Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c500ad14-2d08-4542-9008-f15b1b862fc7/4cd7cde1-4ea2-33e8-b3de-54f58d60fb9f.roa
File:                     4cd7cde1-4ea2-33e8-b3de-54f58d60fb9f.roa (raw, json)
Hash identifier:          NBTXnhX0j6RIE8DX+SxLFWKKer0treEEoW+oAK5nhUU=
Subject key identifier:   FA:DC:65:1D:9B:6B:EA:75:68:EC:A7:6F:78:B0:88:17:3E:4F:06:07
Certificate issuer:       /CN=c500ad14-2d08-4542-9008-f15b1b862fc7
Certificate serial:       010D0C9F43285847A30C04F0CB43E71795DD8000
Authority key identifier: 5D:A9:0A:32:F7:BE:90:78:5E:23:16:99:3F:6C:BF:46:3A:E4:9E:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c500ad14-2d08-4542-9008-f15b1b862fc7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c500ad14-2d08-4542-9008-f15b1b862fc7/4cd7cde1-4ea2-33e8-b3de-54f58d60fb9f.roa
Signing time:             Wed 23 Oct 2024 13:00:41 +0000
ROA not before:           Wed 23 Oct 2024 13:00:41 +0000
ROA not after:            Tue 21 Jan 2025 14:00:41 +0000
asID:                     6596
IP address blocks:        2001:48d8::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c500ad14-2d08-4542-9008-f15b1b862fc7/c500ad14-2d08-4542-9008-f15b1b862fc7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c500ad14-2d08-4542-9008-f15b1b862fc7/c500ad14-2d08-4542-9008-f15b1b862fc7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c500ad14-2d08-4542-9008-f15b1b862fc7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a3:0c:04:f0:cb:43:e7:17:95:dd:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c500ad14-2d08-4542-9008-f15b1b862fc7
        Validity
            Not Before: Oct 23 13:00:41 2024 GMT
            Not After : Jan 21 14:00:41 2025 GMT
        Subject: CN=ec881801-bcb6-4e64-b612-74b80db5aa4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:5d:54:a7:b8:40:fa:a9:8a:ff:30:ca:55:d9:
                    8a:d9:03:8d:f7:63:e5:0c:03:e0:c0:1a:9e:4c:f9:
                    43:25:54:7f:60:cc:b8:7c:8b:63:ad:b4:56:e9:30:
                    78:0b:49:e0:b0:69:37:9f:04:a7:e1:b9:41:36:f3:
                    75:b0:e5:96:8e:29:5f:15:d8:fa:53:d7:fa:94:bb:
                    fa:63:0f:65:a0:16:18:34:4a:63:eb:01:c7:72:b6:
                    c5:c4:67:aa:a9:ac:d5:bf:f7:a6:be:81:36:c6:47:
                    55:4f:75:ce:f1:5e:cd:7f:44:18:7c:35:bc:0b:54:
                    82:77:b0:33:77:59:2d:a1:14:cf:6d:c8:59:c4:54:
                    f1:46:b0:72:04:6c:7a:f2:a8:2c:8e:f1:49:a0:c9:
                    64:db:b9:cf:c8:40:67:16:c2:62:1b:af:a8:0b:45:
                    dd:2f:cd:c8:b2:80:c4:74:61:e7:47:f1:e7:2b:f8:
                    a6:07:48:58:6f:ce:01:93:87:2d:8c:a7:58:f4:c5:
                    7c:0c:8d:2b:19:86:d9:b2:3f:08:84:87:39:2e:2a:
                    b8:21:62:a2:8a:6e:5d:8c:8d:a3:fe:2c:a2:09:75:
                    dc:97:8c:ac:cb:71:12:06:c1:4f:79:2b:d5:e7:90:
                    28:a1:3e:02:69:d3:61:b4:83:c4:6b:e6:8d:26:1c:
                    bb:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:DC:65:1D:9B:6B:EA:75:68:EC:A7:6F:78:B0:88:17:3E:4F:06:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c500ad14-2d08-4542-9008-f15b1b862fc7/4cd7cde1-4ea2-33e8-b3de-54f58d60fb9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c500ad14-2d08-4542-9008-f15b1b862fc7/c500ad14-2d08-4542-9008-f15b1b862fc7.crl

            X509v3 Authority Key Identifier:
                keyid:5D:A9:0A:32:F7:BE:90:78:5E:23:16:99:3F:6C:BF:46:3A:E4:9E:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c500ad14-2d08-4542-9008-f15b1b862fc7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:48d8::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:50:c4:00:7f:b0:39:af:48:8c:d9:34:c7:43:bf:11:e4:b1:
         80:62:a6:ee:c5:07:65:01:99:ce:19:43:9b:e0:b9:35:28:0f:
         ef:27:f9:7a:75:f8:10:2a:e1:af:6c:25:72:df:7d:41:88:e0:
         e7:15:23:8b:fb:45:90:f4:6d:21:d6:01:e7:1f:1b:e6:fe:de:
         a9:50:2c:31:eb:4d:ef:48:32:70:57:20:0d:e3:8c:81:2d:0a:
         37:bd:fb:40:e8:d2:36:d5:bb:d6:e3:94:a3:ff:ef:11:16:37:
         43:30:2e:c2:88:e7:df:45:9b:87:ff:12:bf:a6:bd:7b:ce:0b:
         ca:0a:01:02:cb:b1:32:87:69:6d:18:72:14:0f:dd:98:d7:c8:
         48:55:93:24:39:81:00:96:78:99:f8:49:35:87:87:9d:0d:b9:
         1e:7c:b2:dc:c8:f9:84:27:44:8f:41:c7:09:d8:3f:ff:1b:d6:
         52:48:8b:36:c8:e7:e7:eb:e1:3b:0f:85:95:6d:a1:03:b7:17:
         20:52:2b:69:bf:e3:ef:9a:e8:0c:9b:2a:5f:1b:dd:d9:7b:22:
         a7:7e:27:b9:b2:aa:97:e8:d9:fe:47:91:b8:95:a3:4d:2c:b0:
         a8:ab:da:5f:88:9e:8b:06:17:a0:bc:19:ca:fd:5f:7b:d1:8d:
         8e:91:bd:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:40:00 2024 by rpki-client on console-ams.rpki-client.org