fri 04 Oct 2024 13:00:42 +0000
ROA not after:            Thu 02 Jan 2025 14:00:42 +0000
asID:                     4755
IP address blocks:        2620:a0:2001::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6e:01:07:59:fa:49:3f:ec:2a:16:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d448124-6e45-40ca-b551-28ef364c99c7
        Validity
            Not Before: Oct  4 13:00:42 2024 GMT
            Not After : Jan  2 14:00:42 2025 GMT
        Subject: CN=8371d625-ef9b-4357-88a8-651ab640a4a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:3f:98:0e:e5:a5:42:93:af:5d:75:49:63:e1:
                    91:2f:0e:91:e1:f0:b7:90:03:36:d7:7b:40:6d:40:
                    4a:e0:d1:49:57:95:90:b0:ab:97:bd:87:c4:44:35:
                    21:29:8a:bf:27:1d:18:ab:80:6f:0d:7f:11:20:e7:
                    dd:4a:c2:b2:3b:af:b2:c2:32:8c:65:38:c1:bd:ab:
                    47:e7:bf:56:53:f6:93:40:83:01:17:a3:b1:47:a6:
                    c1:37:ca:8f:d6:5b:fd:83:e9:50:82:02:20:b5:a3:
                    ad:69:0b:7a:ba:06:4a:63:c2:c5:fb:83:3b:92:74:
                    56:09:6f:22:60:6b:a0:e5:6f:b3:73:54:cc:74:57:
                    c2:9f:94:f9:91:38:66:f2:68:88:d0:2b:fc:43:73:
                    4c:5c:5a:ae:2c:2d:25:b8:9b:09:cf:dc:c6:d5:20:
                    60:21:31:03:bc:eb:85:66:1f:96:3a:12:09:ca:ab:
                    96:ec:26:7f:83:4c:e3:16:b7:3c:70:b8:b5:d5:77:
                    c0:49:d5:22:55:d7:16:11:41:96:fb:35:ae:46:87:
                    04:48:3b:44:7b:9a:ed:fa:20:69:42:f5:6e:54:f9:
                    c8:40:9e:69:30:bd:24:e2:d4:58:76:5e:d2:8f:fc:
                    6e:80:41:8c:a5:54:45:76:35:9c:2f:5b:a0:ba:fe:
                    d5:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:57:BC:3A:1D:1C:25:FD:0A:09:DF:FD:28:61:8C:5A:58:28:D2:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/7022cbca-61ed-3ba2-905e-3e0305b2cd42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.crl

            X509v3 Authority Key Identifier:
                keyid:25:7D:1B:53:85:94:FC:AD:91:3E:C3:91:34:7B:77:79:5E:58:F5:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:a0:2001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:72:78:77:31:f4:f4:52:0b:b4:66:79:09:11:8c:39:9d:de:
         42:13:f0:4b:27:c5:f2:fd:e3:64:65:ff:12:92:83:2a:82:9b:
         2a:16:3f:19:4e:37:dd:0e:16:bf:e7:12:ed:1d:0d:21:68:6d:
         ef:67:b0:f1:5e:2b:c6:30:97:b2:ca:ad:e3:8c:cb:08:66:cf:
         1e:f8:5d:bb:a5:2e:e0:d8:03:8f:c0:58:51:a8:ae:71:b3:a2:
         a3:27:6b:5b:7d:c0:53:92:5d:99:02:8a:a6:4b:0e:0c:8c:30:
         46:f4:5f:2f:9c:0e:af:9e:2b:cf:c4:54:84:b1:ab:24:36:b0:
         52:ea:2c:9e:76:7f:31:8c:f0:87:8b:e3:63:22:ed:a6:48:35:
         4f:60:59:0b:71:e4:05:85:29:bb:aa:15:10:d3:80:e0:5d:b5:
         48:bc:f8:09:97:e0:40:e9:32:31:42:3a:bf:97:ba:e2:2d:cf:
         54:1c:5a:80:06:ea:79:45:53:0b:1b:f5:06:c8:91:8d:be:64:
         98:8a:d0:3d:2c:62:84:a8:f4:ab:6e:65:f0:8f:4f:0c:2f:f5:
         92:51:db:44:45:be:83:b6:cd:d8:8d:9f:a7:d7:86:80:ce:bd:
         ed:d8:54:57:74:50:b7:21:70:61:41:c4:ed:3f:22:b8:ec:cf:
         fe:29:b6:19
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEduAQdZ+kk/7CoWHYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmQ0NDgxMjQtNmU0NS00MGNhLWI1NTEtMjhlZjM2NGM5
OWM3MB4XDTI0MTAwNDEzMDA0MloXDTI1MDEwMjE0MDA0MlowLzEtMCsGA1UEAxMk
ODM3MWQ2MjUtZWY5Yi00MzU3LTg4YTgtNjUxYWI2NDBhNGEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlT+YDuWlQpOvXXVJY+GRLw6R4fC3kAM213tA
bUBK4NFJV5WQsKuXvYfERDUhKYq/Jx0Yq4BvDX8RIOfdSsKyO6+ywjKMZTjBvatH
579WU/aTQIMBF6OxR6bBN8qP1lv9g+lQggIgtaOtaQt6ugZKY8LF+4M7knRWCW8i
YGug5W+zc1TMdFfCn5T5kThm8miI0Cv8Q3NMXFquLC0luJsJz9zG1SBgITEDvOuF
Zh+WOhIJyquW7CZ/g0zjFrc8cLi11XfASdUiVdcWEUGW+zWuRocESDtEe5rt+iBp
QvVuVPnIQJ5pML0k4tRYdl7Sj/xugEGMpVRFdjWcL1uguv7VTwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLZXvDodHCX9Cgnf/ShhjFpYKNLvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yZDQ0
ODEyNC02ZTQ1LTQwY2EtYjU1MS0yOGVmMzY0Yzk5YzcvNzAyMmNiY2EtNjFlZC0z
YmEyLTkwNWUtM2UwMzA1YjJjZDQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMmQ0NDgxMjQtNmU0NS00MGNhLWI1
NTEtMjhlZjM2NGM5OWM3LzJkNDQ4MTI0LTZlNDUtNDBjYS1iNTUxLTI4ZWYzNjRj
OTljNy5jcmwwHwYDVR0jBBgwFoAUJX0bU4WU/K2RPsORNHt3eV5Y9aYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8yZDQ0ODEyNC02ZTQ1LTQwY2EtYjU1MS0yOGVm
MzY0Yzk5YzcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAoCAB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKVyeHcx9PRSC7RmeQkRjDmd3kIT8EsnxfL942Rl/xKSgyqCmyoW
PxlON90OFr/nEu0dDSFobe9nsPFeK8Ywl7LKreOMywhmzx74XbulLuDYA4/AWFGo
rnGzoqMna1t9wFOSXZkCiqZLDgyMMEb0Xy+cDq+eK8/EVISxqyQ2sFLqLJ52fzGM
8IeL42Mi7aZINU9gWQtx5AWFKbuqFRDTgOBdtUi8+AmX4EDpMjFCOr+XuuItz1Qc
WoAG6nlFUwsb9QbIkY2+ZJiK0D0sYoSo9KtuZfCPTwwv9ZJR20RFvoO2zdiNn6fX
hoDOve3YVFd0ULchcGFBxO0/Irjsz/4pthk=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:39:33 2024 by rpki-client on console-ams.rpki-client.org