Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9/5b1749b9-430c-33dd-8b86-5dc9268efa1b.roa
File:                     5b1749b9-430c-33dd-8b86-5dc9268efa1b.roa (raw, json)
Hash identifier:          l23KVSpXMPa9P/NS89yctjZUtc6YSDUUkvHj/iggkzk=
Subject key identifier:   6B:22:E4:90:10:B0:36:59:30:8B:48:A8:35:E3:FC:92:23:29:53:C0
Certificate issuer:       /CN=8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9
Certificate serial:       010D0C9F432858478CB684CA871CFA2478BB9F00
Authority key identifier: 8D:C7:1D:9B:12:BB:F9:46:70:21:D3:1A:46:40:F5:27:20:ED:D5:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9/5b1749b9-430c-33dd-8b86-5dc9268efa1b.roa
Signing time:             Tue 15 Oct 2024 13:00:47 +0000
ROA not before:           Tue 15 Oct 2024 13:00:47 +0000
ROA not after:            Mon 13 Jan 2025 14:00:47 +0000
asID:                     396204
IP address blocks:        2620:22:a000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8c:b6:84:ca:87:1c:fa:24:78:bb:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9
        Validity
            Not Before: Oct 15 13:00:47 2024 GMT
            Not After : Jan 13 14:00:47 2025 GMT
        Subject: CN=32053a08-f6f9-40cc-b792-8de036cad6f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:46:5a:12:96:7d:74:ff:fb:02:70:07:e4:fb:
                    72:92:44:0d:7d:63:0f:76:1d:0c:27:68:12:4f:27:
                    01:57:17:c7:27:10:5c:71:39:e4:98:23:cd:a8:9e:
                    e9:58:0d:50:c9:ca:cd:3e:a1:fa:7c:96:0b:04:49:
                    aa:55:7f:1e:f2:34:46:79:30:68:32:12:44:38:40:
                    bb:4b:2c:05:b2:bb:58:ef:ae:37:32:1d:be:d1:46:
                    a3:e3:51:64:e1:03:ad:58:63:35:b4:3b:3a:8a:ab:
                    fd:94:45:76:e8:58:56:76:2a:66:bf:28:83:d7:6f:
                    30:48:6e:32:26:5c:ff:e0:6a:1e:58:32:7d:0e:4e:
                    c9:cf:e4:a7:e7:4c:36:e5:ff:9b:72:5c:33:cb:dd:
                    56:1b:22:33:c9:60:ec:b7:ea:78:a9:e9:cb:24:29:
                    ed:69:eb:8d:7c:3e:55:8e:ae:50:3f:33:c0:cc:4b:
                    95:0c:17:0b:d5:e5:77:5c:16:b7:e4:af:f3:c5:7e:
                    4a:f9:1e:ba:8f:e0:26:dc:2d:db:a5:73:2f:e1:73:
                    31:aa:25:65:60:fe:20:29:5a:d1:68:9e:69:1a:92:
                    0b:2e:5a:de:69:39:69:ed:ba:fb:1d:9a:1f:88:af:
                    42:a3:69:2d:f2:73:7a:43:a5:76:ff:74:45:0c:d7:
                    ae:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:22:E4:90:10:B0:36:59:30:8B:48:A8:35:E3:FC:92:23:29:53:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9/5b1749b9-430c-33dd-8b86-5dc9268efa1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9.crl

            X509v3 Authority Key Identifier:
                keyid:8D:C7:1D:9B:12:BB:F9:46:70:21:D3:1A:46:40:F5:27:20:ED:D5:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:22:a000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:5b:09:10:83:d3:16:5b:0c:38:44:73:bd:ef:ec:69:30:33:
         db:54:5c:ba:b8:3a:cb:0a:d1:87:da:b7:70:f2:fc:95:8a:0e:
         81:1f:ce:2c:9f:61:24:6d:b3:4d:19:b9:cf:e4:3b:46:08:84:
         8d:26:15:e7:40:83:f6:40:e3:1b:0e:14:27:7b:c5:99:4b:1a:
         d4:c5:2a:23:04:f9:1e:fe:b4:7f:b9:a2:ca:74:13:95:90:74:
         83:b9:d1:e0:db:f5:75:77:f0:4f:ca:42:21:d0:da:d6:2c:4e:
         d2:90:90:65:b4:46:0a:7b:c9:83:08:1c:1a:0d:67:09:4b:40:
         11:dc:0d:b4:fc:00:60:49:1d:8c:f6:23:a2:a2:bc:3c:ce:c9:
         4c:43:a9:4b:f0:c1:dc:f9:2f:9f:c1:0b:c5:4a:86:c1:61:9d:
         02:06:e1:12:ba:94:51:9b:00:f4:c5:d2:f0:d9:08:89:98:de:
         cf:31:59:b7:42:4f:bb:b7:02:ae:63:2d:a1:65:da:21:c8:3e:
         b5:15:6f:e3:17:a6:e9:eb:0a:5e:1d:c9:81:f8:53:65:5f:e8:
         fd:d6:85:a0:91:8f:1d:7e:16:be:e3:09:09:78:0d:eb:4a:05:
         70:fb:c1:40:00:6a:16:c3:6f:ba:54:60:e1:b3:e6:ef:06:b3:
         ea:0d:63:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:05:45 2024 by rpki-client on console-ams.rpki-client.org