Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7a870649-61cf-4a59-a195-226a35c00514/7a30f3f4-9e26-3c96-9672-29c6e695ea27.roa
File:                     7a30f3f4-9e26-3c96-9672-29c6e695ea27.roa (raw, json)
Hash identifier:          l/BELZWKAWALYTd/mtSAgZyI+hJ0FJ8RbiskPf/8T4U=
Subject key identifier:   CF:06:58:01:AF:AD:7D:87:37:E6:DE:92:A2:F1:94:3E:91:55:1C:49
Certificate issuer:       /CN=7a870649-61cf-4a59-a195-226a35c00514
Certificate serial:       010D0C9F432858472CD7E125C3ED16C2A27A8F80
Authority key identifier: 89:32:94:27:6F:E0:A0:38:82:E5:3D:D9:29:B6:C7:33:5E:86:C0:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7a870649-61cf-4a59-a195-226a35c00514.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7a870649-61cf-4a59-a195-226a35c00514/7a30f3f4-9e26-3c96-9672-29c6e695ea27.roa
Signing time:             Wed 11 Sep 2024 04:50:29 +0000
ROA not before:           Wed 11 Sep 2024 04:50:29 +0000
ROA not after:            Tue 10 Dec 2024 05:50:29 +0000
asID:                     1224
IP address blocks:        2620:0:c80::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7a870649-61cf-4a59-a195-226a35c00514/7a870649-61cf-4a59-a195-226a35c00514.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7a870649-61cf-4a59-a195-226a35c00514/7a870649-61cf-4a59-a195-226a35c00514.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7a870649-61cf-4a59-a195-226a35c00514.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Sep 2024 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2c:d7:e1:25:c3:ed:16:c2:a2:7a:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a870649-61cf-4a59-a195-226a35c00514
        Validity
            Not Before: Sep 11 04:50:29 2024 GMT
            Not After : Dec 10 05:50:29 2024 GMT
        Subject: CN=13b5eaf7-fbc2-4a5d-9d70-6927504fa363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b7:22:1d:8b:39:e5:c3:9e:6e:b4:bc:1e:5c:
                    31:6c:b3:3c:04:c0:5a:74:d7:bb:ed:6e:da:ae:90:
                    cf:1d:0b:50:40:0c:71:4f:ae:4f:9a:8e:6f:1f:0f:
                    0f:a2:ea:a1:17:7b:fc:f8:9c:aa:08:33:8b:40:38:
                    d5:20:89:8d:7f:fb:13:71:a1:b2:3e:d0:cc:c9:c4:
                    85:e8:77:7f:59:01:44:63:74:d0:65:c7:09:e9:27:
                    28:e1:63:a0:b7:71:ae:20:7e:74:a9:44:f2:33:da:
                    d8:46:82:25:5c:07:0d:52:ef:01:03:21:0c:77:61:
                    99:0c:d8:dc:fb:40:00:e4:23:25:7c:3d:e8:72:84:
                    3c:89:9e:5e:c1:51:a2:69:4e:2f:5d:0c:d7:02:a4:
                    18:25:57:f3:d5:62:25:66:63:af:d4:c6:91:20:f9:
                    ca:ac:43:fc:90:e3:6d:c3:2a:26:b9:91:f8:26:c6:
                    e8:d6:fa:f0:9c:28:53:9a:c7:b4:ba:cf:d8:29:cf:
                    16:6a:89:43:c9:d9:19:ab:8c:1f:16:97:d2:80:1f:
                    35:ae:e1:9d:83:17:7f:d7:99:9b:be:6d:0d:c1:3f:
                    93:34:5b:b7:50:1b:05:3d:36:76:b8:9a:20:b8:82:
                    90:88:b0:eb:7a:9c:d9:d6:99:d5:69:be:65:ec:63:
                    cf:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:06:58:01:AF:AD:7D:87:37:E6:DE:92:A2:F1:94:3E:91:55:1C:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7a870649-61cf-4a59-a195-226a35c00514/7a30f3f4-9e26-3c96-9672-29c6e695ea27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7a870649-61cf-4a59-a195-226a35c00514/7a870649-61cf-4a59-a195-226a35c00514.crl

            X509v3 Authority Key Identifier:
                keyid:89:32:94:27:6F:E0:A0:38:82:E5:3D:D9:29:B6:C7:33:5E:86:C0:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7a870649-61cf-4a59-a195-226a35c00514.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:c80::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:d1:c3:11:74:e2:cc:b4:ca:c9:c3:a3:49:11:4c:8d:f9:70:
         5b:6a:61:ff:72:58:60:39:43:12:c2:0c:00:dc:97:30:9f:eb:
         95:0c:9b:5d:26:6c:b8:d1:8c:88:6b:70:2f:25:02:83:1f:bd:
         ba:38:a4:64:c4:3f:f5:7b:b6:26:07:15:a6:91:b9:9e:0d:47:
         42:7b:98:ee:e6:db:22:b3:a3:35:ae:03:97:3b:3f:e7:d8:b9:
         93:14:49:61:1a:43:7c:c5:06:48:ee:bd:0c:02:95:4c:6c:ed:
         1c:e6:1e:bc:0f:34:c3:a6:13:91:19:fc:ee:51:3d:f3:15:d2:
         cf:98:a1:88:d0:a5:e5:fd:51:a5:b4:93:1a:8c:dd:be:25:02:
         a6:25:33:fd:fe:62:e6:f4:58:c7:77:f3:a6:84:70:84:2d:9d:
         bd:2c:ec:af:6c:cd:3b:65:a4:8d:75:49:05:07:d3:b6:9b:5c:
         0f:af:78:50:81:8a:e4:17:b9:a8:f9:e4:15:d9:75:a9:73:fd:
         e1:92:d6:f8:34:8d:e1:dd:46:46:1b:fd:e8:50:b9:2b:12:09:
         52:d8:1a:41:d7:70:f4:f4:ae:d8:21:31:ac:42:e0:e2:94:0c:
         cd:9c:0a:17:8a:6c:28:27:4c:5e:3e:e1:6e:ce:71:a8:63:ec:
         d1:12:22:ed
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEcs1+Elw+0WwqJ6j4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2E4NzA2NDktNjFjZi00YTU5LWExOTUtMjI2YTM1YzAw
NTE0MB4XDTI0MDkxMTA0NTAyOVoXDTI0MTIxMDA1NTAyOVowLzEtMCsGA1UEAxMk
MTNiNWVhZjctZmJjMi00YTVkLTlkNzAtNjkyNzUwNGZhMzYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbciHYs55cOebrS8HlwxbLM8BMBadNe77W7a
rpDPHQtQQAxxT65Pmo5vHw8PouqhF3v8+JyqCDOLQDjVIImNf/sTcaGyPtDMycSF
6Hd/WQFEY3TQZccJ6Sco4WOgt3GuIH50qUTyM9rYRoIlXAcNUu8BAyEMd2GZDNjc
+0AA5CMlfD3ocoQ8iZ5ewVGiaU4vXQzXAqQYJVfz1WIlZmOv1MaRIPnKrEP8kONt
wyomuZH4Jsbo1vrwnChTmse0us/YKc8WaolDydkZq4wfFpfSgB81ruGdgxd/15mb
vm0NwT+TNFu3UBsFPTZ2uJoguIKQiLDrepzZ1pnVab5l7GPPzwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFM8GWAGvrX2HN+bekqLxlD6RVRxJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS83YTg3
MDY0OS02MWNmLTRhNTktYTE5NS0yMjZhMzVjMDA1MTQvN2EzMGYzZjQtOWUyNi0z
Yzk2LTk2NzItMjljNmU2OTVlYTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvN2E4NzA2NDktNjFjZi00YTU5LWEx
OTUtMjI2YTM1YzAwNTE0LzdhODcwNjQ5LTYxY2YtNGE1OS1hMTk1LTIyNmEzNWMw
MDUxNC5jcmwwHwYDVR0jBBgwFoAUiTKUJ2/goDiC5T3ZKbbHM16GwEwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS83YTg3MDY0OS02MWNmLTRhNTktYTE5NS0yMjZh
MzVjMDA1MTQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAAyA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAE7RwxF04sy0ysnDo0kRTI35cFtqYf9yWGA5QxLCDADclzCf65UM
m10mbLjRjIhrcC8lAoMfvbo4pGTEP/V7tiYHFaaRuZ4NR0J7mO7m2yKzozWuA5c7
P+fYuZMUSWEaQ3zFBkjuvQwClUxs7RzmHrwPNMOmE5EZ/O5RPfMV0s+YoYjQpeX9
UaW0kxqM3b4lAqYlM/3+Yub0WMd386aEcIQtnb0s7K9szTtlpI11SQUH07abXA+v
eFCBiuQXuaj55BXZdalz/eGS1vg0jeHdRkYb/ehQuSsSCVLYGkHXcPT0rtghMaxC
4OKUDM2cCheKbCgnTF4+4W7Ocahj7NESIu0=
-----END CERTIFICATE-----
Generated at Fri Sep 20 05:59:11 2024 by rpki-client on console-fra.rpki-client.org