Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d111a5e9-1922-33ea-a02f-11683a2965fe.roa
File:                     d111a5e9-1922-33ea-a02f-11683a2965fe.roa (raw, json)
Hash identifier:          P1TP9z604xAZyVQav6wr/RGmozEyhzWs7wfEoK5AijQ=
Subject key identifier:   C8:12:4A:8B:13:01:83:20:A5:47:4E:2E:CC:1E:1A:95:76:29:6C:95
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584765FF4E92FCEBFC738FD735E0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d111a5e9-1922-33ea-a02f-11683a2965fe.roa
Signing time:             Tue 01 Oct 2024 16:11:00 +0000
ROA not before:           Tue 01 Oct 2024 16:11:00 +0000
ROA not after:            Mon 30 Dec 2024 17:11:00 +0000
asID:                     397239
IP address blocks:        2610:a1:3300::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:65:ff:4e:92:fc:eb:fc:73:8f:d7:35:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Oct  1 16:11:00 2024 GMT
            Not After : Dec 30 17:11:00 2024 GMT
        Subject: CN=bedb9c43-a4a5-4cf9-89a1-543c6d671535
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:0d:38:e3:24:13:4e:6a:4d:44:7e:bc:e8:59:
                    9a:d5:3c:52:c3:b1:62:c5:dd:97:ba:6d:be:b3:0c:
                    0e:3e:66:65:b3:b3:2b:b5:d4:89:a4:4f:50:1d:7c:
                    0c:4c:a6:de:b8:4f:6d:2d:6a:74:e4:ce:b0:c0:d8:
                    60:8e:13:9e:6a:00:bb:ca:76:45:7e:15:64:92:9c:
                    6c:dc:d3:7f:41:34:df:f9:ff:84:56:9e:04:71:7a:
                    b7:9d:da:11:0f:f8:3d:66:ba:7e:33:21:3f:aa:4d:
                    88:32:c8:90:31:ec:9a:b6:31:b5:6d:4d:3b:0c:a9:
                    4b:e5:0b:d5:a2:59:86:a9:26:42:c5:7e:ec:a3:9e:
                    6d:2e:62:b1:6d:aa:86:4a:f2:b8:a9:2c:17:12:58:
                    0e:a4:ad:dc:6c:68:f2:ac:00:7e:7b:56:d7:5e:f8:
                    ca:6d:68:24:2e:61:cc:5d:37:93:73:06:ae:bb:98:
                    14:43:61:72:57:2f:0f:62:91:ea:fe:e9:21:00:2d:
                    9f:41:ad:94:a1:bb:c2:b5:7c:7c:18:8e:e0:f1:f0:
                    a1:c1:bf:35:64:e9:02:8a:2b:f8:2b:71:b0:ea:97:
                    5b:27:be:98:4c:d9:ac:80:22:6d:7d:77:4a:13:f7:
                    11:e8:38:84:82:e6:92:24:91:21:10:65:c0:3c:ee:
                    58:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:12:4A:8B:13:01:83:20:A5:47:4E:2E:CC:1E:1A:95:76:29:6C:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d111a5e9-1922-33ea-a02f-11683a2965fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:a1:3300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:ae:90:3f:1e:31:ea:95:36:d6:5c:75:19:1b:56:7b:41:ad:
         9b:d2:ef:83:18:7e:5d:11:88:6d:ae:c7:7e:dc:7f:bc:e8:29:
         dc:cc:71:bf:98:67:3f:e2:77:af:d1:74:64:92:9d:f5:af:7b:
         54:35:5e:80:57:87:45:79:d9:d5:cf:4b:45:89:a0:b1:0e:6a:
         06:11:4d:3e:79:9d:6f:b5:f3:86:d2:ee:60:ee:20:c5:39:dc:
         53:83:8c:8a:00:95:2e:b4:af:f9:fe:55:67:8d:a9:c9:9e:eb:
         4e:32:a2:45:0a:d4:83:e7:22:88:d6:84:12:5a:b8:6d:8c:e9:
         23:22:be:2a:43:a4:66:f9:b1:c7:00:1e:9c:d1:24:22:48:89:
         2f:52:03:58:d5:76:85:11:3b:a8:20:85:5c:d2:0b:65:dc:22:
         f4:1f:57:0e:21:d5:5f:8c:6f:9a:05:aa:97:db:38:b5:cf:3d:
         58:46:ae:73:88:e5:cb:77:a4:02:88:5e:61:23:ad:6e:19:6c:
         eb:eb:62:7e:2a:63:ad:7b:54:35:73:90:bd:7d:ae:17:27:0d:
         85:c0:ed:f7:88:5f:b0:dd:da:9c:75:b4:05:f7:29:fd:db:c8:
         f8:37:94:21:ba:a6:23:db:97:63:db:7a:31:f6:a0:b1:07:ec:
         48:58:bf:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 20:19:05 2024 by rpki-client on console-fra.rpki-client.org