Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b93a005b-1892-459c-bf41-c019bbf34551/3aa58b8b-8475-3d6a-b419-cc64019ef7ae.roa
File:                     3aa58b8b-8475-3d6a-b419-cc64019ef7ae.roa (raw, json)
Hash identifier:          CXQCu6TgbgOrXEDYEe/cdYtd/pXnN1c+fB8GIajnogw=
Subject key identifier:   3E:CC:5F:A6:8C:44:54:BB:06:AB:71:10:1C:62:38:10:DD:3A:53:A0
Certificate issuer:       /CN=b93a005b-1892-459c-bf41-c019bbf34551
Certificate serial:       010D0C9F432858472F30740A1E7C74D35A014300
Authority key identifier: 86:41:C2:29:BD:B1:91:BC:B6:4E:ED:2E:0B:AC:36:F7:6D:DE:44:11
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b93a005b-1892-459c-bf41-c019bbf34551.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b93a005b-1892-459c-bf41-c019bbf34551/3aa58b8b-8475-3d6a-b419-cc64019ef7ae.roa
Signing time:             Thu 12 Sep 2024 01:00:31 +0000
ROA not before:           Thu 12 Sep 2024 01:00:31 +0000
ROA not after:            Wed 11 Dec 2024 02:00:31 +0000
asID:                     54699
IP address blocks:        2620:43:6000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b93a005b-1892-459c-bf41-c019bbf34551/b93a005b-1892-459c-bf41-c019bbf34551.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b93a005b-1892-459c-bf41-c019bbf34551/b93a005b-1892-459c-bf41-c019bbf34551.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b93a005b-1892-459c-bf41-c019bbf34551.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2f:30:74:0a:1e:7c:74:d3:5a:01:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b93a005b-1892-459c-bf41-c019bbf34551
        Validity
            Not Before: Sep 12 01:00:31 2024 GMT
            Not After : Dec 11 02:00:31 2024 GMT
        Subject: CN=fef0d6f3-01a2-4398-95b9-67e6381dacd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7f:0c:cc:4b:17:88:26:e9:89:58:a4:6c:e0:
                    1c:d8:3d:f0:88:b9:1b:53:06:82:76:39:3d:cb:bc:
                    67:76:61:fd:4f:f8:f0:9a:97:28:dc:73:dc:d6:7d:
                    26:40:49:73:d3:d1:f2:6d:08:c0:90:5e:db:e7:71:
                    42:e5:8f:60:32:2d:76:8a:86:71:b2:14:aa:84:30:
                    ce:d0:f8:18:cc:22:ba:b3:e8:0a:2e:d9:80:f1:15:
                    72:27:f0:44:76:54:42:bb:92:0d:d4:9e:b8:27:b1:
                    17:65:b7:10:82:9f:46:dc:14:f9:9c:71:75:9d:9a:
                    73:38:cf:ef:b3:29:7b:a1:08:3e:cb:4c:f0:6e:4c:
                    1b:0b:26:2d:d2:c3:d5:b3:70:30:0d:e5:32:2e:c5:
                    29:46:ab:eb:12:ff:16:86:fa:3d:42:73:91:1d:d3:
                    55:3e:44:56:8a:3f:77:f7:70:01:c4:fb:1d:63:06:
                    91:70:89:8f:4e:52:b7:de:bb:9c:43:62:9c:6a:94:
                    f7:a8:6c:b3:c5:d3:80:3b:29:1f:cb:cc:ee:b8:98:
                    b9:8f:e1:c2:9e:f2:ea:32:39:66:c4:9f:99:10:2d:
                    a0:40:74:71:95:eb:e7:e5:0d:b8:47:37:62:9e:f5:
                    5e:fc:ae:bb:3a:37:3d:56:67:5d:e9:37:09:f6:58:
                    92:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:CC:5F:A6:8C:44:54:BB:06:AB:71:10:1C:62:38:10:DD:3A:53:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b93a005b-1892-459c-bf41-c019bbf34551/3aa58b8b-8475-3d6a-b419-cc64019ef7ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b93a005b-1892-459c-bf41-c019bbf34551/b93a005b-1892-459c-bf41-c019bbf34551.crl

            X509v3 Authority Key Identifier:
                keyid:86:41:C2:29:BD:B1:91:BC:B6:4E:ED:2E:0B:AC:36:F7:6D:DE:44:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b93a005b-1892-459c-bf41-c019bbf34551.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:43:6000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:e3:77:04:b7:38:41:af:9e:f1:1e:0d:4f:76:52:03:bc:00:
         67:fd:de:10:89:ac:f8:58:45:49:f8:0e:0d:77:82:60:b3:95:
         e9:f2:50:eb:d3:d0:7d:ae:a1:6b:cf:48:e2:6e:f6:f3:65:58:
         d6:49:de:34:36:90:ed:f5:d9:6e:ae:48:b0:20:44:b1:fe:72:
         cf:cc:1e:8b:c8:1a:8c:a2:81:68:32:2c:b7:73:71:88:b3:3c:
         9e:8d:55:13:bb:66:7c:d6:ff:09:91:4b:b7:61:fe:69:2c:8b:
         46:a0:10:c4:b0:a0:c6:ee:fc:02:3d:d0:e4:56:96:2f:bf:8d:
         5c:8e:d5:36:2f:54:eb:71:97:3a:5d:03:2f:a3:4c:2c:89:82:
         36:07:31:3c:0e:a5:75:fb:79:19:70:05:3f:d1:ce:39:98:63:
         10:ea:0f:b7:76:a7:3c:69:97:00:84:46:07:dc:04:c8:5a:28:
         e6:b4:ac:85:78:1b:13:9d:d6:af:73:ae:09:94:33:7b:f1:96:
         4c:bc:d6:89:8a:9f:f9:d0:6a:34:6e:bc:fd:a7:d7:98:d5:15:
         fa:6a:65:fc:c8:e2:e3:f1:88:f3:d5:55:bd:7a:4d:8a:2e:53:
         c0:cf:0c:0b:a8:03:e9:d0:7f:df:72:5f:e0:10:d4:2f:e7:df:
         d5:cb:d3:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:20 2024 by rpki-client on console-fra.rpki-client.org