Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2/b45f01b4-a66e-36c4-bc0a-43fd338df2e9.roa
File:                     b45f01b4-a66e-36c4-bc0a-43fd338df2e9.roa (raw, json)
Hash identifier:          IgxClSTXhliYORkckiKtImJA2cXGN+ZrZnCc800FuRg=
Subject key identifier:   53:6C:34:5C:B1:03:4A:48:56:AF:97:EF:67:12:3C:AA:8F:0E:CA:A5
Certificate issuer:       /CN=a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2
Certificate serial:       010D0C9F43285847A07C8EEF4275EFBF51E78980
Authority key identifier: 1A:89:A6:9F:26:2C:91:F9:BD:B8:AE:98:4F:91:01:4C:50:DA:FD:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2/b45f01b4-a66e-36c4-bc0a-43fd338df2e9.roa
Signing time:             Tue 22 Oct 2024 15:00:15 +0000
ROA not before:           Tue 22 Oct 2024 15:00:15 +0000
ROA not after:            Mon 20 Jan 2025 16:00:15 +0000
asID:                     3128
IP address blocks:        2600:1d00::/28 maxlen: 28

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a0:7c:8e:ef:42:75:ef:bf:51:e7:89:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2
        Validity
            Not Before: Oct 22 15:00:15 2024 GMT
            Not After : Jan 20 16:00:15 2025 GMT
        Subject: CN=91a50db1-8135-46dc-b5c9-5f6af578d983
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:62:26:e1:ae:43:a2:c7:35:d7:c9:23:94:1c:
                    66:ef:42:51:8e:f7:7f:31:09:a7:a0:86:55:f2:90:
                    30:2e:76:8e:d8:5c:24:8e:4c:39:2e:ef:95:09:ee:
                    23:26:50:27:11:93:b4:ca:37:bf:17:57:4b:68:d3:
                    fd:f5:5c:ab:3a:bb:cc:7f:69:06:79:96:09:94:35:
                    24:08:98:7a:da:a6:86:36:98:a8:37:1f:6f:2f:66:
                    93:23:9d:72:fb:f6:3e:c0:f7:84:fc:3c:3d:df:14:
                    05:ff:b7:f4:19:88:59:98:82:6c:6e:0d:9f:3b:c2:
                    95:13:1d:89:49:e8:0b:8c:b8:73:a5:b0:ab:db:0d:
                    c0:b5:a6:9f:79:89:4a:d3:3e:a4:5d:a4:49:83:ae:
                    73:ea:f9:da:21:53:58:bf:d3:f7:b1:f4:7c:ca:a2:
                    ae:07:a1:0d:90:da:ab:10:ce:c2:9c:d7:b7:43:07:
                    a4:eb:ce:ca:83:5d:c6:8f:60:6e:e9:49:09:80:0f:
                    19:96:ec:fa:54:88:05:ab:db:f7:f2:d1:24:31:b6:
                    b2:3d:b9:45:b4:27:3d:46:47:af:ce:74:e1:eb:b7:
                    72:5e:a2:98:b7:a4:06:f8:ed:8d:3e:8b:4f:d1:20:
                    d8:0c:57:e6:7f:c3:c7:c0:cf:d1:2d:c2:0f:3b:c3:
                    9d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:6C:34:5C:B1:03:4A:48:56:AF:97:EF:67:12:3C:AA:8F:0E:CA:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2/b45f01b4-a66e-36c4-bc0a-43fd338df2e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2.crl

            X509v3 Authority Key Identifier:
                keyid:1A:89:A6:9F:26:2C:91:F9:BD:B8:AE:98:4F:91:01:4C:50:DA:FD:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1d00::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:4a:3f:d5:ad:b2:dd:7f:2c:9b:4f:68:b3:81:9c:b1:1a:cd:
         db:60:40:22:ac:7d:9b:30:46:48:b3:02:cc:2e:da:8b:8f:d7:
         b6:41:3f:b9:49:29:54:ca:a7:7a:62:4a:5b:98:0b:c3:56:f0:
         d0:4f:74:1d:57:9b:5b:e0:69:3c:6d:da:f9:f6:4a:6a:ac:a6:
         48:a4:b7:5d:2a:bf:4c:3a:df:e4:76:5c:62:90:aa:88:fd:3e:
         c9:b8:7c:94:b3:ea:1d:ee:d4:e8:58:13:fc:8b:53:b5:16:7f:
         ed:66:a9:9a:db:5b:4f:fd:ab:0e:0b:78:dd:f1:ca:5b:16:b2:
         6a:02:ff:f8:bd:5f:bf:0c:c0:73:7c:d7:c0:73:3d:62:33:4c:
         90:fc:05:a0:11:5b:ee:29:4e:71:f9:1a:d9:3f:68:4b:65:64:
         ab:37:bd:ff:c1:40:d1:f7:13:66:78:67:d5:e4:3a:e9:51:1a:
         31:39:bc:94:62:05:44:1a:ac:f8:10:71:b1:ed:61:bb:71:5b:
         ee:92:b6:18:85:db:6a:50:4f:97:3d:a1:eb:c5:28:f6:38:ce:
         63:10:df:a8:d9:58:2b:47:92:c2:dc:d3:e7:46:42:55:44:6f:
         4a:d8:f9:3f:af:ca:f5:98:33:f5:31:d3:3e:04:f9:16:f8:a3:
         70:46:73:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:56:42 2024 by rpki-client on console-ams.rpki-client.org