Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0a8f7025-1e75-3a9b-9d66-10818b31619b.roa
File:                     0a8f7025-1e75-3a9b-9d66-10818b31619b.roa (raw, json)
Hash identifier:          Wev/YqY7cHpKbuHtswSbvyV60ZsBP9Vkjq5UOWpAtgE=
Subject key identifier:   75:7D:D6:0D:8A:BA:A0:CB:A6:91:01:08:54:F3:3E:7C:1F:16:9E:D6
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584765FF4C849AC8DD013D00F6D0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0a8f7025-1e75-3a9b-9d66-10818b31619b.roa
Signing time:             Tue 01 Oct 2024 16:10:59 +0000
ROA not before:           Tue 01 Oct 2024 16:10:59 +0000
ROA not after:            Mon 30 Dec 2024 17:10:59 +0000
asID:                     399169
IP address blocks:        2610:a1:3200::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:65:ff:4c:84:9a:c8:dd:01:3d:00:f6:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Oct  1 16:10:59 2024 GMT
            Not After : Dec 30 17:10:59 2024 GMT
        Subject: CN=1dcff97d-2918-4664-ab84-c5f8fbd17fb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:85:36:4c:0f:c1:9b:1f:f7:d4:5a:f6:b2:c1:
                    ea:2b:5c:6c:ee:10:e3:bd:19:75:ff:66:b6:79:2b:
                    e8:76:cc:e0:3f:0a:3b:56:23:62:38:bf:ae:f0:1e:
                    01:84:1c:34:89:ea:a8:53:0a:31:85:85:36:5d:47:
                    dd:66:47:a8:ee:16:6f:8d:28:ea:6c:18:12:c9:29:
                    b3:da:8d:c0:7b:75:3f:db:35:e5:24:67:a2:72:27:
                    c2:01:04:c5:fe:e3:f9:e4:41:73:36:02:64:80:98:
                    1b:8a:8d:83:eb:29:b2:cd:4b:0d:f0:03:b3:38:5d:
                    67:99:0d:45:e8:5c:41:99:c0:dd:21:4d:49:85:ae:
                    b5:df:51:e6:f9:a5:ab:f4:05:11:cf:b8:4b:3f:f6:
                    5b:13:34:19:e4:c8:54:a9:2c:84:1e:fb:15:b2:d0:
                    6d:59:3b:17:f3:90:c0:00:09:72:89:13:47:df:92:
                    41:0d:1b:61:fe:1c:d0:8a:f8:69:0c:c8:26:60:88:
                    0e:e8:8f:95:c7:ac:f5:04:3a:24:75:db:c9:30:64:
                    8f:82:cd:d6:f1:bc:a5:6f:f8:ae:21:a2:84:dc:09:
                    d0:a4:18:95:49:a7:f1:b1:62:52:2f:3b:f0:fd:c8:
                    c8:99:ca:4f:63:39:bd:e7:e9:69:fd:31:3f:69:ff:
                    ed:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:7D:D6:0D:8A:BA:A0:CB:A6:91:01:08:54:F3:3E:7C:1F:16:9E:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0a8f7025-1e75-3a9b-9d66-10818b31619b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:a1:3200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:94:82:9d:4a:44:17:63:4d:93:6c:2f:aa:dc:48:97:02:4b:
         23:32:1d:41:a0:50:a5:68:e0:4c:7d:97:5c:51:e5:a2:1a:fa:
         bb:a4:50:d0:f0:88:43:13:87:4b:4f:dc:a5:e2:fb:30:6d:ad:
         85:06:43:c1:79:43:72:33:31:9e:d0:fb:ec:3f:1b:e7:92:f3:
         28:ed:3d:f3:95:5f:47:18:e8:24:b6:5e:f7:f6:b6:60:cc:7f:
         a2:32:5d:17:99:20:81:55:6a:d4:cc:f4:46:ff:49:c4:cc:05:
         6e:8c:31:1d:0f:59:a0:8c:37:5a:4d:ba:e6:7a:7a:be:f4:1e:
         30:bd:4d:7b:9c:36:12:04:2b:99:af:11:91:be:9b:28:0b:58:
         58:5d:ce:eb:be:55:31:41:30:8b:4c:f8:ba:11:30:08:25:29:
         e8:30:90:db:ba:31:5e:6a:6c:28:e7:fd:53:cb:ad:2b:57:d1:
         ab:bc:d2:ce:25:b0:1b:33:31:c2:66:dc:60:fb:3e:8e:25:c6:
         6c:3b:6b:14:d8:44:5b:34:eb:66:15:db:8b:dc:61:42:43:61:
         e3:9c:54:1c:02:de:d9:c5:ee:11:e2:23:5e:ec:46:56:d7:c7:
         4e:67:06:f6:23:91:58:e6:5d:ad:05:13:a1:12:48:e0:24:ad:
         0e:b2:d2:41
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEdl/0yEmsjdAT0A9tAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI0MTAwMTE2MTA1OVoXDTI0MTIzMDE3MTA1OVowLzEtMCsGA1UEAxMk
MWRjZmY5N2QtMjkxOC00NjY0LWFiODQtYzVmOGZiZDE3ZmIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzoU2TA/Bmx/31Fr2ssHqK1xs7hDjvRl1/2a2
eSvodszgPwo7ViNiOL+u8B4BhBw0ieqoUwoxhYU2XUfdZkeo7hZvjSjqbBgSySmz
2o3Ae3U/2zXlJGeicifCAQTF/uP55EFzNgJkgJgbio2D6ymyzUsN8AOzOF1nmQ1F
6FxBmcDdIU1Jha6131Hm+aWr9AURz7hLP/ZbEzQZ5MhUqSyEHvsVstBtWTsX85DA
AAlyiRNH35JBDRth/hzQivhpDMgmYIgO6I+Vx6z1BDokddvJMGSPgs3W8bylb/iu
IaKE3AnQpBiVSafxsWJSLzvw/cjImcpPYzm95+lp/TE/af/t8QIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFHV91g2KuqDLppEBCFTzPnwfFp7WMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMGE4ZjcwMjUtMWU3NS0z
YTliLTlkNjYtMTA4MThiMzE2MTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJhAAoTIw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEANJSCnUpEF2NNk2wvqtxIlwJLIzIdQaBQpWjgTH2XXFHlohr6u6RQ
0PCIQxOHS0/cpeL7MG2thQZDwXlDcjMxntD77D8b55LzKO0985VfRxjoJLZe9/a2
YMx/ojJdF5kggVVq1Mz0Rv9JxMwFbowxHQ9ZoIw3Wk265np6vvQeML1Ne5w2EgQr
ma8Rkb6bKAtYWF3O675VMUEwi0z4uhEwCCUp6DCQ27oxXmpsKOf9U8utK1fRq7zS
ziWwGzMxwmbcYPs+jiXGbDtrFNhEWzTrZhXbi9xhQkNh45xUHALe2cXuEeIjXuxG
VtfHTmcG9iORWOZdrQUToRJI4CStDrLSQQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 07:01:56 2024 by rpki-client on console-fra.rpki-client.org