Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7e90e4d5-b838-4ae7-b7c8-8aaa4e183faf/d8e3845c-489e-34ef-886c-d05badd37cd6.roa
File:                     d8e3845c-489e-34ef-886c-d05badd37cd6.roa (raw, json)
Hash identifier:          8m4FpT3bJ84jfrQhGV1D2dd6xqBwsbjc67hNLIVepqw=
Subject key identifier:   E9:69:DF:A1:63:49:6B:89:FA:9E:50:67:6C:38:60:C7:E2:0F:78:C8
Certificate issuer:       /CN=7e90e4d5-b838-4ae7-b7c8-8aaa4e183faf
Certificate serial:       010D0C9F4328584774FB9184C9713280B65FB380
Authority key identifier: B7:06:E1:B2:41:33:5E:09:63:69:1B:EC:9D:F3:AF:83:83:23:51:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7e90e4d5-b838-4ae7-b7c8-8aaa4e183faf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7e90e4d5-b838-4ae7-b7c8-8aaa4e183faf/d8e3845c-489e-34ef-886c-d05badd37cd6.roa
Signing time:             Mon 07 Oct 2024 01:00:31 +0000
ROA not before:           Mon 07 Oct 2024 01:00:31 +0000
ROA not after:            Sun 05 Jan 2025 02:00:31 +0000
asID:                     36427
IP address blocks:        2620:8e:8000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7e90e4d5-b838-4ae7-b7c8-8aaa4e183faf/7e90e4d5-b838-4ae7-b7c8-8aaa4e183faf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7e90e4d5-b838-4ae7-b7c8-8aaa4e183faf/7e90e4d5-b838-4ae7-b7c8-8aaa4e183faf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7e90e4d5-b838-4ae7-b7c8-8aaa4e183faf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:74:fb:91:84:c9:71:32:80:b6:5f:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e90e4d5-b838-4ae7-b7c8-8aaa4e183faf
        Validity
            Not Before: Oct  7 01:00:31 2024 GMT
            Not After : Jan  5 02:00:31 2025 GMT
        Subject: CN=91fc55ac-c8f4-4688-8329-333fb444dc42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:19:82:bb:0b:a1:57:a3:3e:ba:93:e8:a1:da:
                    2f:46:6f:e9:a0:bc:ed:a7:f9:a7:bf:5d:b5:8a:29:
                    e3:bc:4d:10:ff:0f:ff:5a:bd:2c:53:96:ad:d3:5b:
                    f1:9f:7b:d5:6b:88:b1:dc:7c:09:df:1b:ee:60:46:
                    71:1c:56:78:8a:10:ed:10:dc:7c:f9:8c:84:d0:1e:
                    9e:b2:9a:31:40:6f:df:9d:62:e1:e3:a8:8a:ee:32:
                    84:6c:ea:98:0e:c2:c4:44:de:f2:d0:2f:98:1d:0e:
                    6d:6b:7c:a1:b4:e7:ec:5c:04:d7:b7:15:1f:7b:07:
                    41:df:09:37:77:59:bd:93:8a:d1:19:27:bd:75:3c:
                    0f:20:bc:a9:ee:01:83:cf:3a:e4:5a:7d:92:c1:a6:
                    46:8e:a1:74:bf:70:67:f5:2e:0b:12:7b:3d:7f:00:
                    6c:6d:a0:43:8a:17:d7:7b:81:04:73:97:f1:c1:65:
                    44:cc:71:6b:73:0a:b0:58:45:a5:78:e1:ab:6e:8a:
                    24:9c:11:f8:9f:fd:1f:af:5a:00:8a:fc:ae:c5:a4:
                    14:e5:cf:ad:8c:d0:eb:df:82:81:dd:2f:e4:a4:b2:
                    6c:c5:18:9e:46:fb:09:33:54:b9:d2:66:cb:2b:2f:
                    b9:66:b3:54:9a:08:f3:e6:a2:84:a6:97:5e:a8:6d:
                    9b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:69:DF:A1:63:49:6B:89:FA:9E:50:67:6C:38:60:C7:E2:0F:78:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7e90e4d5-b838-4ae7-b7c8-8aaa4e183faf/d8e3845c-489e-34ef-886c-d05badd37cd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7e90e4d5-b838-4ae7-b7c8-8aaa4e183faf/7e90e4d5-b838-4ae7-b7c8-8aaa4e183faf.crl

            X509v3 Authority Key Identifier:
                keyid:B7:06:E1:B2:41:33:5E:09:63:69:1B:EC:9D:F3:AF:83:83:23:51:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7e90e4d5-b838-4ae7-b7c8-8aaa4e183faf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:8e:8000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:d2:41:b3:a1:bd:2d:77:b8:8f:95:07:6b:ad:48:b6:4d:e1:
         2b:3c:35:94:33:79:33:43:62:2b:69:7a:5f:b0:b2:f3:7f:82:
         e9:77:eb:ed:3b:4d:bb:82:cc:1a:cd:4b:54:7d:97:47:ba:62:
         a6:93:9b:8c:44:f4:a5:e5:3a:6f:ee:c5:fb:87:07:9a:79:1a:
         d1:4c:93:2d:6b:e0:5c:de:f1:2c:13:ab:c7:0a:04:58:c7:e7:
         db:3a:c0:6b:96:c3:27:cf:85:41:7e:28:db:33:90:85:69:5c:
         bb:93:07:2d:57:4d:0f:c7:11:ed:8f:d4:51:84:0e:a1:0b:cd:
         14:c5:f0:20:2f:72:59:b9:2b:3d:2f:f4:c0:e9:3b:b3:31:75:
         66:5d:6a:4c:d0:60:d3:61:cb:02:e9:bb:f8:40:a0:2e:07:e8:
         66:81:e2:44:40:08:0c:04:56:93:ba:b1:15:a9:4d:8c:c7:d1:
         f9:01:3e:04:8e:a7:d2:17:2f:72:af:5c:42:cf:e5:e7:8e:b0:
         4b:1b:77:10:a1:4e:f1:7b:a7:77:03:db:68:a8:de:11:0b:07:
         a7:43:80:87:d8:ae:16:7d:d5:8b:4d:d0:8e:40:81:56:6c:02:
         15:c0:40:77:3a:ee:31:bc:1a:6d:57:df:62:84:d4:3b:b6:30:
         da:b6:5c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:34 2024 by rpki-client on console-ams.rpki-client.org