Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/4b21fd8d-2d2e-3082-9496-019de0704239.roa
File:                     4b21fd8d-2d2e-3082-9496-019de0704239.roa (raw, json)
Hash identifier:          nIqpAuvZC6Du1uibrLO1gsCxOt3x6//erUQmnln4W7U=
Subject key identifier:   D3:8E:F1:F4:7E:6A:C6:33:C0:08:DD:32:19:9B:2C:B1:04:BC:5E:3E
Certificate issuer:       /CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d
Certificate serial:       010D0C9F4328584789EBFCF279F8D0008821F1C0
Authority key identifier: D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/4b21fd8d-2d2e-3082-9496-019de0704239.roa
Signing time:             Mon 14 Oct 2024 13:00:47 +0000
ROA not before:           Mon 14 Oct 2024 13:00:47 +0000
ROA not after:            Sun 12 Jan 2025 14:00:47 +0000
asID:                     393885
IP address blocks:        2604:4a00:7000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:89:eb:fc:f2:79:f8:d0:00:88:21:f1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d
        Validity
            Not Before: Oct 14 13:00:47 2024 GMT
            Not After : Jan 12 14:00:47 2025 GMT
        Subject: CN=ab0bf8fa-13f0-4692-aa3f-5f3bb6f232cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:32:12:1c:d7:a0:89:70:96:15:f3:44:31:a4:
                    93:26:4b:bd:f5:a3:af:8e:44:f4:fc:bb:64:03:6f:
                    d3:62:e4:97:db:93:6c:90:4f:7b:cc:25:4b:42:77:
                    21:ea:7c:66:78:41:75:41:09:f5:70:16:d3:a2:66:
                    7a:2e:e0:f7:4e:4c:e4:57:35:66:db:63:9d:00:73:
                    f3:9c:24:a6:bf:4a:84:10:b5:84:83:01:22:49:bb:
                    c9:45:ae:9f:0f:55:e1:9b:0f:e3:4d:87:4d:11:7c:
                    46:49:5e:bf:ea:d1:b9:11:e7:e4:66:24:21:31:b1:
                    71:d7:b0:7e:4c:1c:c4:5f:21:7d:5a:26:50:1c:ea:
                    5b:84:c7:9d:38:ea:75:e0:c4:c2:b7:9f:f2:0c:c2:
                    e1:99:aa:41:9e:dc:bf:5b:ae:f5:8f:09:85:15:e4:
                    f5:10:17:0f:06:c8:99:9b:46:95:43:24:f7:85:f7:
                    71:6e:4b:86:b9:3f:79:16:95:f0:46:0d:39:11:75:
                    b0:7c:5a:ce:12:08:82:7a:4f:3c:d7:57:10:78:02:
                    cd:57:d8:f6:55:cb:aa:84:76:f8:52:cf:86:13:5e:
                    1e:b0:d5:4f:7a:2f:01:03:d2:96:d7:8f:4a:a0:22:
                    f6:6a:2a:44:f2:fc:32:5b:8c:6f:8a:ba:0e:c9:af:
                    57:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:8E:F1:F4:7E:6A:C6:33:C0:08:DD:32:19:9B:2C:B1:04:BC:5E:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/4b21fd8d-2d2e-3082-9496-019de0704239.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl

            X509v3 Authority Key Identifier:
                keyid:D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:4a00:7000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:d4:12:0f:a9:e1:c3:a3:dd:ed:f6:3b:44:9b:9b:2a:40:ea:
         18:e2:a4:20:7e:42:a2:92:d8:46:dc:76:b4:cb:ea:55:d2:09:
         23:2f:d4:f6:2d:45:a6:f7:56:46:fb:fb:bc:d8:8c:5f:a3:83:
         5f:92:a1:5f:e6:32:e6:be:a2:eb:3b:84:64:57:1e:b7:e4:f3:
         9f:e3:b5:ea:7a:92:b7:f6:96:b0:84:5f:19:29:36:c9:6b:33:
         a5:14:0a:e1:91:3e:90:eb:bc:b2:22:28:12:36:dc:80:1c:61:
         fb:8e:2b:3f:ba:d7:9f:fb:81:ee:15:2e:42:a1:3d:01:5b:42:
         2d:ee:bf:f7:1d:78:c1:79:62:b5:1f:4f:59:6a:79:56:1e:c1:
         bb:99:0c:f2:d4:55:50:91:e5:ff:79:49:a2:7e:8c:c9:f0:40:
         0d:b1:4d:15:8b:ed:eb:ff:45:38:e2:da:81:ff:48:bc:d5:e6:
         62:a1:9d:14:da:0a:ff:51:48:cf:5f:03:1a:d9:29:eb:1a:0e:
         1d:f0:8d:ce:da:4e:08:e5:f4:28:ca:75:34:55:66:ff:4c:0f:
         29:06:f0:df:18:e8:a3:d1:76:9f:43:b7:80:8a:b5:68:05:5c:
         f3:bb:1a:7a:c1:1a:48:47:b3:42:8d:c5:61:3d:7b:05:72:bc:
         67:8c:35:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:56:00 2024 by rpki-client on console-ams.rpki-client.org