Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/970b7e04-01f1-3927-90a0-79d7a904fce7.roa
File:                     970b7e04-01f1-3927-90a0-79d7a904fce7.roa (raw, json)
Hash identifier:          mNr/eNI1mTzXa6r5pV+CiC3qitj5hNOXa9D136ErFVA=
Subject key identifier:   F9:E2:11:D5:8E:77:A4:5F:3B:36:2F:22:67:7F:F0:DC:3E:23:57:ED
Certificate issuer:       /CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
Certificate serial:       010D0C9F43285847EBBF7C4D776D63047E372BE0
Authority key identifier: 06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/970b7e04-01f1-3927-90a0-79d7a904fce7.roa
Signing time:             Mon 18 Nov 2024 14:00:40 +0000
ROA not before:           Mon 18 Nov 2024 14:00:40 +0000
ROA not after:            Sun 16 Feb 2025 14:00:40 +0000
asID:                     10390
IP address blocks:        2620:10f:400e::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:eb:bf:7c:4d:77:6d:63:04:7e:37:2b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
        Validity
            Not Before: Nov 18 14:00:40 2024 GMT
            Not After : Feb 16 14:00:40 2025 GMT
        Subject: CN=d974a107-9ad8-4195-9def-b4dfc19952c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e5:fd:8c:3b:3b:1f:52:c7:26:2e:78:a6:68:
                    82:e1:dc:ce:63:c7:fe:ff:99:93:f0:cc:e5:07:ef:
                    e1:a7:e6:93:44:24:a8:ac:21:cf:89:47:b3:7d:79:
                    c7:a0:06:fe:28:cf:8b:f3:72:44:57:ef:36:79:ff:
                    b4:3a:e2:23:58:90:31:08:45:c8:6f:fe:6d:a0:62:
                    6d:be:5c:57:40:e8:e9:06:c5:f4:99:78:c0:3b:0b:
                    1b:b3:8e:61:91:ad:4a:1b:a8:76:21:6e:af:d9:f1:
                    2a:f3:b2:dd:ca:37:29:94:4c:91:e0:fb:e7:de:10:
                    55:18:82:ae:2b:34:e5:0c:2e:7c:b8:45:00:c9:cb:
                    5e:de:c8:e8:58:64:05:6d:9a:7c:6e:09:36:4e:e4:
                    b8:9c:60:34:d2:94:bc:66:75:ac:7f:72:03:86:b0:
                    2d:88:c2:00:1e:1f:8a:5c:a8:8e:12:2b:ad:c7:8c:
                    e9:d2:75:f1:fb:3e:b6:4d:e7:18:da:f0:ca:3d:ee:
                    b0:d6:aa:31:ed:74:95:27:52:3a:ad:2b:74:f3:d1:
                    b9:a6:f3:60:d4:fa:02:6e:82:db:6c:1c:aa:bd:61:
                    5c:0d:e9:93:22:65:05:bf:4d:0a:a4:45:c1:1d:06:
                    ce:31:cc:e1:7d:e4:87:5b:57:e2:8c:54:4a:7a:eb:
                    f8:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:E2:11:D5:8E:77:A4:5F:3B:36:2F:22:67:7F:F0:DC:3E:23:57:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/970b7e04-01f1-3927-90a0-79d7a904fce7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl

            X509v3 Authority Key Identifier:
                keyid:06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:10f:400e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:81:67:a4:f1:9e:05:14:7f:b2:7b:0d:dd:8e:4e:33:d8:c2:
         82:0e:6b:49:52:88:11:bc:f9:24:03:a4:ed:18:7f:7a:87:a8:
         ad:7b:fb:6a:04:cb:87:62:a9:a7:28:dd:6c:96:8a:fc:d7:e5:
         dd:f3:63:37:d0:12:51:61:d8:48:67:0d:3b:ee:97:6a:7b:6c:
         04:b4:d0:6d:bc:fb:92:3a:7f:06:51:c6:19:1a:0b:58:b3:66:
         32:75:6a:05:6e:3d:f8:fa:03:a4:87:73:cc:44:45:e6:65:5a:
         20:db:0b:e3:18:d0:93:3c:dc:96:cc:e9:13:37:16:ac:23:71:
         97:37:5e:ce:d3:c8:18:5a:db:9a:e5:2b:d4:8d:a8:56:eb:b4:
         4b:cb:90:5d:5c:f7:01:f9:2f:bb:c7:e4:a7:eb:84:be:44:d2:
         e9:5c:0f:85:0f:12:ac:22:98:3e:a0:6c:ec:e0:c5:83:ab:d9:
         f2:d8:12:af:66:0e:79:cf:fd:11:08:57:41:01:a9:7c:e9:d3:
         aa:14:f0:c8:85:5f:d6:21:aa:07:79:bb:fd:ef:9d:48:1d:e2:
         99:8c:40:df:0e:de:24:0d:08:0e:e2:c8:99:d9:b7:4a:5f:02:
         e4:b6:93:63:7f:7e:d4:42:5a:06:00:a4:62:3d:77:ed:02:ae:
         46:ec:27:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:26:07 2024 by rpki-client on console-fra.rpki-client.org