Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/81ec4313-2a12-32dc-bcaa-9a736928311b.roa
File:                     81ec4313-2a12-32dc-bcaa-9a736928311b.roa (raw, json)
Hash identifier:          QDEBdMUJHVb83sQZgGji6YbUKoub7MLmlFOuR8ha9g0=
Subject key identifier:   A3:15:50:24:A9:E8:04:47:51:15:66:AE:A8:DB:C0:31:1A:D7:95:DA
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285847527C258A2204716770744100
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/81ec4313-2a12-32dc-bcaa-9a736928311b.roa
Signing time:             Tue 24 Sep 2024 16:26:22 +0000
ROA not before:           Tue 24 Sep 2024 16:26:22 +0000
ROA not after:            Mon 23 Dec 2024 17:26:22 +0000
asID:                     397231
IP address blocks:        2001:502:f3ff::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:52:7c:25:8a:22:04:71:67:70:74:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 24 16:26:22 2024 GMT
            Not After : Dec 23 17:26:22 2024 GMT
        Subject: CN=89137cc3-4add-4a00-b32e-c568a3fd2416
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:5c:66:d0:cf:aa:d1:65:dd:b5:9d:26:03:c4:
                    51:cf:c8:ed:c6:b0:87:27:3d:e2:67:e8:95:82:d9:
                    cc:40:15:c2:e0:dd:80:ae:13:c1:68:b8:62:76:75:
                    99:cb:1c:64:e9:7d:62:80:93:b5:bc:09:a6:6c:af:
                    8e:be:1b:b1:d3:68:7b:cd:ad:44:3e:33:f5:5e:77:
                    ee:52:90:87:8b:b7:fd:96:43:8b:07:66:31:6f:39:
                    e8:ae:a0:18:64:ff:db:40:87:ff:57:2a:d5:2e:a3:
                    75:e7:4c:b1:4c:0f:04:68:97:9e:a8:cb:f5:47:77:
                    0b:46:aa:31:2b:48:19:d2:4a:6a:1f:0f:76:8c:2b:
                    c2:a2:b3:2a:35:8c:59:60:af:10:75:d7:b0:e9:f7:
                    f8:43:57:aa:1c:ce:f5:ab:ab:85:c9:e2:db:19:57:
                    1d:68:cf:34:56:59:bd:d3:e3:6e:fc:51:d0:93:9e:
                    f4:5e:7c:5b:7b:0a:52:b6:d5:5d:01:5f:c7:28:a5:
                    10:ce:6a:3f:ef:03:55:7c:aa:93:eb:c2:1b:c1:b6:
                    40:3c:8f:47:28:00:98:4a:16:b6:cb:e0:53:d2:ab:
                    c2:9c:e1:68:89:06:f9:5a:6b:35:04:c3:d6:07:9e:
                    88:e3:f7:5e:03:39:89:eb:93:4a:1e:30:08:65:5a:
                    6b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:15:50:24:A9:E8:04:47:51:15:66:AE:A8:DB:C0:31:1A:D7:95:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/81ec4313-2a12-32dc-bcaa-9a736928311b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:f3ff::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:4e:a4:5a:b2:b3:f4:e9:f5:a8:44:62:bf:ae:17:77:38:53:
         f1:fc:9b:94:5d:8a:23:b9:e4:49:bd:a7:4a:17:15:33:35:74:
         95:4a:27:85:08:bc:51:58:23:d8:e5:a6:bc:05:bd:c0:e4:93:
         cd:b3:5c:a7:84:f7:45:b8:31:c2:0c:97:00:c7:5d:8b:34:2e:
         b3:8c:72:9a:f9:9f:ee:11:b3:b3:a9:98:1a:20:7f:61:33:ce:
         d4:63:09:77:08:62:e0:94:92:75:38:a6:9e:a9:3b:b5:80:14:
         10:20:b9:ab:61:e8:2e:f7:bb:ad:36:1e:0c:93:ad:d1:06:bb:
         76:68:c4:13:82:60:78:77:38:22:c4:60:61:20:e8:fa:ce:b4:
         5d:2c:70:87:62:f6:fb:b9:6c:58:fa:43:1a:b0:3f:f4:e1:36:
         aa:a6:80:4f:2d:81:a9:f7:17:34:a7:34:5b:a7:c8:98:47:39:
         c8:fc:cd:aa:b2:9a:20:d0:da:b0:da:4e:2d:a1:83:e9:3a:9b:
         fe:a4:ef:64:af:54:3e:2f:b3:e3:4b:fe:0f:43:78:6a:7e:96:
         8c:97:0d:40:10:ac:1b:53:13:79:17:68:2f:1d:81:2d:8a:da:
         67:37:f5:90:3a:7b:db:50:7d:b3:6f:fb:87:7f:10:9a:3d:4d:
         b2:ca:2b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:06:46 2024 by rpki-client on console-ams.rpki-client.org