Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/68a2e22a-71e8-3050-9a38-54a304d98477.roa
File:                     68a2e22a-71e8-3050-9a38-54a304d98477.roa (raw, json)
Hash identifier:          hzvhA5slyhpOHegUZvIrb8x4MN/p2qi3N+7kVTSr3bA=
Subject key identifier:   B9:BE:9C:6E:BD:96:DE:46:DE:94:8A:9F:B1:BD:C8:1D:2E:80:23:AE
Certificate issuer:       /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial:       010D0C9F432858474420B995A911A9A636A57480
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/68a2e22a-71e8-3050-9a38-54a304d98477.roa
Signing time:             Thu 19 Sep 2024 13:00:42 +0000
ROA not before:           Thu 19 Sep 2024 13:00:42 +0000
ROA not after:            Wed 18 Dec 2024 14:00:42 +0000
asID:                     20253
IP address blocks:        2606:bc40:f00b::/48 maxlen: 48
                          2606:bc40:f00c::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:44:20:b9:95:a9:11:a9:a6:36:a5:74:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
        Validity
            Not Before: Sep 19 13:00:42 2024 GMT
            Not After : Dec 18 14:00:42 2024 GMT
        Subject: CN=86925fd8-78ad-4e89-9455-c07cd15d7f2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:56:76:08:82:61:53:d3:27:fd:6a:b3:54:4b:
                    0a:32:28:13:b9:60:91:c5:2c:74:73:dc:44:a0:2d:
                    ed:8b:07:ec:92:75:88:d6:ed:21:87:42:17:f2:de:
                    a2:33:10:f7:40:ce:3c:3f:31:3c:63:05:c4:7e:35:
                    5d:f8:fc:3b:7b:71:9f:df:89:11:d6:50:4a:d1:99:
                    ed:38:b4:e1:88:65:7c:bb:4d:d3:2e:59:e9:18:23:
                    d8:cd:09:cb:94:2b:c7:0f:fb:dc:e7:43:f9:0d:1b:
                    f8:a6:f9:1b:8f:0e:1d:ae:9e:dc:ba:71:36:c7:50:
                    c4:a4:f0:17:d4:be:c4:d1:fd:ad:78:45:62:dc:90:
                    63:0a:79:5d:76:bb:0f:9b:39:30:4f:1d:58:57:31:
                    fb:64:e1:66:2a:f9:83:a2:d1:d9:4c:04:59:90:f2:
                    cb:8a:46:c7:94:66:75:11:f7:8a:a4:70:f9:0a:6a:
                    3c:f6:bb:33:9f:d5:d9:28:ba:20:f0:3e:ee:6e:77:
                    36:d5:26:ba:ac:a8:bc:f9:cc:52:48:b9:9e:84:cd:
                    e9:bf:23:29:15:7d:7a:f2:57:1d:0e:0a:2a:e7:c3:
                    b1:ad:90:6a:84:02:ad:a9:00:2f:fc:4e:22:a7:ce:
                    8c:b2:00:9a:4d:70:06:95:8f:f3:d9:4a:be:5b:d4:
                    71:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:BE:9C:6E:BD:96:DE:46:DE:94:8A:9F:B1:BD:C8:1D:2E:80:23:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/68a2e22a-71e8-3050-9a38-54a304d98477.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl

            X509v3 Authority Key Identifier:
                keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:bc40:f00b::-2606:bc40:f00c:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:aa:7d:de:86:59:e2:13:31:17:39:19:5b:f7:e5:ea:88:61:
         58:84:aa:b3:40:20:ce:08:b8:ee:4f:e6:8b:76:88:c1:4c:8d:
         76:cb:94:fc:0a:48:7c:9c:56:51:ee:ae:fa:27:11:3f:14:4c:
         e3:f2:d2:66:4e:d6:b1:14:b3:2c:26:9a:e3:b1:9d:04:fc:38:
         64:fb:41:a7:54:35:10:82:0d:20:0f:3e:19:e4:25:61:9e:f4:
         68:3f:92:ea:22:62:5f:8a:58:c2:7e:1c:d2:b3:9e:ab:5d:56:
         d6:5e:98:7c:02:99:67:4d:9c:20:b7:45:7d:32:fb:18:83:c5:
         01:01:5d:6c:99:17:2d:b5:3d:12:98:bf:85:69:d3:f5:48:3e:
         1b:c5:da:61:d5:f0:fd:f9:32:51:29:43:45:ef:b5:91:93:cc:
         06:3a:78:8e:4e:8c:1b:88:7c:37:89:a6:e6:eb:e5:9e:ed:fc:
         79:c4:c1:58:39:0d:b8:03:dd:ad:4c:01:7a:6f:e3:1c:d2:83:
         77:31:71:e6:7f:de:c0:be:ac:b4:c1:7c:f5:4a:31:9e:0e:d5:
         99:bf:59:ff:c8:6c:e3:6b:32:6b:3c:0f:ca:a9:36:7d:40:69:
         dc:d2:b7:4b:db:a6:4c:04:76:b0:28:4d:27:11:89:eb:33:96:
         c1:f8:6d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:35:26 2024 by rpki-client on console-fra.rpki-client.org