Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/b20be8f7-0638-3370-8715-f0aae40447c9.roa
File:                     b20be8f7-0638-3370-8715-f0aae40447c9.roa (raw, json)
Hash identifier:          0RRxfa+dZpqIkr2VkaRD+UYXYcPvyPyoG3KIbL73IfU=
Subject key identifier:   22:57:EF:B5:60:64:F8:B5:C8:74:5C:D2:21:4D:FA:DD:61:6C:D0:5F
Certificate issuer:       /CN=820e56e8-763b-4037-929e-b01c8d786e75
Certificate serial:       010D0C9F43285847A30BFB9A1E931785BAFCF7F8
Authority key identifier: 3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/b20be8f7-0638-3370-8715-f0aae40447c9.roa
Signing time:             Wed 23 Oct 2024 13:00:41 +0000
ROA not before:           Wed 23 Oct 2024 13:00:41 +0000
ROA not after:            Tue 21 Jan 2025 14:00:41 +0000
asID:                     399275
IP address blocks:        2602:fcc0:4444::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a3:0b:fb:9a:1e:93:17:85:ba:fc:f7:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=820e56e8-763b-4037-929e-b01c8d786e75
        Validity
            Not Before: Oct 23 13:00:41 2024 GMT
            Not After : Jan 21 14:00:41 2025 GMT
        Subject: CN=44022a24-cff9-4146-a2d7-d06eb2e953e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:92:20:cd:32:c9:b4:af:28:fa:ae:97:f6:4f:
                    13:44:62:e0:c1:15:03:c4:78:c0:69:1a:35:01:3a:
                    5b:a7:e6:92:71:17:6b:04:80:e6:52:fe:d2:cc:3b:
                    ef:2f:05:9b:09:2c:8e:94:1e:3f:32:ea:74:35:f9:
                    99:c7:e1:7c:08:2c:e0:c3:a0:54:bb:de:2f:5d:07:
                    aa:be:7e:80:97:f8:ee:ff:88:3b:96:44:ac:53:0b:
                    58:eb:13:e7:b4:27:ea:b5:d8:e4:88:a8:43:e4:17:
                    e0:47:a9:78:44:ff:88:be:f5:c1:8f:47:29:d3:a8:
                    e3:68:91:42:c6:ec:29:d2:e4:29:1c:18:44:c9:5d:
                    5c:0c:18:f2:12:17:cd:a0:cc:4e:c6:11:fa:96:04:
                    d5:86:dc:c6:de:10:fb:c8:45:42:c0:54:8f:9e:9c:
                    5b:1c:1e:b3:c5:70:34:dd:0b:e4:cf:32:ed:ed:f1:
                    9e:1b:d6:37:99:a0:52:93:1a:78:61:e4:f4:6e:32:
                    39:d0:63:aa:ac:10:69:c9:41:80:45:05:f1:f4:64:
                    e9:25:94:09:32:25:67:9b:f6:ea:26:8c:44:e9:70:
                    98:74:e0:b7:d5:37:11:00:59:01:65:da:e5:fb:de:
                    64:62:fd:4d:b0:7f:43:90:a9:41:e1:34:9b:7f:c0:
                    b5:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:57:EF:B5:60:64:F8:B5:C8:74:5C:D2:21:4D:FA:DD:61:6C:D0:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/b20be8f7-0638-3370-8715-f0aae40447c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl

            X509v3 Authority Key Identifier:
                keyid:3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcc0:4444::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:f3:e4:d4:4a:f0:ba:28:08:b2:19:3e:5b:01:3a:1a:51:b2:
         36:b1:8a:f5:0a:8c:aa:8d:d3:27:9d:73:2a:b0:3c:4f:15:78:
         84:ae:8b:96:b6:f8:3b:0d:e4:36:c1:80:5c:94:2a:6c:1b:44:
         00:6b:4c:d2:e3:01:8c:59:a5:f6:bb:3c:1d:83:e1:67:ac:7f:
         17:fb:1f:82:80:3e:7d:9f:16:6c:f9:cb:5a:1c:aa:cd:37:77:
         a0:4d:5b:9b:87:66:e9:b1:2f:8d:5b:e6:8c:de:29:ac:47:23:
         6d:58:6c:e4:b1:6e:23:64:8f:b8:23:45:31:c4:06:35:41:35:
         5a:6c:e9:43:38:15:da:59:71:c7:9a:17:17:7a:f5:f5:8a:2f:
         68:fa:6e:b0:cf:e4:db:f5:a9:9f:59:fb:2d:41:cf:a2:d3:81:
         b7:53:2f:d7:2a:88:79:dc:92:c8:ca:ae:d4:2f:88:93:64:65:
         e3:6d:e4:54:a2:51:39:42:70:97:3a:3b:d3:0a:9c:ca:dc:67:
         cf:23:01:db:20:49:c8:40:66:17:ed:f2:27:6e:2d:79:20:92:
         bb:7e:6f:b6:a3:d4:1e:8c:80:a7:ed:c4:8f:57:ec:9c:5b:fa:
         f6:a6:fd:7e:60:b5:46:c7:66:11:79:64:99:df:48:2a:ba:65:
         f0:fc:6a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:22:17 2024 by rpki-client on console-ams.rpki-client.org