Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b7f57a5-8ad1-49c1-8e53-f6b122ed62e2/a32864a7-8943-31ea-94c0-9969594288ea.roa
File:                     a32864a7-8943-31ea-94c0-9969594288ea.roa (raw, json)
Hash identifier:          bU1B3TNexEJunJKYtHTDp+KVftt/DcgfaumZXO1AHwk=
Subject key identifier:   6C:7F:66:53:EA:19:66:8A:96:34:06:04:52:FE:0F:38:9F:2F:79:8D
Certificate issuer:       /CN=9b7f57a5-8ad1-49c1-8e53-f6b122ed62e2
Certificate serial:       010D0C9F43285847BC2C252AF37E646DB9F5C400
Authority key identifier: 4A:50:AF:35:A5:D1:64:97:78:A1:8A:FD:E4:D2:43:0D:8C:EF:32:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b7f57a5-8ad1-49c1-8e53-f6b122ed62e2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b7f57a5-8ad1-49c1-8e53-f6b122ed62e2/a32864a7-8943-31ea-94c0-9969594288ea.roa
Signing time:             Fri 01 Nov 2024 13:00:41 +0000
ROA not before:           Fri 01 Nov 2024 13:00:41 +0000
ROA not after:            Thu 30 Jan 2025 14:00:41 +0000
asID:                     33523
IP address blocks:        2620:26::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b7f57a5-8ad1-49c1-8e53-f6b122ed62e2/9b7f57a5-8ad1-49c1-8e53-f6b122ed62e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b7f57a5-8ad1-49c1-8e53-f6b122ed62e2/9b7f57a5-8ad1-49c1-8e53-f6b122ed62e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b7f57a5-8ad1-49c1-8e53-f6b122ed62e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:bc:2c:25:2a:f3:7e:64:6d:b9:f5:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b7f57a5-8ad1-49c1-8e53-f6b122ed62e2
        Validity
            Not Before: Nov  1 13:00:41 2024 GMT
            Not After : Jan 30 14:00:41 2025 GMT
        Subject: CN=7d4d29ff-f8e2-4b2c-b7f9-9c92a83f07bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:8c:3f:50:f5:72:4d:32:11:06:cf:58:f3:fb:
                    71:b2:9d:17:e2:65:39:df:f5:aa:07:68:09:5f:3b:
                    c6:60:81:74:b5:c7:3c:17:c6:3f:96:1f:f9:0b:0e:
                    f3:7a:dc:59:4a:d0:a0:71:79:fa:e0:5e:98:0d:fc:
                    42:0a:31:20:ce:a3:23:68:0e:be:38:35:5c:da:e9:
                    e3:78:f5:ee:73:21:04:d4:1c:87:b7:d6:a7:9c:5b:
                    2c:36:2c:38:04:d8:20:9e:28:d4:14:a0:0d:94:ed:
                    cc:08:d8:53:52:c9:d0:28:91:92:6f:6b:0a:c5:79:
                    e6:74:e8:88:2e:2d:92:fb:4e:48:e6:1f:35:88:ed:
                    1d:51:d0:50:cd:ae:d3:20:8d:78:13:d4:e9:f1:eb:
                    7a:53:64:6e:a3:b1:06:05:97:08:5a:e6:d8:6a:fe:
                    1d:1d:0b:b2:f8:8b:40:08:74:a0:ff:c7:b5:5b:c5:
                    18:74:7f:df:16:b7:91:01:13:23:81:ff:98:56:65:
                    3e:18:df:f1:61:d3:69:b1:8f:a8:c5:d0:a9:f4:c4:
                    86:09:c2:28:3b:e6:fe:e9:63:18:15:ba:3b:72:ae:
                    54:d2:58:5c:9f:93:45:bc:05:b1:2a:c7:97:9c:a6:
                    b8:af:86:fd:5a:5f:ac:e5:b4:0c:a5:dd:d0:9c:ef:
                    44:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:7F:66:53:EA:19:66:8A:96:34:06:04:52:FE:0F:38:9F:2F:79:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b7f57a5-8ad1-49c1-8e53-f6b122ed62e2/a32864a7-8943-31ea-94c0-9969594288ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b7f57a5-8ad1-49c1-8e53-f6b122ed62e2/9b7f57a5-8ad1-49c1-8e53-f6b122ed62e2.crl

            X509v3 Authority Key Identifier:
                keyid:4A:50:AF:35:A5:D1:64:97:78:A1:8A:FD:E4:D2:43:0D:8C:EF:32:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b7f57a5-8ad1-49c1-8e53-f6b122ed62e2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:26::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:18:5f:28:3c:e7:8e:d4:02:a2:87:56:a9:6e:94:eb:e9:5c:
         95:a3:cb:ea:5a:96:01:36:27:5f:ca:a5:c0:ed:64:77:c4:4e:
         5c:51:f6:a4:65:bd:24:56:64:0b:57:0f:83:a5:e7:02:ba:ac:
         88:e0:34:44:f8:65:2b:58:40:a3:ff:40:bd:60:74:8e:30:69:
         7d:7a:6a:37:0f:8a:f4:57:fd:c8:d1:74:86:ec:41:c8:4c:e9:
         0e:0e:b2:bc:b7:b8:b6:61:24:8e:b3:36:3f:5a:3d:00:f1:bd:
         2f:93:06:fc:68:bf:59:ae:e8:3d:23:c7:2b:57:95:17:fe:5f:
         cf:a4:2c:d8:57:e4:43:19:f9:4d:ed:b1:3b:4f:a1:84:ed:d5:
         b0:ed:e7:1d:6c:49:3e:1b:65:a5:8a:33:b3:bb:cb:a3:75:ef:
         72:e9:b0:ac:0c:f6:42:db:2a:4a:70:38:f6:5e:e6:c3:b8:8c:
         f3:74:26:f5:65:a0:ab:4d:9b:28:78:15:87:c2:b2:eb:f5:49:
         91:ea:6c:6e:b3:80:df:df:c1:4d:7e:59:66:3c:ea:98:e7:b1:
         c8:fa:f6:5f:ee:71:77:c6:5f:04:3f:c8:d7:7e:46:f9:d7:8a:
         7c:0b:67:f8:71:d8:94:36:70:4a:d6:a2:d3:fd:74:8d:f9:0b:
         7e:92:86:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:50:38 2024 by rpki-client on console-fra.rpki-client.org