Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1013a374-175a-35f4-8914-bd8b238c6d88.roa
File:                     1013a374-175a-35f4-8914-bd8b238c6d88.roa (raw, json)
Hash identifier:          rOFCUunITgBMWVqVVVMSXCq+OwBlCsDQQQPlJfjp+us=
Subject key identifier:   8E:9B:D1:FF:B6:98:62:F0:AA:7F:0A:E0:F5:14:F0:56:0A:DD:4D:0F
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285847527C20E7F9ABEFA4A956A290
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1013a374-175a-35f4-8914-bd8b238c6d88.roa
Signing time:             Tue 24 Sep 2024 16:26:20 +0000
ROA not before:           Tue 24 Sep 2024 16:26:20 +0000
ROA not after:            Mon 23 Dec 2024 17:26:20 +0000
asID:                     12008
IP address blocks:        2001:502:d399::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:52:7c:20:e7:f9:ab:ef:a4:a9:56:a2:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 24 16:26:20 2024 GMT
            Not After : Dec 23 17:26:20 2024 GMT
        Subject: CN=fb710fac-5b60-446e-ad05-7862cd0c9ad3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:93:1d:27:9b:76:95:7a:06:8e:cc:3e:b4:77:
                    99:95:11:8e:6c:37:f3:bd:8f:e6:22:f1:35:3c:a7:
                    83:cd:c0:94:60:79:93:70:da:7c:25:fa:4f:1b:25:
                    1f:87:1b:38:17:2f:e1:73:a8:a1:99:bc:ac:56:2a:
                    e6:09:fd:91:f6:eb:18:9c:a3:29:ae:fb:7b:8e:c6:
                    98:ec:2b:44:97:78:db:76:20:0d:29:6e:96:91:f6:
                    4e:63:4e:51:ca:09:78:35:90:a2:01:73:9a:91:ef:
                    47:05:56:f9:88:1e:b6:c9:3a:94:17:a8:0c:14:84:
                    e7:f0:b4:29:c3:49:3e:06:f6:30:2e:73:d7:de:91:
                    d3:c0:99:17:57:70:dd:cc:c5:45:1d:18:32:7b:08:
                    30:e1:0e:89:12:42:75:f6:f0:f5:48:b7:f0:fb:07:
                    d5:d6:b3:63:fa:68:08:7b:7e:58:c8:01:3c:5e:8d:
                    da:cf:6d:54:88:a0:40:bf:ef:51:47:4a:5d:bc:66:
                    eb:49:8e:1d:65:d0:ce:7a:a1:73:9f:4e:c4:1c:90:
                    6b:e7:9f:3d:6f:90:ed:0d:62:0c:07:97:f8:bc:40:
                    62:ff:05:d3:09:09:78:5d:b7:11:b5:df:38:b6:12:
                    5f:0d:46:c7:47:e5:73:45:94:95:9c:5e:6c:11:29:
                    a4:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:9B:D1:FF:B6:98:62:F0:AA:7F:0A:E0:F5:14:F0:56:0A:DD:4D:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1013a374-175a-35f4-8914-bd8b238c6d88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:d399::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:dc:ab:15:f0:a5:ca:9e:f4:81:fd:10:6a:bb:c6:2d:4c:e4:
         c2:03:f1:83:db:c5:dd:cd:95:e9:35:86:ae:57:a1:f1:ef:14:
         15:32:5e:c6:d2:5e:45:6e:d7:20:18:bb:b6:d4:65:fa:1b:6e:
         7e:b2:00:2a:81:87:e3:be:c9:f1:20:5d:4d:ee:ec:35:8a:1c:
         00:a7:2c:ad:7b:86:55:45:83:b9:56:d5:f4:cc:cf:71:46:d1:
         97:10:5e:e5:8f:95:de:d6:be:d0:cb:a4:ec:54:52:a7:7f:44:
         84:ec:50:77:3d:e1:e9:f2:c8:8c:dd:0c:7d:f6:14:9b:c0:0d:
         4e:7b:d6:e2:96:09:56:92:96:ca:d0:25:95:de:5f:df:ad:2b:
         3d:5d:ab:45:5f:89:aa:3a:8c:7c:88:bb:f6:72:6f:6f:f2:e5:
         49:79:29:ca:a2:f1:7c:88:55:24:d2:07:1a:84:24:5d:4f:f7:
         e5:ea:5d:9d:74:1b:4b:3c:2b:ae:25:45:54:f3:9a:d4:62:4f:
         c9:4d:b3:06:6e:35:e5:15:65:1e:e9:c2:2d:f1:46:0d:f9:76:
         88:92:7a:0d:b5:6b:cf:db:82:e1:a3:69:6f:29:fc:cb:ed:b4:
         53:bc:c6:f0:67:72:c9:ea:25:76:71:18:af:28:11:88:5a:84:
         91:52:15:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 07:01:57 2024 by rpki-client on console-fra.rpki-client.org