Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/6b843ad8-b2e3-33ac-9c96-e5996013e7c8.roa
File:                     6b843ad8-b2e3-33ac-9c96-e5996013e7c8.roa (raw, json)
Hash identifier:          KazzCjbxQhV7rRy5f9Aag5ukZTnDey3BFF5+Wk5sf+4=
Subject key identifier:   03:AB:1D:22:D7:05:FB:02:72:13:B2:A5:82:F7:09:1F:32:A3:D9:85
Certificate issuer:       /CN=706d4f00-fa89-4b22-8684-b968d577fab7
Certificate serial:       010D0C9F43285847ED24C9A6F02E8D09C7063880
Authority key identifier: 28:CD:22:12:7C:2F:19:D8:1B:64:4F:54:1F:12:27:FB:22:C9:E4:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/6b843ad8-b2e3-33ac-9c96-e5996013e7c8.roa
Signing time:             Tue 19 Nov 2024 02:00:27 +0000
ROA not before:           Tue 19 Nov 2024 02:00:27 +0000
ROA not after:            Mon 17 Feb 2025 02:00:27 +0000
asID:                     33343
IP address blocks:        2610:20::/37 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ed:24:c9:a6:f0:2e:8d:09:c7:06:38:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=706d4f00-fa89-4b22-8684-b968d577fab7
        Validity
            Not Before: Nov 19 02:00:27 2024 GMT
            Not After : Feb 17 02:00:27 2025 GMT
        Subject: CN=fb91378d-bc0c-4881-94df-fb484051d9a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a2:7d:40:c4:ff:8d:62:22:c0:9c:0c:03:d8:
                    36:1d:36:ac:b3:e5:63:f6:6a:0a:29:3a:ca:3d:06:
                    70:fa:8a:be:d5:9c:65:52:4e:4d:35:c0:d0:b5:de:
                    49:24:03:c5:12:ee:c2:8f:c0:fe:87:85:75:ed:df:
                    28:2c:b8:17:1e:b1:08:f4:44:e7:bb:42:5f:33:9d:
                    e1:70:2c:e0:bc:f0:c5:8c:81:3d:4f:e6:a5:f5:f9:
                    94:8e:0b:4d:87:e6:c1:25:c5:73:64:33:ee:2d:94:
                    a1:6a:ba:6f:08:b2:91:ce:ba:39:75:43:f5:8f:ae:
                    33:dc:49:c8:51:53:a7:c7:a6:49:ff:28:f7:92:de:
                    40:81:95:1b:49:a9:ca:52:68:52:66:0c:bc:2d:f5:
                    f4:cb:39:ff:94:a7:84:b8:55:b9:0d:c6:7e:0d:4a:
                    1f:b6:65:d6:dd:cf:5e:e0:a5:d3:55:09:de:97:9e:
                    73:93:c5:d0:d8:f2:31:c4:06:ec:30:9a:7a:54:3b:
                    bd:77:96:3a:a8:c5:77:27:ca:47:0f:c9:13:94:87:
                    d6:81:24:62:27:f5:2e:85:1f:2d:18:51:24:ce:d6:
                    ef:d2:ba:b6:fa:eb:2b:8b:a4:3c:26:73:b9:cb:a9:
                    09:c6:cb:66:61:be:17:75:dd:29:ee:b6:56:fb:49:
                    cb:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:AB:1D:22:D7:05:FB:02:72:13:B2:A5:82:F7:09:1F:32:A3:D9:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/6b843ad8-b2e3-33ac-9c96-e5996013e7c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.crl

            X509v3 Authority Key Identifier:
                keyid:28:CD:22:12:7C:2F:19:D8:1B:64:4F:54:1F:12:27:FB:22:C9:E4:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:20::/37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:62:d7:43:f7:55:a8:aa:a3:88:6a:50:bf:bb:e7:5a:20:44:
         3c:df:3b:9b:17:37:c6:ec:13:28:b0:dc:d2:83:90:8c:0a:4c:
         98:c4:ff:d7:ee:30:39:5d:d1:b7:77:ff:34:01:22:cf:c7:7a:
         41:d0:77:58:0e:9a:57:95:73:2d:82:f8:1c:1f:62:b9:68:9a:
         a6:4a:ba:42:2d:a9:cc:af:1d:2d:b2:70:0d:3a:a0:d2:a1:9a:
         bf:25:1d:06:c4:28:1e:7b:5e:a9:8c:60:92:80:3d:ee:03:25:
         ba:5a:ba:f0:2a:23:5d:e2:79:a8:cb:39:97:de:1e:eb:45:7a:
         7a:30:3a:ea:03:b2:74:d3:5c:9c:9c:d7:3d:34:23:35:b8:a1:
         b2:76:90:3b:30:7f:e8:82:13:00:1b:21:0d:98:fe:f2:b0:5e:
         ab:fa:8c:cf:42:cc:9c:05:e6:e5:31:67:3e:39:27:ca:a5:3b:
         12:7e:6f:a7:30:de:ce:61:a9:20:de:92:52:fb:58:cc:ce:d9:
         f8:8e:87:94:74:88:c4:cf:d3:ef:a0:67:64:a9:4f:ee:8b:3b:
         52:87:e3:eb:52:a7:8c:ac:ea:b5:99:b8:7d:12:a6:d1:b3:4a:
         16:a8:0a:f7:78:7e:4c:f5:66:4b:e7:05:59:b0:f6:ab:a1:c9:
         87:e9:43:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:56:42 2024 by rpki-client on console-ams.rpki-client.org