Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6a38b089-4bb1-4c65-837b-853a9a3398e1/9b69fb41-a0aa-3c96-a31c-05de7f90e9de.roa
File:                     9b69fb41-a0aa-3c96-a31c-05de7f90e9de.roa (raw, json)
Hash identifier:          8vDpvJ5EZycOnmQQWpJWBStmM+EycM1QC/IkKIRoq9M=
Subject key identifier:   1D:FF:48:61:DE:F4:7B:70:67:4F:A0:FF:A4:D6:8A:32:7A:13:CD:F9
Certificate issuer:       /CN=6a38b089-4bb1-4c65-837b-853a9a3398e1
Certificate serial:       010D0C9F432858475910B608634BBA7D1C468A80
Authority key identifier: 61:8B:A2:DB:42:0B:DE:9C:E0:19:58:25:1E:A4:C7:E7:20:05:FD:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6a38b089-4bb1-4c65-837b-853a9a3398e1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6a38b089-4bb1-4c65-837b-853a9a3398e1/9b69fb41-a0aa-3c96-a31c-05de7f90e9de.roa
Signing time:             Fri 27 Sep 2024 01:00:31 +0000
ROA not before:           Fri 27 Sep 2024 01:00:31 +0000
ROA not after:            Thu 26 Dec 2024 02:00:31 +0000
asID:                     5650
IP address blocks:        64.49.0.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6a38b089-4bb1-4c65-837b-853a9a3398e1/6a38b089-4bb1-4c65-837b-853a9a3398e1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6a38b089-4bb1-4c65-837b-853a9a3398e1/6a38b089-4bb1-4c65-837b-853a9a3398e1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6a38b089-4bb1-4c65-837b-853a9a3398e1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:59:10:b6:08:63:4b:ba:7d:1c:46:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a38b089-4bb1-4c65-837b-853a9a3398e1
        Validity
            Not Before: Sep 27 01:00:31 2024 GMT
            Not After : Dec 26 02:00:31 2024 GMT
        Subject: CN=0e3437fb-b6e1-4c39-8c53-c49f2f49f3ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:17:5b:4f:c5:ca:d5:c7:19:41:85:ed:55:61:
                    03:e3:82:ff:7b:fd:f3:c6:b1:a5:b7:ab:c4:e2:bf:
                    d5:90:22:39:6c:4e:c2:79:5c:dc:2f:36:20:3d:5f:
                    5b:ce:9a:06:6a:3d:88:03:13:0b:4e:63:01:aa:13:
                    01:1c:ad:03:ed:41:50:7c:43:5e:8b:84:5d:f9:d9:
                    74:af:69:90:09:e6:07:31:c2:4a:66:61:33:00:c3:
                    b1:e0:bf:7f:b1:30:24:ae:6b:7c:1e:ba:02:35:5f:
                    25:91:49:6e:16:e5:63:11:85:d3:71:86:9f:89:cb:
                    2d:ad:bc:e2:84:09:87:d7:21:76:e4:86:64:22:1d:
                    e3:90:a9:85:0c:38:7a:b3:62:55:81:7f:90:37:89:
                    1e:b9:39:da:b6:8b:d2:b2:de:07:7d:fc:2d:42:e2:
                    8e:b4:87:5b:5d:2e:da:24:dc:1c:cd:6d:36:bc:42:
                    46:b6:89:7a:00:94:91:9e:0e:33:fb:3b:5f:a5:35:
                    99:3f:e9:fe:b8:ad:24:c0:8f:ee:ca:4a:de:fd:f4:
                    f2:8d:d8:9c:d9:e3:6f:e9:66:38:ad:9f:22:dd:1a:
                    d4:fa:df:7b:26:7e:61:04:b4:5b:b9:90:8f:1a:ff:
                    a9:30:1f:10:5a:5f:ea:c1:1d:11:d2:d0:53:29:9d:
                    3a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:FF:48:61:DE:F4:7B:70:67:4F:A0:FF:A4:D6:8A:32:7A:13:CD:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6a38b089-4bb1-4c65-837b-853a9a3398e1/9b69fb41-a0aa-3c96-a31c-05de7f90e9de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6a38b089-4bb1-4c65-837b-853a9a3398e1/6a38b089-4bb1-4c65-837b-853a9a3398e1.crl

            X509v3 Authority Key Identifier:
                keyid:61:8B:A2:DB:42:0B:DE:9C:E0:19:58:25:1E:A4:C7:E7:20:05:FD:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6a38b089-4bb1-4c65-837b-853a9a3398e1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.49.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:10:1a:e7:c6:f4:1d:93:8a:4d:b1:86:ac:6e:a1:ed:f5:de:
         64:97:a2:e0:86:f6:7c:47:4e:ff:75:5e:6d:d7:ef:07:9f:cd:
         36:c3:09:47:d5:3b:2d:04:10:ff:b2:3b:10:0e:b8:13:fa:34:
         61:e4:61:91:4b:1c:3a:6d:b9:46:e8:22:9b:b4:05:0f:5b:f7:
         0b:0e:ea:4d:b4:67:0b:d8:fa:06:c8:3a:b6:f8:a0:4f:bc:dd:
         1e:74:f2:0d:9a:38:5c:46:c7:54:f0:df:44:e2:17:58:31:e0:
         75:87:ae:4a:bb:23:cc:92:41:33:ff:48:db:8d:6a:66:8a:9b:
         71:3a:4e:48:a3:2f:94:c6:dc:a5:6a:69:39:14:0f:e3:f5:f6:
         96:fa:35:6d:86:ea:a0:56:73:8f:78:8e:02:d0:85:41:17:da:
         12:39:db:57:fa:c5:07:da:67:cb:d7:d2:1b:e2:01:a2:d5:97:
         08:13:bb:9a:a5:7b:ac:f8:06:24:aa:c4:ab:4d:53:3e:e1:66:
         fc:67:8c:45:98:7c:b5:4d:33:68:b4:3b:6f:b9:a4:d8:62:e3:
         7c:cc:f1:0c:f6:d0:fc:60:71:79:f6:7a:fa:1b:79:b6:f4:2d:
         9e:9d:4a:40:15:b2:9d:c7:b2:13:6c:fd:e0:e4:1f:2e:da:b6:
         75:70:cb:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:24:02 2024 by rpki-client on console-fra.rpki-client.org