Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/593f93b4-eea3-4f8b-a272-fca95f2691d2/b449aea6-9e44-3a16-81d3-a102dccb47d9.roa
File:                     b449aea6-9e44-3a16-81d3-a102dccb47d9.roa (raw, json)
Hash identifier:          tVtjLBPmuyjy5K7VNqy+nX/ekBlkiXUhrLLVZhigpW4=
Subject key identifier:   9F:68:58:4B:89:D4:52:42:55:AE:F1:85:BB:0F:31:B4:FE:4B:FA:A9
Certificate issuer:       /CN=593f93b4-eea3-4f8b-a272-fca95f2691d2
Certificate serial:       010D0C9F432858472405D0EA06346179BCB857F0
Authority key identifier: 97:0B:8C:B5:7E:12:DB:A2:F1:49:9A:0D:13:91:5C:1B:B6:3B:C0:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/593f93b4-eea3-4f8b-a272-fca95f2691d2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/593f93b4-eea3-4f8b-a272-fca95f2691d2/b449aea6-9e44-3a16-81d3-a102dccb47d9.roa
Signing time:             Sun 08 Sep 2024 01:00:31 +0000
ROA not before:           Sun 08 Sep 2024 01:00:31 +0000
ROA not after:            Sat 07 Dec 2024 02:00:31 +0000
asID:                     293
IP address blocks:        2001:400::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/593f93b4-eea3-4f8b-a272-fca95f2691d2/593f93b4-eea3-4f8b-a272-fca95f2691d2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/593f93b4-eea3-4f8b-a272-fca95f2691d2/593f93b4-eea3-4f8b-a272-fca95f2691d2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/593f93b4-eea3-4f8b-a272-fca95f2691d2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:24:05:d0:ea:06:34:61:79:bc:b8:57:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=593f93b4-eea3-4f8b-a272-fca95f2691d2
        Validity
            Not Before: Sep  8 01:00:31 2024 GMT
            Not After : Dec  7 02:00:31 2024 GMT
        Subject: CN=0d23f85c-4e76-48d2-a3a3-aedba2cc3be8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d6:8a:98:a7:95:da:ff:91:33:5d:95:7e:62:
                    e7:b5:17:4e:25:23:30:a6:49:b9:36:de:46:d3:56:
                    b3:c4:fb:a2:fe:18:84:e2:af:9b:22:90:ad:67:b2:
                    13:3a:0a:ad:5e:dc:93:a5:91:68:36:66:1d:e4:e4:
                    e1:4c:c7:13:29:c8:03:c4:ab:54:ca:85:24:ec:5f:
                    76:2f:d0:37:61:12:b4:4d:f5:f2:d2:6d:26:2b:26:
                    31:6e:99:4d:ea:04:5f:66:c3:d0:5d:c8:f1:e9:00:
                    48:5a:67:58:0a:41:23:5c:38:66:23:c3:bf:6d:e2:
                    a8:4c:de:a7:cf:6e:9c:87:3f:9c:f2:10:8a:41:e1:
                    4a:96:36:0b:5e:47:c4:f8:79:49:a6:33:7b:7e:2c:
                    88:03:54:95:d8:e1:b2:29:f5:6d:c8:45:ff:8e:20:
                    ec:a5:5b:69:5b:fd:b9:c4:dc:66:76:29:b1:e2:a5:
                    77:0d:a1:e6:5c:b9:47:ce:9d:57:9c:01:6a:29:a5:
                    09:d6:7a:f0:78:79:9a:c8:18:6b:5c:f8:11:aa:3e:
                    45:1a:da:e5:ae:8b:72:58:cb:6e:71:ef:01:af:57:
                    31:27:2b:1c:f4:8e:46:2f:52:b5:cb:fe:9d:c6:e3:
                    90:5e:4e:ab:6f:eb:14:f2:cb:43:61:15:fe:77:0d:
                    71:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:68:58:4B:89:D4:52:42:55:AE:F1:85:BB:0F:31:B4:FE:4B:FA:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/593f93b4-eea3-4f8b-a272-fca95f2691d2/b449aea6-9e44-3a16-81d3-a102dccb47d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/593f93b4-eea3-4f8b-a272-fca95f2691d2/593f93b4-eea3-4f8b-a272-fca95f2691d2.crl

            X509v3 Authority Key Identifier:
                keyid:97:0B:8C:B5:7E:12:DB:A2:F1:49:9A:0D:13:91:5C:1B:B6:3B:C0:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/593f93b4-eea3-4f8b-a272-fca95f2691d2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:400::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:79:a7:96:c7:60:cd:cc:f4:c8:95:7c:e6:5b:81:3a:56:4e:
         e2:21:60:86:0e:42:91:80:77:1f:f5:46:81:fc:fc:8b:68:15:
         10:e0:ca:2a:44:22:39:d7:97:53:7a:cc:35:7e:22:c0:86:d4:
         69:3c:f3:41:d7:37:a4:b7:f6:33:28:0a:f0:2d:28:31:92:de:
         78:fd:22:49:10:43:2b:2e:ae:58:ba:c4:82:8e:19:28:33:94:
         55:f8:b5:98:aa:7b:4f:64:d2:69:e0:bf:f6:e7:b6:7b:42:f6:
         fb:d4:9d:4f:64:35:f3:4f:eb:59:5e:0b:eb:53:b3:1f:be:fe:
         c6:25:18:25:bd:cb:2e:a2:05:37:e0:0c:30:0b:8a:03:59:66:
         ab:a6:13:df:8b:c8:9c:20:66:23:55:5d:79:fa:3d:4f:b8:cd:
         4b:fe:6f:b0:d3:46:c2:cd:1b:ec:36:b5:8d:98:56:6a:b4:a6:
         d4:2e:1d:c6:de:e2:2b:a4:d4:9c:76:11:84:64:ce:92:43:23:
         49:b5:67:41:4f:0d:a3:70:96:75:64:80:de:44:b2:55:04:f0:
         17:9e:cb:22:fb:e3:60:42:cd:89:55:24:58:d9:94:0f:47:86:
         dd:31:9f:e0:5d:29:54:19:cd:47:33:60:af:8b:84:cc:5d:a7:
         7c:82:cf:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:17 2024 by rpki-client on console-ams.rpki-client.org