Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/4a9ad6ca-f74b-3fe9-aacb-d617a16b92a3.roa
File:                     4a9ad6ca-f74b-3fe9-aacb-d617a16b92a3.roa (raw, json)
Hash identifier:          9HOVTxkviX2tYfGtWZR3NJjwz8U4TzjZiVm5jrmJf7g=
Subject key identifier:   2A:70:F8:EC:3F:51:5B:0A:DA:C9:12:74:ED:C1:0A:21:3F:2B:E2:3E
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F432858475EA620E2FB9ED819C0F072A0
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/4a9ad6ca-f74b-3fe9-aacb-d617a16b92a3.roa
Signing time:             Sun 29 Sep 2024 01:00:32 +0000
ROA not before:           Sun 29 Sep 2024 01:00:32 +0000
ROA not after:            Sat 28 Dec 2024 02:00:32 +0000
asID:                     30133
IP address blocks:        2001:500:66::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5e:a6:20:e2:fb:9e:d8:19:c0:f0:72:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: Sep 29 01:00:32 2024 GMT
            Not After : Dec 28 02:00:32 2024 GMT
        Subject: CN=abba6048-2e2e-491b-8f56-9f8ecbff39db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f1:d4:b8:d6:09:f9:2b:72:61:77:0d:09:e4:
                    51:af:1a:4a:5e:c5:c7:fc:32:e5:16:61:0e:8b:f3:
                    c8:ae:a8:ba:e6:a0:a6:2a:cc:42:96:0a:6c:85:46:
                    55:cb:c2:7f:38:d9:2f:25:ba:08:7e:10:3f:ec:14:
                    7a:a8:9f:39:71:35:91:82:69:f6:13:30:86:dc:d4:
                    3a:68:55:13:a8:2e:8c:8c:36:79:18:92:1f:07:7c:
                    e5:5a:09:1e:d2:c4:6b:61:f6:66:32:ca:0f:2d:f4:
                    50:f1:68:d9:53:32:69:b3:4a:2c:df:76:ce:57:17:
                    78:24:0f:08:5c:12:1f:58:2b:4e:e8:33:1b:1e:1a:
                    61:0a:c2:4d:a9:be:bb:61:0b:06:8e:59:42:45:80:
                    ac:01:92:fa:50:43:16:68:89:02:96:31:48:2b:6f:
                    d4:32:12:b4:b3:81:f9:f2:b5:1c:57:2d:f1:88:8a:
                    96:4a:f5:76:09:ce:7e:2e:d6:48:ff:e0:f0:4e:ab:
                    59:20:51:b1:52:89:07:cb:41:07:b8:49:66:2e:1e:
                    44:c7:44:2a:f1:81:02:1e:4d:89:e9:df:f3:fc:15:
                    5c:a5:5e:d3:21:7f:65:3f:70:82:3c:76:d6:29:81:
                    68:d9:9d:d3:5c:cc:87:e7:27:0d:de:5d:1b:4e:d7:
                    2a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:70:F8:EC:3F:51:5B:0A:DA:C9:12:74:ED:C1:0A:21:3F:2B:E2:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/4a9ad6ca-f74b-3fe9-aacb-d617a16b92a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:66::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:ec:fb:0f:88:a3:e1:75:7b:94:43:8a:27:55:8a:b2:39:c9:
         2d:28:58:da:95:1e:52:71:e9:2a:b1:39:38:28:28:53:34:d4:
         d5:8c:ee:b6:83:aa:04:3f:8d:e5:c5:19:70:b7:b4:3e:3a:8d:
         0d:4f:99:47:58:bb:99:ae:c3:61:7f:0a:ff:9b:9c:ee:da:d7:
         13:ff:b5:94:3e:15:8c:13:09:ab:29:4e:60:84:43:13:2d:e9:
         45:6a:56:ad:9b:d4:d5:4f:a9:5f:50:06:02:d2:37:b1:af:4f:
         14:d8:e2:0e:19:91:06:6c:91:a8:9b:c0:6a:4c:2a:62:36:05:
         9f:5b:6d:e1:b6:72:45:08:cd:5e:c7:1a:fa:23:f0:bf:0e:d5:
         69:00:0c:7d:1d:41:cc:3a:f4:4e:7e:b2:d4:7c:2f:97:17:ab:
         a0:50:46:77:dd:37:25:1f:e1:20:53:92:13:72:b7:85:19:b9:
         7f:d0:05:b6:ca:24:34:a0:56:e8:b3:69:f6:8d:5e:0f:18:d7:
         e8:e0:47:7c:19:f6:a1:24:28:6b:b2:5f:35:e3:74:96:6f:b3:
         54:ef:f3:49:05:7c:ee:64:30:a0:67:a3:40:3a:d1:e3:6f:6c:
         71:94:b7:f8:74:1e:49:b9:bb:a0:c6:01:ed:02:36:ed:03:1b:
         db:d0:2b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 20:11:49 2024 by rpki-client on console-ams.rpki-client.org