Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdcd237b-8c52-4d20-808c-c916ddbd962f/5f5b76ef-f608-3cee-b705-a728d08d89c0.roa
File:                     5f5b76ef-f608-3cee-b705-a728d08d89c0.roa (raw, json)
Hash identifier:          ttAIHYpV8puu8lnQHF6LaSxCowPnttihaNQmoJ+77r4=
Subject key identifier:   33:17:87:5B:95:3E:24:AB:8F:05:7D:42:09:4C:A5:D4:32:B3:28:55
Certificate issuer:       /CN=cdcd237b-8c52-4d20-808c-c916ddbd962f
Certificate serial:       010D0C9F43285846DE3A967E80983392ABAC56C0
Authority key identifier: 49:56:C4:C7:34:EE:62:CF:ED:7F:76:92:74:A9:78:8A:BC:8E:9F:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdcd237b-8c52-4d20-808c-c916ddbd962f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdcd237b-8c52-4d20-808c-c916ddbd962f/5f5b76ef-f608-3cee-b705-a728d08d89c0.roa
Signing time:             Wed 14 Aug 2024 01:00:30 +0000
ROA not before:           Wed 14 Aug 2024 01:00:30 +0000
ROA not after:            Tue 12 Nov 2024 02:00:30 +0000
asID:                     14618
IP address blocks:        2620:c3:6000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdcd237b-8c52-4d20-808c-c916ddbd962f/cdcd237b-8c52-4d20-808c-c916ddbd962f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdcd237b-8c52-4d20-808c-c916ddbd962f/cdcd237b-8c52-4d20-808c-c916ddbd962f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdcd237b-8c52-4d20-808c-c916ddbd962f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Oct 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:de:3a:96:7e:80:98:33:92:ab:ac:56:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdcd237b-8c52-4d20-808c-c916ddbd962f
        Validity
            Not Before: Aug 14 01:00:30 2024 GMT
            Not After : Nov 12 02:00:30 2024 GMT
        Subject: CN=e914c6e4-9d15-478c-8dbf-dda0440d519e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:5d:91:68:06:fb:e9:20:b7:01:5d:3a:b7:0f:
                    fc:e8:37:0d:89:7b:4f:df:6b:0d:3d:40:21:6b:e8:
                    dc:d6:92:8d:f9:9c:d0:b3:4b:a5:51:ef:e9:59:0c:
                    28:8e:fe:8b:98:c3:32:85:7c:b4:85:59:52:3d:2e:
                    2c:9d:77:0b:ac:9f:36:0e:a4:fa:11:f9:af:6c:7f:
                    80:a0:f0:01:cd:1d:ef:6d:64:04:f5:f3:5c:da:09:
                    df:e9:f4:a7:44:7b:da:08:2c:cc:97:fa:bb:a9:b5:
                    58:ee:64:28:2b:e7:3c:d8:ba:fd:48:e5:3b:8a:da:
                    69:c8:ec:d5:44:50:b6:7a:47:0c:c2:5a:45:6c:25:
                    68:b0:3d:d5:13:a5:6f:07:bc:87:67:1f:79:21:87:
                    4b:ae:0b:a2:64:0a:43:bf:a8:30:cb:f3:1d:e5:93:
                    3f:8c:a2:d3:0a:dc:30:f6:25:ff:86:b6:27:03:62:
                    fa:19:47:4f:dc:48:24:03:f3:32:f5:bd:41:55:4d:
                    8f:dd:c4:35:a0:5c:dc:0b:ec:2b:28:c3:ab:46:ea:
                    2b:59:59:46:ee:26:f4:8c:2e:08:64:89:fa:c3:8b:
                    41:ae:be:ce:69:81:9b:ff:33:f0:37:f3:7b:1e:35:
                    26:a4:7c:00:b1:33:6f:a4:68:26:ed:26:da:85:91:
                    b1:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:17:87:5B:95:3E:24:AB:8F:05:7D:42:09:4C:A5:D4:32:B3:28:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdcd237b-8c52-4d20-808c-c916ddbd962f/5f5b76ef-f608-3cee-b705-a728d08d89c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdcd237b-8c52-4d20-808c-c916ddbd962f/cdcd237b-8c52-4d20-808c-c916ddbd962f.crl

            X509v3 Authority Key Identifier:
                keyid:49:56:C4:C7:34:EE:62:CF:ED:7F:76:92:74:A9:78:8A:BC:8E:9F:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdcd237b-8c52-4d20-808c-c916ddbd962f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:c3:6000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:a8:17:08:0e:d6:cb:d0:88:bd:52:db:be:66:86:84:17:f5:
         7c:60:cb:f2:ed:d8:47:b0:e9:46:7b:02:ca:51:28:d5:48:d2:
         ee:23:45:ae:a4:30:35:09:ed:34:c4:55:71:e5:27:70:9b:35:
         d9:cf:a9:ec:23:45:5e:b3:0a:6a:5a:3c:44:8f:43:b2:4c:b6:
         79:8d:d2:b2:c3:60:56:7c:16:cc:4a:6f:88:a2:19:c5:0e:c8:
         d5:61:21:92:c4:0f:4d:c6:ef:f8:3d:8f:9a:c2:65:42:61:46:
         e5:f1:54:51:5f:42:1b:e7:a0:58:1a:36:39:31:d7:08:45:32:
         36:09:31:1d:19:79:d3:cd:4e:a6:c8:80:b4:67:3c:64:59:59:
         d5:cc:ed:97:fd:e6:f3:e5:be:89:be:43:19:85:6a:1b:65:a8:
         56:b4:23:ea:47:4b:1f:7b:69:e8:b2:69:74:5f:8a:f9:7d:37:
         3f:a6:27:2d:5c:17:da:d8:c9:59:03:6b:5a:ab:2c:69:d3:36:
         6c:2f:d1:d5:88:59:04:65:82:2d:0d:16:89:b9:7c:4f:92:c3:
         d7:ff:73:6f:b0:fc:73:66:61:aa:15:37:b7:38:d0:0c:a2:e9:
         0b:00:72:5c:8e:36:d5:58:17:c4:ea:8d:5d:38:4b:3e:8a:3e:
         5c:a8:cd:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 16:06:20 2024 by rpki-client on console-ams.rpki-client.org