Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2bc297aa-eb21-3ec3-9130-4df78212b950.roa
File:                     2bc297aa-eb21-3ec3-9130-4df78212b950.roa (raw, json)
Hash identifier:          /vb3OieSZy2NnTq3RQTFKH/508BRzjW7d1Ozx2uDMco=
Subject key identifier:   FC:6B:6D:F5:57:D6:F0:2B:42:4E:CD:7A:4D:E3:86:E0:3F:7F:C0:BB
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285847527C2D73EF3581C5B6E4A600
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2bc297aa-eb21-3ec3-9130-4df78212b950.roa
Signing time:             Tue 24 Sep 2024 16:26:26 +0000
ROA not before:           Tue 24 Sep 2024 16:26:26 +0000
ROA not after:            Mon 23 Dec 2024 17:26:26 +0000
asID:                     397219
IP address blocks:        2620:74:1c::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:52:7c:2d:73:ef:35:81:c5:b6:e4:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 24 16:26:26 2024 GMT
            Not After : Dec 23 17:26:26 2024 GMT
        Subject: CN=dfdc5644-a6d8-40fe-aa50-c65f6dccba9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:3e:2a:e8:b9:ce:2f:bd:72:a8:40:c0:90:43:
                    05:7e:d5:69:61:5f:04:b4:30:a8:03:a5:a9:b5:e5:
                    a5:da:41:d2:ff:43:8f:7f:27:70:61:ce:d2:9c:76:
                    1f:60:82:f5:e2:da:41:76:ad:9b:dd:54:27:5f:ea:
                    9d:30:de:23:a0:f3:ed:0b:33:c8:43:a3:a4:99:a9:
                    fc:5e:1c:7a:4b:25:f4:13:9e:0f:24:7e:a7:ce:4b:
                    a4:f1:ae:10:8c:b1:6d:f0:ba:86:6a:3c:c0:93:c0:
                    23:cf:20:10:9f:68:20:12:63:56:54:a1:f8:fa:14:
                    f8:ac:e1:fc:bb:1c:a0:f8:78:a4:c5:77:3f:4a:0e:
                    e4:36:00:87:44:5b:cd:db:bf:b9:67:7f:6f:12:ab:
                    e5:58:68:8c:4a:ff:f6:78:ef:9f:bc:2d:97:c1:60:
                    71:f3:3a:cb:a1:6a:70:45:96:d9:29:a1:8c:9e:3f:
                    68:b6:55:22:35:54:81:b7:80:d5:65:db:8b:17:48:
                    36:43:0d:ff:77:fb:05:e4:71:b5:22:b9:3c:37:48:
                    67:b2:be:7d:2b:3b:b4:90:6a:3d:92:f6:18:8d:80:
                    60:26:3f:62:03:ad:06:77:59:b6:2e:1c:de:e7:55:
                    a7:df:be:e2:b2:ac:81:4e:18:69:a6:64:67:e7:bf:
                    7e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:6B:6D:F5:57:D6:F0:2B:42:4E:CD:7A:4D:E3:86:E0:3F:7F:C0:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2bc297aa-eb21-3ec3-9130-4df78212b950.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:1c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:76:be:4a:1f:30:46:ee:cd:bc:11:85:fb:c6:03:04:91:d0:
         f1:8e:24:2b:95:1e:58:13:d3:32:ec:6b:de:e6:7d:1d:b8:61:
         1f:3f:60:75:b4:6f:fd:05:ce:9f:9e:86:f0:ca:c5:0f:a2:51:
         7b:a0:59:fc:5b:7b:d1:60:35:d5:ee:09:2b:2c:8a:12:e5:6a:
         f6:cb:55:9b:e1:09:46:e1:85:22:cd:97:a2:f1:62:0c:75:0e:
         80:77:a6:18:67:2c:4f:af:db:16:80:b0:fc:fa:ce:71:6c:52:
         6c:1f:7a:6f:6b:63:25:a0:10:5f:c9:0e:02:f6:d0:43:39:dc:
         88:13:c1:ac:89:3c:64:1f:0a:e2:87:bd:92:c9:c1:46:79:69:
         e8:90:6e:f8:94:82:8d:3f:bd:b7:3a:31:7c:0a:47:09:26:8f:
         fe:e3:33:25:07:bb:36:66:59:25:8b:44:ed:3d:89:43:80:f4:
         6a:97:39:15:96:a6:63:ff:64:e9:07:2d:11:c2:d7:07:00:66:
         3c:92:fe:55:c7:b4:a2:26:9f:90:cb:7f:fe:0b:c6:b6:8d:66:
         ea:d3:e5:a4:98:73:36:b4:79:2b:ce:8a:2f:cf:1c:f3:d9:08:
         38:ef:4d:5e:03:f8:a7:3d:1f:c0:26:ae:4d:6c:2a:bf:51:fe:
         dc:54:51:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 20:18:43 2024 by rpki-client on console-fra.rpki-client.org