Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30eed87a-82d8-42e4-80c5-3a0409b7bbfe/066aa71d-ecb5-3507-ab13-9e0344c68899.roa
File:                     066aa71d-ecb5-3507-ab13-9e0344c68899.roa (raw, json)
Hash identifier:          d79w85jL1G9FUPnwSbGiI+nkdV9wvSJHwokEl4o6V/A=
Subject key identifier:   CC:6B:52:A3:79:96:73:61:1D:FD:FE:BD:52:F5:48:1D:AA:68:D2:D8
Certificate issuer:       /CN=30eed87a-82d8-42e4-80c5-3a0409b7bbfe
Certificate serial:       010D0C9F43285847C3448C011A290EB1C2EE8400
Authority key identifier: 3A:9C:45:98:C4:8B:5F:4D:5D:B1:DF:F9:C3:17:6C:7B:BA:C7:EE:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30eed87a-82d8-42e4-80c5-3a0409b7bbfe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30eed87a-82d8-42e4-80c5-3a0409b7bbfe/066aa71d-ecb5-3507-ab13-9e0344c68899.roa
Signing time:             Mon 04 Nov 2024 02:00:36 +0000
ROA not before:           Mon 04 Nov 2024 02:00:36 +0000
ROA not after:            Sun 02 Feb 2025 02:00:36 +0000
asID:                     20381
IP address blocks:        2620:0:2b10::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30eed87a-82d8-42e4-80c5-3a0409b7bbfe/30eed87a-82d8-42e4-80c5-3a0409b7bbfe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30eed87a-82d8-42e4-80c5-3a0409b7bbfe/30eed87a-82d8-42e4-80c5-3a0409b7bbfe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30eed87a-82d8-42e4-80c5-3a0409b7bbfe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c3:44:8c:01:1a:29:0e:b1:c2:ee:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30eed87a-82d8-42e4-80c5-3a0409b7bbfe
        Validity
            Not Before: Nov  4 02:00:36 2024 GMT
            Not After : Feb  2 02:00:36 2025 GMT
        Subject: CN=ea839d5b-a2ba-431b-9cb4-6e1af7a03e3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:1c:ae:52:1f:bc:cf:f9:5e:cb:72:a0:4d:dc:
                    da:6d:92:14:e7:77:d6:c3:be:79:fb:9a:14:b8:7c:
                    c0:8a:bf:fa:b9:a9:1c:cd:ce:53:45:f1:50:0b:fc:
                    08:8e:78:13:3d:81:b1:c2:50:af:89:9b:65:44:e5:
                    97:a7:4e:9d:69:76:e5:0c:7d:7d:91:c4:5d:03:c2:
                    70:11:f2:d4:22:ce:a2:96:c0:23:3a:16:d1:72:5e:
                    c4:6a:69:79:79:74:52:56:17:1c:e6:6c:96:11:c8:
                    3d:42:23:2a:26:2d:56:60:c5:8e:4a:d2:16:ea:60:
                    ca:ff:1f:16:e9:40:46:a1:ad:21:31:7f:29:a2:38:
                    e0:cc:dc:c3:90:73:49:e6:24:58:46:a0:1f:d1:3e:
                    0c:93:52:79:05:69:cd:5b:50:77:42:8a:52:fa:e8:
                    3a:7f:21:8b:57:d8:81:c0:89:43:5e:e9:9b:e6:74:
                    d2:ef:18:17:0d:14:7d:be:db:db:f0:be:5d:f3:51:
                    72:83:18:1b:13:8a:d1:f1:99:b7:5b:f2:13:e7:f1:
                    0b:2a:0a:fc:02:9c:88:1a:6c:76:c7:28:08:c2:45:
                    98:95:57:12:aa:db:38:a0:6f:35:1a:1d:38:21:c1:
                    0e:58:1c:c7:5b:2e:ac:e3:1b:92:c4:1a:d9:0f:01:
                    b8:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:6B:52:A3:79:96:73:61:1D:FD:FE:BD:52:F5:48:1D:AA:68:D2:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30eed87a-82d8-42e4-80c5-3a0409b7bbfe/066aa71d-ecb5-3507-ab13-9e0344c68899.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30eed87a-82d8-42e4-80c5-3a0409b7bbfe/30eed87a-82d8-42e4-80c5-3a0409b7bbfe.crl

            X509v3 Authority Key Identifier:
                keyid:3A:9C:45:98:C4:8B:5F:4D:5D:B1:DF:F9:C3:17:6C:7B:BA:C7:EE:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30eed87a-82d8-42e4-80c5-3a0409b7bbfe.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:2b10::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:08:31:84:03:84:23:b7:32:10:b6:30:e6:0c:6e:ce:af:8e:
         44:ef:68:a1:55:ad:ca:a4:ad:db:08:10:33:14:9f:05:a4:79:
         c0:51:65:0b:e7:83:c4:79:ea:45:15:a9:ff:17:dc:d6:e0:d2:
         d2:c5:1d:f3:12:70:9c:a1:12:bc:14:09:2f:63:55:f7:b3:e1:
         5c:4c:51:e7:ae:55:f9:85:34:3d:68:98:86:a8:37:08:14:32:
         6c:e8:9a:5d:e1:b7:f0:25:a1:cf:f9:be:99:e5:6d:89:3b:b5:
         71:00:b0:ff:16:72:5b:71:3e:55:c0:90:2f:30:97:2d:22:5f:
         d2:25:8d:86:25:4a:36:e5:da:b9:99:b7:86:6a:3d:0a:d3:97:
         21:2a:9b:61:b5:de:80:4f:9f:83:c3:05:e2:bf:88:f7:75:96:
         55:d4:b9:f3:a6:8f:bd:60:a2:71:0e:2e:39:b5:57:0d:26:2c:
         15:0f:6e:9f:1d:43:d0:2b:b6:db:ab:c5:1a:e7:d7:4b:38:37:
         a3:81:3a:ef:ad:c7:91:64:d1:0f:20:73:b7:61:5a:fe:18:9f:
         79:33:ec:5d:61:bd:12:bf:60:22:f6:47:5f:35:38:ff:1c:b2:
         01:c9:99:dc:74:58:7b:a3:a5:5a:9b:8d:ad:f3:df:99:29:5b:
         86:0d:fd:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:05:14 2024 by rpki-client on console-ams.rpki-client.org