Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/195aa559-2ee4-466a-993d-e35043b7752b/4290d087-dcc9-3d70-8298-b24398950b3a.roa
File:                     4290d087-dcc9-3d70-8298-b24398950b3a.roa (raw, json)
Hash identifier:          +Ltn2sy+K4IVPyB+6ZTeLmUvuTs1aI/n1URl0dunz/g=
Subject key identifier:   A2:7E:91:5D:30:F8:6F:0B:56:AA:1A:83:7D:60:73:8A:64:0F:6E:62
Certificate issuer:       /CN=195aa559-2ee4-466a-993d-e35043b7752b
Certificate serial:       010D0C9F43285847D6CF4DF98B2423CE7ECAA980
Authority key identifier: C8:74:0E:F2:1B:CC:D0:36:65:A9:AE:02:D3:6A:A3:E5:B7:BD:97:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/195aa559-2ee4-466a-993d-e35043b7752b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/195aa559-2ee4-466a-993d-e35043b7752b/4290d087-dcc9-3d70-8298-b24398950b3a.roa
Signing time:             Mon 11 Nov 2024 02:00:27 +0000
ROA not before:           Mon 11 Nov 2024 02:00:27 +0000
ROA not after:            Sun 09 Feb 2025 02:00:27 +0000
asID:                     399970
IP address blocks:        2620:10f:f000::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/195aa559-2ee4-466a-993d-e35043b7752b/195aa559-2ee4-466a-993d-e35043b7752b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/195aa559-2ee4-466a-993d-e35043b7752b/195aa559-2ee4-466a-993d-e35043b7752b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/195aa559-2ee4-466a-993d-e35043b7752b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d6:cf:4d:f9:8b:24:23:ce:7e:ca:a9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=195aa559-2ee4-466a-993d-e35043b7752b
        Validity
            Not Before: Nov 11 02:00:27 2024 GMT
            Not After : Feb  9 02:00:27 2025 GMT
        Subject: CN=7f521698-d236-4248-a559-016961b9b1eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:db:c5:d8:6e:c8:1c:2c:9f:55:ec:ca:0d:18:
                    0d:ff:45:57:02:d5:36:0b:c2:9b:ce:10:89:3a:c7:
                    d0:5b:c7:ea:f1:c6:6c:c7:53:8f:40:05:75:fd:7d:
                    46:35:45:c6:36:ca:be:01:6c:82:e1:d7:45:4c:1e:
                    66:62:d5:85:be:3d:fe:e7:b8:81:37:30:ce:ed:68:
                    b1:cc:ef:37:a7:12:58:93:7f:f3:18:6a:99:49:d0:
                    c4:c6:09:b2:84:19:05:af:c3:7d:33:75:6f:39:39:
                    39:a8:9f:3d:7f:ee:11:f0:f0:53:b8:19:4a:64:3b:
                    3b:0b:9b:bc:61:5c:06:9a:0b:ad:c0:c0:c0:28:63:
                    ec:6a:60:e0:d9:02:54:d9:a2:78:a9:e0:cc:99:32:
                    79:95:b3:1b:2b:10:37:2e:02:51:3a:84:06:5b:9d:
                    6c:c3:29:b7:b4:8e:d9:e9:d1:e2:27:38:59:b7:21:
                    c9:b0:9e:ab:04:b2:9b:c4:ab:78:41:6a:7d:38:33:
                    4c:e3:56:51:69:ad:04:54:b4:8e:b6:6a:08:0b:0c:
                    e6:b8:c0:19:f5:f2:24:00:23:aa:54:2c:39:78:5a:
                    a5:08:f9:16:28:72:25:d5:c2:32:32:59:40:3a:bf:
                    05:2f:aa:1c:87:94:b2:b0:e5:a5:be:42:21:89:fc:
                    99:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:7E:91:5D:30:F8:6F:0B:56:AA:1A:83:7D:60:73:8A:64:0F:6E:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/195aa559-2ee4-466a-993d-e35043b7752b/4290d087-dcc9-3d70-8298-b24398950b3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/195aa559-2ee4-466a-993d-e35043b7752b/195aa559-2ee4-466a-993d-e35043b7752b.crl

            X509v3 Authority Key Identifier:
                keyid:C8:74:0E:F2:1B:CC:D0:36:65:A9:AE:02:D3:6A:A3:E5:B7:BD:97:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/195aa559-2ee4-466a-993d-e35043b7752b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:10f:f000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:94:7e:33:f0:37:28:3d:b4:af:73:51:72:c9:66:bf:b6:a9:
         e4:b3:bf:37:b2:b6:9b:40:eb:0d:f5:43:72:69:3d:e7:76:d1:
         dd:3b:87:55:d6:d7:15:be:af:1c:ff:9c:0f:46:36:07:a1:c7:
         b4:a7:f2:77:83:3f:6b:bb:f5:f5:69:02:99:c7:98:8f:0d:ff:
         e1:6a:b0:6c:aa:56:fe:2d:57:ea:18:5f:4f:29:85:28:b7:7b:
         4d:b0:1e:26:06:07:b3:7a:11:ba:8c:ed:71:ff:40:98:eb:df:
         0c:41:ca:0b:8f:02:7d:a3:de:0e:e2:42:9a:51:ac:99:ee:6c:
         61:ae:a5:0a:0c:e2:6d:b2:45:ac:de:1f:f6:b7:21:53:d7:bb:
         45:04:ce:45:67:d3:21:2a:23:11:2d:c7:b3:79:14:48:b6:1d:
         7e:83:3a:f9:d2:79:97:e0:b1:f1:13:a1:db:2d:31:95:71:80:
         2b:e8:23:ea:ab:40:1b:14:76:1e:6a:4b:38:b8:fb:63:ae:2e:
         c4:1d:6c:3b:35:24:b8:ee:c5:da:e7:bb:b9:49:96:9a:a4:27:
         44:74:63:dd:a0:ce:a8:e3:ff:06:a7:63:a3:7c:43:1e:91:f3:
         8f:0b:f0:96:89:bf:8f:df:18:03:d3:0d:50:38:b4:60:83:f6:
         d4:9a:47:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:30 2024 by rpki-client on console-ams.rpki-client.org