Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71b34d11-5c74-4013-a0ad-639513ebea8c/aa55eea8-7e45-34d2-a36d-f6cafbd36c75.roa
File:                     aa55eea8-7e45-34d2-a36d-f6cafbd36c75.roa (raw, json)
Hash identifier:          v7DLkQzO0fB6geEmeKcjdOUtZwlTW+UnNDCxAdLL5VM=
Subject key identifier:   C0:98:25:A2:9B:CD:F5:7B:D0:6C:E6:50:07:3D:C3:6A:12:0B:F3:3D
Certificate issuer:       /CN=71b34d11-5c74-4013-a0ad-639513ebea8c
Certificate serial:       010D0C9F43285847CE6F412A403EEEB11ED86600
Authority key identifier: 4C:71:D0:16:CA:0F:16:81:6C:CB:38:85:0A:81:69:4E:F3:11:F2:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71b34d11-5c74-4013-a0ad-639513ebea8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71b34d11-5c74-4013-a0ad-639513ebea8c/aa55eea8-7e45-34d2-a36d-f6cafbd36c75.roa
Signing time:             Fri 08 Nov 2024 02:00:27 +0000
ROA not before:           Fri 08 Nov 2024 02:00:27 +0000
ROA not after:            Thu 06 Feb 2025 02:00:27 +0000
asID:                     14579
IP address blocks:        2620:1b0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71b34d11-5c74-4013-a0ad-639513ebea8c/71b34d11-5c74-4013-a0ad-639513ebea8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71b34d11-5c74-4013-a0ad-639513ebea8c/71b34d11-5c74-4013-a0ad-639513ebea8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71b34d11-5c74-4013-a0ad-639513ebea8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ce:6f:41:2a:40:3e:ee:b1:1e:d8:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71b34d11-5c74-4013-a0ad-639513ebea8c
        Validity
            Not Before: Nov  8 02:00:27 2024 GMT
            Not After : Feb  6 02:00:27 2025 GMT
        Subject: CN=b1f70fe3-90f0-48ba-bfee-e95c2ec02c55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fe:b5:3a:b3:33:45:cd:60:9f:74:74:26:82:
                    25:f5:ba:29:9b:8a:b7:59:19:78:7d:05:82:f4:42:
                    6c:7e:0e:9a:c1:45:f7:87:b6:dd:c2:43:b8:fe:81:
                    1e:7d:3d:e2:f7:26:6a:c0:9f:ce:c0:bc:61:1d:dd:
                    71:95:b7:13:2b:61:c6:a7:b8:ca:28:d9:51:b5:9d:
                    4f:72:47:f6:30:06:e8:1f:7b:46:a8:24:ec:ca:45:
                    d6:7e:1a:32:6b:05:b0:09:5c:56:5a:31:c4:74:42:
                    c7:6d:1d:fa:11:43:61:97:a0:c9:12:ed:9d:6d:45:
                    35:42:3e:34:f9:f6:b7:43:3d:e3:13:93:36:08:9c:
                    fa:16:f2:bd:13:f1:04:be:08:0d:ef:b6:2b:ef:02:
                    56:02:09:fb:1b:a3:43:35:93:73:51:72:a3:d0:aa:
                    3d:a7:02:35:1e:7b:85:9b:31:4a:df:a4:07:60:15:
                    2e:84:c2:ea:1b:1b:c6:e1:45:af:98:0e:1e:40:87:
                    68:40:7c:9c:ec:ce:e8:25:ec:97:a2:d7:ad:0d:4c:
                    4f:3f:da:92:05:e6:63:5c:93:9f:63:ec:12:05:a1:
                    a5:17:2e:6e:0b:e5:77:80:23:02:44:f9:d2:33:4e:
                    4e:8f:18:27:db:3b:34:aa:39:24:11:b5:44:fd:7b:
                    b2:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:98:25:A2:9B:CD:F5:7B:D0:6C:E6:50:07:3D:C3:6A:12:0B:F3:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71b34d11-5c74-4013-a0ad-639513ebea8c/aa55eea8-7e45-34d2-a36d-f6cafbd36c75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71b34d11-5c74-4013-a0ad-639513ebea8c/71b34d11-5c74-4013-a0ad-639513ebea8c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:71:D0:16:CA:0F:16:81:6C:CB:38:85:0A:81:69:4E:F3:11:F2:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71b34d11-5c74-4013-a0ad-639513ebea8c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1b0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:f6:ef:fd:86:72:05:85:78:a0:41:eb:44:a3:5e:2b:59:ad:
         18:5c:2b:d6:24:07:90:18:8b:df:a9:97:12:a6:e4:b3:8f:54:
         08:52:fc:da:3b:fd:66:46:57:11:40:f3:c9:e7:2d:e2:c3:01:
         4b:2e:b6:92:87:e6:de:6e:8e:b4:f3:8e:bf:b4:48:57:5f:16:
         dc:97:33:4d:83:0c:f6:df:46:5d:1c:85:82:ea:1d:63:39:82:
         47:63:f5:ee:8d:a1:55:43:e5:57:14:97:a4:ee:4a:a0:3c:d6:
         75:db:12:51:f6:3b:db:df:7a:e7:a2:e3:9a:68:9d:d7:f7:1f:
         75:f6:71:ac:8c:3a:5e:60:55:8b:0d:cc:fb:77:99:16:f6:53:
         32:39:67:0c:a2:d4:00:34:06:d0:1d:88:25:e1:7b:67:59:15:
         fa:a3:37:b1:a6:43:01:61:5d:f3:91:2c:7a:29:9b:83:d9:df:
         71:21:6d:5d:b5:f4:99:11:0c:95:67:65:f1:2a:fa:91:61:64:
         c0:b0:6f:6b:68:c7:20:91:a7:15:6d:cf:c1:68:2f:40:80:47:
         55:30:da:b3:06:fe:ab:42:b6:45:23:30:a0:ac:a2:6a:b9:8c:
         5d:32:33:49:88:b3:22:cd:b2:91:d8:23:2f:2f:d3:3f:d8:c4:
         8e:a5:ac:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:45:14 2024 by rpki-client on console-ams.rpki-client.org