Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/f1a30aa9-7dc9-3f92-9c68-577088ea865b.roa
File:                     f1a30aa9-7dc9-3f92-9c68-577088ea865b.roa (raw, json)
Hash identifier:          er91Jl6jJbE/qevcdq2WJ4YZmz4WEXlYdKoOCSl3JRU=
Subject key identifier:   BF:1B:E9:DF:41:9A:20:D5:8C:A2:2D:86:A1:DB:86:0E:BD:F8:BA:76
Certificate issuer:       /CN=2d448124-6e45-40ca-b551-28ef364c99c7
Certificate serial:       010D0C9F432858477396624BCB6D9B0A9CFD8D00
Authority key identifier: 25:7D:1B:53:85:94:FC:AD:91:3E:C3:91:34:7B:77:79:5E:58:F5:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/f1a30aa9-7dc9-3f92-9c68-577088ea865b.roa
Signing time:             Sun 06 Oct 2024 13:00:41 +0000
ROA not before:           Sun 06 Oct 2024 13:00:41 +0000
ROA not after:            Sat 04 Jan 2025 14:00:41 +0000
asID:                     397994
IP address blocks:        2620:a0:2000::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:73:96:62:4b:cb:6d:9b:0a:9c:fd:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d448124-6e45-40ca-b551-28ef364c99c7
        Validity
            Not Before: Oct  6 13:00:41 2024 GMT
            Not After : Jan  4 14:00:41 2025 GMT
        Subject: CN=3a8b4bfd-2bda-44ec-8b16-093a6a101c0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:9f:7a:5e:76:c7:ab:bd:b5:56:08:96:0f:be:
                    27:33:63:9e:59:17:ce:11:7f:b9:90:f0:92:56:70:
                    6a:0f:98:4e:5e:f6:56:9b:24:35:e5:0c:0d:c4:52:
                    ef:55:32:a9:15:6d:24:30:d8:62:67:63:3a:69:61:
                    36:16:3d:09:8a:a1:ff:a0:d7:a1:6b:26:d2:59:ba:
                    b7:0b:00:f4:4e:24:df:fb:4b:40:9f:55:0b:ec:54:
                    7b:cf:3b:3e:a5:a1:b9:95:4d:b0:2d:16:11:36:14:
                    a3:e6:17:37:48:3a:ca:c2:3a:3d:4f:a5:40:0b:16:
                    f2:a6:c6:71:59:40:8a:d6:b0:88:2f:53:4a:c9:a4:
                    ba:d7:ac:7c:1f:f6:09:59:0f:18:36:e0:a9:1f:66:
                    e6:11:ed:4b:7a:2c:30:c2:5c:fb:9f:fe:6c:c3:c8:
                    9d:eb:23:cb:b0:c4:26:8b:5f:51:3d:48:c2:4a:1f:
                    f4:a5:07:54:2a:bf:31:19:10:43:26:8d:8d:8f:b6:
                    c8:35:ea:41:65:af:36:f7:49:64:44:95:5a:f8:20:
                    8a:14:ef:2b:bf:15:4e:d6:4e:a8:c4:15:3b:55:9b:
                    e0:fa:03:6a:d3:f7:98:2a:3d:e1:21:00:0b:21:2a:
                    ee:2a:29:fb:7a:9e:c0:61:8a:33:a9:dc:dc:62:f8:
                    c6:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:1B:E9:DF:41:9A:20:D5:8C:A2:2D:86:A1:DB:86:0E:BD:F8:BA:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/f1a30aa9-7dc9-3f92-9c68-577088ea865b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.crl

            X509v3 Authority Key Identifier:
                keyid:25:7D:1B:53:85:94:FC:AD:91:3E:C3:91:34:7B:77:79:5E:58:F5:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:a0:2000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:d0:39:38:9f:4e:9b:8f:b6:af:e8:86:19:79:58:2d:3d:b1:
         bc:0d:72:63:8a:8c:76:7d:f5:4c:7f:53:50:30:77:d8:c7:bc:
         ee:ef:ca:08:42:ea:4f:27:b2:64:13:b8:c2:59:9d:c5:82:d8:
         89:70:7b:b6:2c:d0:ae:ea:6f:2a:8c:b4:25:82:c7:60:e1:8b:
         38:7e:74:31:bf:4f:89:9e:99:f3:d0:2e:06:92:ca:d6:a2:bc:
         1d:45:bd:50:19:f5:9c:1c:27:d4:7e:fa:2c:04:de:0c:6d:e5:
         d2:74:c0:b2:d6:66:55:ce:62:4d:ce:e5:d7:cc:3c:4a:b3:44:
         ad:0a:f3:d2:4e:47:a9:e8:8b:1d:65:bd:4e:6a:56:06:b0:5e:
         c8:2c:ab:ea:2a:e3:cb:01:7d:f8:46:80:28:51:3a:30:13:5b:
         b0:64:a9:49:8f:41:b7:83:96:92:5a:37:94:8d:a1:7b:84:45:
         ae:60:df:1f:15:59:8e:70:44:81:8b:52:0d:7e:24:c3:81:d1:
         50:42:54:6b:fb:28:cc:40:07:8e:80:10:02:7a:51:a8:cb:6d:
         20:96:48:76:9d:0f:38:2d:95:cb:b5:7e:e7:38:ce:a4:40:6a:
         42:04:aa:f9:be:53:1c:28:5e:44:2d:ea:6a:8d:3f:dc:51:e6:
         ff:d8:d9:b2
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEdzlmJLy22bCpz9jQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmQ0NDgxMjQtNmU0NS00MGNhLWI1NTEtMjhlZjM2NGM5
OWM3MB4XDTI0MTAwNjEzMDA0MVoXDTI1MDEwNDE0MDA0MVowLzEtMCsGA1UEAxMk
M2E4YjRiZmQtMmJkYS00NGVjLThiMTYtMDkzYTZhMTAxYzBlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJ96XnbHq721VgiWD74nM2OeWRfOEX+5kPCS
VnBqD5hOXvZWmyQ15QwNxFLvVTKpFW0kMNhiZ2M6aWE2Fj0JiqH/oNehaybSWbq3
CwD0TiTf+0tAn1UL7FR7zzs+paG5lU2wLRYRNhSj5hc3SDrKwjo9T6VACxbypsZx
WUCK1rCIL1NKyaS616x8H/YJWQ8YNuCpH2bmEe1Leiwwwlz7n/5sw8id6yPLsMQm
i19RPUjCSh/0pQdUKr8xGRBDJo2Nj7bINepBZa8290lkRJVa+CCKFO8rvxVO1k6o
xBU7VZvg+gNq0/eYKj3hIQALISruKin7ep7AYYozqdzcYvjG7QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFL8b6d9BmiDVjKIthqHbhg69+Lp2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yZDQ0
ODEyNC02ZTQ1LTQwY2EtYjU1MS0yOGVmMzY0Yzk5YzcvZjFhMzBhYTktN2RjOS0z
ZjkyLTljNjgtNTc3MDg4ZWE4NjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMmQ0NDgxMjQtNmU0NS00MGNhLWI1
NTEtMjhlZjM2NGM5OWM3LzJkNDQ4MTI0LTZlNDUtNDBjYS1iNTUxLTI4ZWYzNjRj
OTljNy5jcmwwHwYDVR0jBBgwFoAUJX0bU4WU/K2RPsORNHt3eV5Y9aYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8yZDQ0ODEyNC02ZTQ1LTQwY2EtYjU1MS0yOGVm
MzY0Yzk5YzcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiAAoCAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADLQOTifTpuPtq/ohhl5WC09sbwNcmOKjHZ99Ux/U1Awd9jHvO7v
yghC6k8nsmQTuMJZncWC2Ilwe7Ys0K7qbyqMtCWCx2Dhizh+dDG/T4memfPQLgaS
ytaivB1FvVAZ9ZwcJ9R++iwE3gxt5dJ0wLLWZlXOYk3O5dfMPEqzRK0K89JOR6no
ix1lvU5qVgawXsgsq+oq48sBffhGgChROjATW7BkqUmPQbeDlpJaN5SNoXuERa5g
3x8VWY5wRIGLUg1+JMOB0VBCVGv7KMxAB46AEAJ6UajLbSCWSHadDzgtlcu1fuc4
zqRAakIEqvm+UxwoXkQt6mqNP9xR5v/Y2bI=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:39:33 2024 by rpki-client on console-ams.rpki-client.org