Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4d2fabdf-e58d-35cd-a000-d40fa4c98162.roa
File:                     4d2fabdf-e58d-35cd-a000-d40fa4c98162.roa (raw, json)
Hash identifier:          YziAqetvp1WvNwYU7mS2+amK048fvr+vi32KvzW8oPM=
Subject key identifier:   0D:DB:EA:25:C9:2F:FD:DE:EA:09:C3:E9:A9:E2:B9:67:BC:F2:BD:1F
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285847527C28338440E96BBE1A0010
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4d2fabdf-e58d-35cd-a000-d40fa4c98162.roa
Signing time:             Tue 24 Sep 2024 16:26:24 +0000
ROA not before:           Tue 24 Sep 2024 16:26:24 +0000
ROA not after:            Mon 23 Dec 2024 17:26:24 +0000
asID:                     397228
IP address blocks:        2001:503:e239::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:52:7c:28:33:84:40:e9:6b:be:1a:00:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 24 16:26:24 2024 GMT
            Not After : Dec 23 17:26:24 2024 GMT
        Subject: CN=28711cde-9ea2-4f5b-9460-94fb7f7d8412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:35:2c:51:b4:17:af:c7:37:11:1f:e6:7a:92:
                    a6:14:b5:fe:57:e0:8e:48:35:c9:6e:ab:b4:09:79:
                    d0:d9:7f:86:74:a9:dc:83:e9:27:81:39:df:1f:65:
                    95:26:af:a9:f8:da:d6:de:5d:f3:39:cc:f8:03:66:
                    4f:38:3f:ca:fc:5c:f6:46:f2:6a:11:b6:38:c1:c4:
                    84:c3:c6:58:ba:f5:fa:ba:73:97:7b:b6:19:e3:84:
                    38:55:f9:49:26:a8:26:64:5f:ff:3c:00:27:70:24:
                    c3:0e:61:47:19:eb:32:de:b6:52:db:7d:97:73:e5:
                    4f:ac:fe:5a:f4:bd:9a:72:1c:07:11:c9:32:84:b0:
                    9d:b2:9b:42:fe:59:40:ac:3e:80:d0:d9:4b:f9:bf:
                    ea:43:b5:71:d3:9d:0b:24:12:c7:5a:75:15:32:e6:
                    d8:f2:de:4d:e4:e5:0a:27:d8:4a:a3:93:9d:c7:94:
                    1d:2d:8c:4f:d7:8d:87:65:bd:f3:a9:9c:32:a6:01:
                    e0:f8:f8:62:ab:87:a1:79:a1:4c:72:a5:c1:21:85:
                    e6:af:ad:bc:86:a0:1c:0b:e6:55:59:f7:43:d7:fe:
                    9e:08:65:13:27:0c:b3:67:63:ba:83:54:29:07:77:
                    3f:92:93:9e:c1:35:92:d9:b4:57:8a:df:bb:3e:be:
                    cc:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:DB:EA:25:C9:2F:FD:DE:EA:09:C3:E9:A9:E2:B9:67:BC:F2:BD:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4d2fabdf-e58d-35cd-a000-d40fa4c98162.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:e239::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:05:37:b2:a5:48:62:40:0c:8c:50:af:22:7f:26:ec:e9:25:
         59:ff:b9:05:c5:50:b6:46:2f:87:a0:95:13:8a:bd:0e:8d:74:
         ee:e2:9a:b6:a4:e2:01:03:c7:c7:45:17:ce:c2:4f:17:54:24:
         e8:73:dd:cf:ce:9a:4d:54:53:a3:4b:db:39:0c:33:2a:50:30:
         43:d4:43:6f:f5:fa:0f:7f:ee:07:4e:fc:ce:da:7d:23:c2:08:
         1e:3c:19:5c:9d:4a:66:1c:2d:6f:8e:0b:d2:34:dd:5e:51:d8:
         57:13:36:d2:dc:cf:e6:9a:2e:c6:1e:d8:08:f9:76:bb:79:fb:
         8c:36:9a:7a:2d:f3:1d:c4:6e:84:0c:e7:9f:8d:e6:0e:8c:05:
         88:1d:25:da:b4:19:f8:a9:fb:94:2e:82:b1:b0:09:5b:af:49:
         ac:b4:91:6c:92:d8:09:3f:6e:69:fe:f2:fb:40:4f:27:81:b1:
         d9:f0:46:a7:32:12:08:4c:e7:05:cb:2b:51:de:08:d2:7d:0f:
         5b:0e:21:e9:b4:5b:c4:81:ef:09:f9:5e:3d:a0:d1:f4:f9:21:
         0a:dc:c9:a8:47:02:39:52:82:4f:08:f3:cd:4c:e6:ca:e4:a2:
         d9:99:36:a0:4c:a9:e0:21:d2:05:e0:16:dd:db:cc:da:fd:02:
         e6:43:20:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 07:02:03 2024 by rpki-client on console-fra.rpki-client.org