Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/f7f7aba2-2da8-3ee5-b6c1-90e11a9c3282.roa
File:                     f7f7aba2-2da8-3ee5-b6c1-90e11a9c3282.roa (raw, json)
Hash identifier:          t38W5g1lczNuRZneq0DauZ5DCWpKw9up04oYfFi/5Q4=
Subject key identifier:   D5:2A:47:69:D4:7E:E9:CD:8B:65:D8:18:0F:D4:71:D1:22:E5:14:25
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285847D6CF4227081E5FEBA8AC0900
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/f7f7aba2-2da8-3ee5-b6c1-90e11a9c3282.roa
Signing time:             Mon 11 Nov 2024 02:00:27 +0000
ROA not before:           Mon 11 Nov 2024 02:00:27 +0000
ROA not after:            Sun 09 Feb 2025 02:00:27 +0000
asID:                     852
IP address blocks:        2001:569::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d6:cf:42:27:08:1e:5f:eb:a8:ac:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Nov 11 02:00:27 2024 GMT
            Not After : Feb  9 02:00:27 2025 GMT
        Subject: CN=0c31ecc4-3bff-425a-b3de-007c12be36b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:85:5e:ad:5e:d9:44:dc:2d:62:10:ea:e8:9c:
                    9d:1d:ee:8d:9f:6c:83:cd:60:ac:a2:ed:d0:c9:72:
                    f3:8b:70:31:ea:6e:a6:c2:ac:ec:bc:23:05:3a:be:
                    85:72:0a:e9:73:22:ae:d7:b3:68:a5:c7:cb:86:3d:
                    8f:55:35:9a:72:0d:f1:b0:36:ed:db:2e:f8:7b:ce:
                    d2:f3:4b:c2:08:09:b3:4d:db:0a:67:a5:8e:49:b0:
                    a8:46:07:ad:01:1e:2a:43:b6:0c:e9:6f:9b:52:e0:
                    39:b2:ea:a0:38:79:fa:46:b3:c2:49:60:3e:7b:cc:
                    d1:58:47:a8:62:f7:5a:51:d5:b5:c7:3e:07:78:65:
                    88:7a:d6:7c:34:3e:df:b0:4d:7b:e0:2f:7a:5b:4e:
                    d7:f6:a4:11:26:ef:9c:08:bf:0f:30:51:cd:68:67:
                    9b:b3:33:fa:50:c9:f3:ad:23:14:ae:b4:c3:34:90:
                    4d:84:a0:e7:7e:6a:84:f8:0a:46:b5:56:28:7a:fa:
                    e5:07:ea:94:2d:20:58:e8:ac:b6:f9:aa:54:a9:2c:
                    25:c5:57:2d:23:5c:b9:da:27:2a:be:19:74:28:86:
                    dc:b7:e6:bb:5b:17:19:79:a9:e5:ff:08:dd:01:c5:
                    12:31:48:e0:d3:dd:da:cd:48:d9:da:44:99:a4:b4:
                    29:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:2A:47:69:D4:7E:E9:CD:8B:65:D8:18:0F:D4:71:D1:22:E5:14:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/f7f7aba2-2da8-3ee5-b6c1-90e11a9c3282.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:569::/33

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:56:36:23:a6:98:d5:3d:4e:08:de:49:64:70:4c:86:6d:91:
         b2:17:92:8b:50:b5:9c:c9:34:89:36:67:30:ed:f0:d6:61:b0:
         74:03:2e:5d:ea:11:02:ad:f5:2b:6b:4a:22:47:48:d7:0c:fe:
         3b:12:9a:80:46:66:b5:5f:5d:b1:55:d2:92:46:e0:90:40:bc:
         8b:f7:8a:47:43:e1:84:dc:95:70:c0:a9:2c:3b:78:cd:60:7d:
         47:0c:c1:5f:fd:6b:17:0d:b9:c6:48:18:b4:2a:9e:ee:19:af:
         fd:d2:6b:87:9a:f2:23:34:f9:62:6c:56:63:4d:5c:2a:76:f0:
         18:2c:9e:61:0c:e3:70:29:75:de:f7:f3:ea:c6:24:11:7b:80:
         0c:d6:fd:18:36:da:d6:7c:ce:9e:d7:f3:d3:88:b0:f0:80:8f:
         9d:3d:97:4a:eb:1d:e3:73:90:87:22:be:ff:bd:c4:17:cd:ec:
         07:13:ce:a8:e2:2a:af:41:03:48:56:77:35:e9:da:4a:bc:70:
         6c:ad:82:20:ca:e1:0e:38:0f:13:c6:42:1a:23:17:d8:2d:d8:
         23:a4:1c:51:4b:e1:af:00:a1:71:3e:a6:5b:ce:41:72:ad:3d:
         50:5b:21:f7:76:72:67:68:36:e0:fc:ee:1e:e7:39:d3:95:1b:
         ef:47:2b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:59 2024 by rpki-client on console-fra.rpki-client.org