Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9268dc36-70fc-3724-8536-e7defe5e7381.roa
File:                     9268dc36-70fc-3724-8536-e7defe5e7381.roa (raw, json)
Hash identifier:          MwBqHfdFXVCwKoFM1EBv8+Vx3LGPvByU/pmE7ct2UfU=
Subject key identifier:   B0:B8:60:6D:8E:8F:D1:DA:4D:9A:8C:E3:33:E5:C4:BF:4B:14:23:4D
Certificate issuer:       /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial:       010D0C9F43285847600B7DF6A8EE519368915D80
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9268dc36-70fc-3724-8536-e7defe5e7381.roa
Signing time:             Sun 29 Sep 2024 13:00:41 +0000
ROA not before:           Sun 29 Sep 2024 13:00:41 +0000
ROA not after:            Sat 28 Dec 2024 14:00:41 +0000
asID:                     20253
IP address blocks:        2606:bc40:26::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:60:0b:7d:f6:a8:ee:51:93:68:91:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
        Validity
            Not Before: Sep 29 13:00:41 2024 GMT
            Not After : Dec 28 14:00:41 2024 GMT
        Subject: CN=79506907-39fa-483c-b064-158045265e39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c0:61:cf:2c:d1:2a:39:3e:da:88:f1:1a:e6:
                    7f:9f:73:d5:00:41:e8:d6:4b:73:c1:16:06:ad:cd:
                    a1:d1:f1:7e:a5:e0:0f:b7:e5:ba:e7:da:81:44:6e:
                    11:82:9d:f9:61:5e:20:fd:a0:fa:52:9c:d2:eb:b5:
                    31:48:92:61:c5:9e:a0:15:3b:d1:41:21:ac:74:f2:
                    56:18:1c:8c:a8:8b:d8:64:bd:f8:68:19:03:8a:b6:
                    fb:b7:55:ee:98:3d:a1:03:62:1b:b9:90:12:88:30:
                    b6:cd:13:be:99:a5:20:ed:55:ad:70:ba:72:6a:2c:
                    f6:d8:bc:c8:e1:21:6d:d8:2b:20:7e:bd:ef:1d:13:
                    c6:c7:37:9c:bc:5b:42:64:2e:c1:73:b9:8a:0e:dd:
                    2d:1b:22:2f:61:83:d7:7f:c0:67:5a:01:40:10:6d:
                    40:b4:85:94:98:30:af:51:87:e3:77:77:4c:8e:c7:
                    eb:3c:36:62:72:15:0d:22:90:f1:7f:6d:8e:e9:5e:
                    79:63:9f:2a:00:00:64:ac:a2:5f:0f:d9:5b:dc:d8:
                    87:82:46:3f:66:7f:f2:bd:93:42:ff:ec:87:10:86:
                    be:47:16:8e:9f:db:53:05:60:f4:b2:21:9c:d2:a4:
                    54:38:10:a5:22:16:e4:97:24:29:55:4a:c8:37:bf:
                    b2:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:B8:60:6D:8E:8F:D1:DA:4D:9A:8C:E3:33:E5:C4:BF:4B:14:23:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9268dc36-70fc-3724-8536-e7defe5e7381.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl

            X509v3 Authority Key Identifier:
                keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:bc40:26::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:aa:a2:e3:b2:49:7a:05:23:a4:24:91:fa:13:5c:82:5b:eb:
         ca:39:05:ee:e1:9f:b0:49:20:10:8b:3b:a4:f5:5c:7f:ab:23:
         62:4d:35:a8:68:e1:59:d4:c6:33:ce:94:b2:75:30:06:61:fa:
         f4:c4:13:1e:7c:d2:cd:e2:5c:df:99:9b:4f:96:a4:f1:89:6b:
         34:60:ac:30:14:22:05:fd:dc:86:9b:f9:9f:78:46:eb:0b:4a:
         7e:54:1d:76:df:3f:a7:ec:fd:e8:e8:b1:44:cf:91:9e:98:18:
         db:98:85:60:1e:f9:a1:51:d1:eb:98:69:0d:29:c1:ba:43:7e:
         f7:87:a1:b9:4a:64:27:14:8c:3c:ed:88:5a:d0:02:12:84:a4:
         00:14:0a:56:b9:a3:e4:33:1c:7b:4d:4f:57:12:38:24:82:b2:
         2f:67:71:de:34:cc:3b:b2:25:53:d0:78:65:ca:31:91:f2:4d:
         77:5c:39:ad:72:b4:99:87:23:aa:89:24:50:7c:e2:b2:56:c8:
         e2:f4:e1:5d:0d:d8:4f:da:ed:da:bf:bc:c5:06:3e:59:61:1a:
         f1:f3:9f:fd:4f:28:31:f5:d6:9c:cc:3c:c0:37:db:40:35:b6:
         3f:f2:d5:a0:c4:81:2f:b1:de:a8:06:9e:fb:7b:44:45:cb:39:
         2e:07:4d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 16:03:40 2024 by rpki-client on console-ams.rpki-client.org