Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/2dcc3161-69c7-38a5-82ef-b7752c6e7c20.roa
File:                     2dcc3161-69c7-38a5-82ef-b7752c6e7c20.roa (raw, json)
Hash identifier:          kK+yXEt/17h4nDzm38CErn2wO9DdhP1hkqZVHZGSaSg=
Subject key identifier:   55:3E:10:76:20:AA:ED:47:F1:90:37:AD:AF:DA:76:EF:6F:C1:0A:2B
Certificate issuer:       /CN=bebad29c-c2e4-447d-a29e-20f329219ea9
Certificate serial:       010D0C9F432858473D25FA9B6430B7CE0A299780
Authority key identifier: 07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/2dcc3161-69c7-38a5-82ef-b7752c6e7c20.roa
Signing time:             Tue 17 Sep 2024 01:00:31 +0000
ROA not before:           Tue 17 Sep 2024 01:00:31 +0000
ROA not after:            Mon 16 Dec 2024 02:00:31 +0000
asID:                     14618
IP address blocks:        2620:113:1001::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3d:25:fa:9b:64:30:b7:ce:0a:29:97:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bebad29c-c2e4-447d-a29e-20f329219ea9
        Validity
            Not Before: Sep 17 01:00:31 2024 GMT
            Not After : Dec 16 02:00:31 2024 GMT
        Subject: CN=301668a4-3bd1-432b-9581-160998435886
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:11:a4:d1:e7:26:78:05:d8:22:a6:26:a2:f2:
                    c4:2b:39:e0:1a:10:8c:b8:c6:13:12:35:e4:d3:51:
                    ab:f3:69:17:8f:f2:3a:69:0a:9f:b0:e8:ac:82:76:
                    5d:29:ac:27:5c:27:d6:bd:5c:76:8e:df:4d:6c:28:
                    38:65:bd:4c:d8:21:ff:84:08:a3:5c:1c:f4:fd:63:
                    8d:54:26:bf:fe:01:65:49:0d:e2:2a:8a:1c:30:8a:
                    da:d7:cc:4c:1e:69:67:05:c7:99:09:ba:43:02:f3:
                    4a:d3:1e:eb:d4:cd:75:58:7a:9d:56:34:7f:c2:69:
                    02:a0:a9:fd:48:19:b4:3c:bd:62:0b:59:43:6a:62:
                    07:cd:d0:6c:7a:09:19:31:66:38:29:b0:ac:d4:5a:
                    df:f3:2d:15:a2:21:79:4e:88:53:c5:bf:82:8c:cd:
                    5f:36:53:5b:74:b4:00:ea:1c:62:fb:6e:01:af:fe:
                    db:29:b4:22:09:a7:fd:e5:df:b6:c2:f5:ef:90:0d:
                    8e:fe:53:13:03:7f:d6:93:73:fd:6f:ad:96:7b:a6:
                    42:99:45:ec:9b:be:8d:79:49:37:7f:40:0c:7a:ad:
                    30:20:25:79:e6:41:9e:fa:34:2e:9f:ba:ef:fc:3e:
                    d2:e0:70:b1:c4:47:51:21:73:1a:87:75:6f:94:11:
                    f4:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:3E:10:76:20:AA:ED:47:F1:90:37:AD:AF:DA:76:EF:6F:C1:0A:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/2dcc3161-69c7-38a5-82ef-b7752c6e7c20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.crl

            X509v3 Authority Key Identifier:
                keyid:07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:113:1001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:04:a0:26:3a:5a:64:6e:e1:cd:96:a3:c2:2e:de:05:ce:e2:
         d4:51:e1:b2:ff:35:20:23:62:9a:a7:62:e9:86:40:74:3b:69:
         f5:ac:a8:45:b7:88:6e:d4:5f:4e:86:39:5e:80:00:dc:79:03:
         28:7f:bf:8f:90:40:e1:c6:38:8f:3d:a8:e8:f0:bf:de:13:7c:
         d9:03:89:48:9b:77:f5:a0:92:da:83:65:cc:64:d3:af:8e:45:
         34:f2:25:ac:b1:fa:8e:9d:80:f5:6b:9c:ef:1e:41:1a:00:15:
         d5:88:5a:a8:f5:00:d4:fc:49:5d:29:b9:3f:27:7e:f9:14:54:
         13:2f:3e:db:50:74:55:1e:e6:4a:2b:92:9e:42:a9:f2:83:0c:
         c7:d0:de:a5:17:87:28:9d:e3:02:a4:e4:69:27:d0:0c:2f:27:
         4d:ec:bd:92:fd:81:85:ab:e0:35:50:8c:62:61:6a:70:69:11:
         8b:c0:09:a9:a7:44:35:a2:54:af:07:10:80:59:86:bc:ed:e2:
         3e:de:4b:61:d9:e0:a6:b7:70:c1:0d:86:c7:68:8c:b6:38:2e:
         79:90:d8:ba:d5:d3:b6:af:0e:56:21:0f:7b:e4:55:9e:60:34:
         45:5e:5b:0e:d1:37:cc:fa:af:52:60:0e:fe:8d:cf:23:ed:de:
         40:8e:37:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:59 2024 by rpki-client on console-ams.rpki-client.org