Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/edb2ad44-6c08-3bdc-a491-d0e8cfc4159c.roa
File:                     edb2ad44-6c08-3bdc-a491-d0e8cfc4159c.roa (raw, json)
Hash identifier:          iz3x6AbeF6qya7cZQgabGHCFCRM1/jIGYXrn0QHn4tQ=
Subject key identifier:   FE:49:AC:6A:3E:92:5C:A4:BE:41:D5:81:A6:C7:A7:30:F4:26:BE:67
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285847527C1D253D903A227686C280
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/edb2ad44-6c08-3bdc-a491-d0e8cfc4159c.roa
Signing time:             Tue 24 Sep 2024 16:26:18 +0000
ROA not before:           Tue 24 Sep 2024 16:26:18 +0000
ROA not after:            Mon 23 Dec 2024 17:26:18 +0000
asID:                     397230
IP address blocks:        2001:502:4612::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:52:7c:1d:25:3d:90:3a:22:76:86:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 24 16:26:18 2024 GMT
            Not After : Dec 23 17:26:18 2024 GMT
        Subject: CN=6d863693-9117-4ca5-bf6c-6148b16570fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:53:37:71:83:fb:bb:72:53:1c:4f:d6:f2:20:
                    6c:13:bc:54:52:77:a1:bc:8d:54:bc:7e:4f:5e:d5:
                    6e:ed:5c:ba:bf:9f:69:19:9e:1a:0f:95:24:90:d6:
                    0e:b1:8e:d4:6f:68:51:f8:58:fd:2b:1c:c8:eb:32:
                    f8:c8:34:c1:72:06:ad:76:5f:e3:7d:fe:3b:02:b0:
                    d0:8f:66:c4:2f:36:e9:07:5e:1a:dd:6a:b8:5f:6d:
                    55:ef:fe:52:7f:ac:dd:cc:ab:18:8b:53:4c:33:8c:
                    32:c9:9a:46:86:fa:37:4b:25:63:56:d9:e9:ba:45:
                    36:a9:40:15:76:5e:df:61:1d:70:71:02:72:c0:d9:
                    33:06:d4:6b:a4:f6:bb:c3:90:42:f0:f7:12:62:c5:
                    ae:33:9f:e4:50:11:84:17:04:c6:57:5f:ed:46:56:
                    0e:16:7e:02:46:36:42:99:ac:2e:98:75:fa:61:66:
                    e8:7c:a8:d5:4e:b8:f9:28:b1:dd:87:57:63:97:21:
                    bf:c3:3c:4c:18:44:b1:71:12:6d:1a:80:90:6d:e8:
                    54:5c:4d:f9:0a:f0:f9:ce:e0:23:ad:55:72:bb:0f:
                    77:78:09:d7:fe:f8:df:b6:3b:0c:7e:03:69:03:da:
                    fd:84:45:38:49:7a:14:49:d8:b9:29:fc:f3:6c:e5:
                    2e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:49:AC:6A:3E:92:5C:A4:BE:41:D5:81:A6:C7:A7:30:F4:26:BE:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/edb2ad44-6c08-3bdc-a491-d0e8cfc4159c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:4612::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:ed:d7:49:47:30:21:df:09:2a:1c:05:92:59:7d:77:a1:6e:
         c7:e7:ac:ff:d3:32:6e:34:f7:65:1a:97:aa:4b:bf:ab:bc:72:
         58:1b:f8:19:f0:19:63:6f:32:c6:18:33:17:65:f4:ce:d2:60:
         e5:d5:d7:af:96:06:ea:44:2a:f2:eb:6a:fb:59:94:53:e2:2b:
         58:e2:dc:cd:6b:06:a9:03:ab:b0:14:4b:df:b9:18:b3:e7:fb:
         68:e9:d2:b1:d3:c9:c7:ff:5e:d9:16:df:00:3e:82:8f:a0:57:
         28:a1:74:45:e1:98:c1:c2:82:75:a1:7e:ef:89:17:af:f3:8a:
         0e:10:c9:fd:05:1a:93:85:a9:6c:90:7a:70:6d:43:2a:ec:f5:
         a2:91:4e:8b:e4:64:0f:d4:e3:72:91:30:43:7d:14:30:a8:16:
         cf:80:a9:04:42:69:7b:bb:c6:e3:16:68:8b:d6:84:cd:58:9e:
         92:f9:5c:56:f4:4d:0f:c1:b7:e9:4a:3f:1a:1d:01:11:13:35:
         e2:99:54:99:9b:6f:22:5c:f7:d9:32:d2:31:ac:17:f3:08:cc:
         36:ba:24:9f:8c:00:ad:49:a1:49:33:55:f8:56:b5:2e:1a:3e:
         10:36:a0:54:a9:11:91:d7:7d:d1:35:62:87:57:89:e9:b5:bd:
         d1:1a:33:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:05:42 2024 by rpki-client on console-fra.rpki-client.org