Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12c922f5-d2fe-44e3-9541-84c46c7d8348/bbf82c8f-d97d-31b5-8719-70a7cd0dc080.roa
File:                     bbf82c8f-d97d-31b5-8719-70a7cd0dc080.roa (raw, json)
Hash identifier:          msWkCRXD3nodK8IGwkIkEmRy1cDl4qT07K6er1mBiio=
Subject key identifier:   B2:56:64:DB:D8:F6:F3:25:E1:56:DC:B6:50:A2:ED:61:4B:74:DD:BA
Certificate issuer:       /CN=12c922f5-d2fe-44e3-9541-84c46c7d8348
Certificate serial:       010D0C9F43285847E982FAAB11C1C464B7580340
Authority key identifier: FE:0C:D9:11:19:4F:6E:44:88:68:AF:D9:E1:AB:4D:8C:46:77:42:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12c922f5-d2fe-44e3-9541-84c46c7d8348.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12c922f5-d2fe-44e3-9541-84c46c7d8348/bbf82c8f-d97d-31b5-8719-70a7cd0dc080.roa
Signing time:             Sun 17 Nov 2024 18:47:12 +0000
ROA not before:           Sun 17 Nov 2024 18:47:12 +0000
ROA not after:            Sat 15 Feb 2025 18:47:12 +0000
asID:                     36221
IP address blocks:        2607:f7c8::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12c922f5-d2fe-44e3-9541-84c46c7d8348/12c922f5-d2fe-44e3-9541-84c46c7d8348.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12c922f5-d2fe-44e3-9541-84c46c7d8348/12c922f5-d2fe-44e3-9541-84c46c7d8348.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12c922f5-d2fe-44e3-9541-84c46c7d8348.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e9:82:fa:ab:11:c1:c4:64:b7:58:03:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12c922f5-d2fe-44e3-9541-84c46c7d8348
        Validity
            Not Before: Nov 17 18:47:12 2024 GMT
            Not After : Feb 15 18:47:12 2025 GMT
        Subject: CN=7bd93601-de47-4bea-a571-c57412f1e4c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:af:d0:d5:d6:8b:33:27:bb:4e:bc:75:6f:f5:
                    e4:bc:bd:32:f7:ca:4b:47:2f:0e:aa:89:8a:97:ec:
                    80:fa:98:c1:4a:5e:2d:d1:6f:b4:83:1f:83:19:9d:
                    0f:2b:ee:a9:5e:fd:3c:1c:cd:be:ce:0c:5f:80:28:
                    28:37:a1:d5:24:70:dc:bc:ea:82:f7:41:a9:1c:2b:
                    bb:6f:d5:86:52:02:21:41:7a:41:85:e8:05:12:94:
                    ca:d5:b1:ea:2e:1c:5c:7f:78:1d:56:02:0e:9a:b5:
                    d3:0d:90:bf:24:4d:65:54:1a:37:ff:eb:f6:7a:5f:
                    90:e6:a9:05:f9:35:31:3a:49:a3:ac:cd:a8:a6:4b:
                    a2:ab:6f:89:a7:03:04:e4:57:a8:cd:85:61:b5:ec:
                    6d:44:ad:6d:d1:80:e0:47:ba:12:9e:a2:aa:e3:79:
                    62:84:21:47:81:e8:d1:b7:8b:11:bb:c5:ee:6d:4e:
                    de:81:1d:25:fd:83:68:95:5c:02:d5:fa:79:49:2a:
                    51:0d:6d:9b:84:f4:58:14:0f:96:37:b2:9e:33:4a:
                    89:80:dc:bb:8c:0a:ea:f6:03:37:aa:80:21:6f:0f:
                    fe:3a:cc:02:5a:77:df:36:4c:6b:f5:e8:89:cf:71:
                    41:1d:44:f0:f6:58:3e:5e:dc:e9:63:27:7d:52:8c:
                    f5:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:56:64:DB:D8:F6:F3:25:E1:56:DC:B6:50:A2:ED:61:4B:74:DD:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12c922f5-d2fe-44e3-9541-84c46c7d8348/bbf82c8f-d97d-31b5-8719-70a7cd0dc080.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12c922f5-d2fe-44e3-9541-84c46c7d8348/12c922f5-d2fe-44e3-9541-84c46c7d8348.crl

            X509v3 Authority Key Identifier:
                keyid:FE:0C:D9:11:19:4F:6E:44:88:68:AF:D9:E1:AB:4D:8C:46:77:42:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12c922f5-d2fe-44e3-9541-84c46c7d8348.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f7c8::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:c1:a6:7d:be:78:35:23:2c:c8:6e:b4:3f:a2:d0:fa:62:69:
         d8:b8:3e:45:17:4e:38:6c:e6:b7:23:f5:9d:07:b1:30:ac:86:
         44:de:58:75:45:36:93:65:c5:eb:dc:7a:cc:3e:cc:6e:ea:34:
         0f:5a:57:06:da:40:84:78:9a:77:f2:28:f9:c8:cd:cd:8b:2d:
         36:1a:91:2b:f7:1d:ec:b4:05:14:fd:01:69:ce:49:78:dd:18:
         b1:16:d2:f0:64:c5:94:73:72:9d:44:23:da:d6:93:74:55:ed:
         2d:38:78:0d:f5:50:ae:98:82:af:c9:94:b1:ad:55:a6:80:49:
         f1:03:81:cf:f8:4a:80:f5:9a:02:3b:e7:90:09:59:6d:82:bb:
         a5:18:54:a0:83:4d:e1:ec:eb:7b:b5:cb:f6:d5:5f:75:15:a2:
         bd:b4:5f:df:64:38:12:75:48:b4:37:ef:f9:fa:3c:3c:c6:1d:
         36:22:23:ab:67:6e:81:52:15:03:b7:7d:31:7c:21:54:95:a9:
         d4:0c:89:be:dc:90:dc:bf:13:39:6f:65:0a:81:bd:e6:69:3c:
         4e:d2:d9:fa:7f:d9:91:02:83:2c:e3:b2:b7:8d:ef:de:0b:25:
         7f:c7:97:09:73:50:b6:06:56:6e:98:6a:3b:c9:46:0f:e0:68:
         de:40:bd:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:18 2024 by rpki-client on console-ams.rpki-client.org