Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ee1c28f7-1ed9-381d-aa64-c6d176762b1b.roa
File:                     ee1c28f7-1ed9-381d-aa64-c6d176762b1b.roa (raw, json)
Hash identifier:          +D1bxdtKUiwRpHdDQtyWrd58w5td7JezY6ZEB5SVLvY=
Subject key identifier:   F4:1A:AD:E0:18:C2:46:91:13:5C:C0:08:19:61:1C:AB:BB:8F:64:3F
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285847527C2268E21456639DAF5100
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ee1c28f7-1ed9-381d-aa64-c6d176762b1b.roa
Signing time:             Tue 24 Sep 2024 16:26:21 +0000
ROA not before:           Tue 24 Sep 2024 16:26:21 +0000
ROA not after:            Mon 23 Dec 2024 17:26:21 +0000
asID:                     397229
IP address blocks:        2001:502:d399::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Oct 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:52:7c:22:68:e2:14:56:63:9d:af:51:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 24 16:26:21 2024 GMT
            Not After : Dec 23 17:26:21 2024 GMT
        Subject: CN=a0aca7eb-da39-4205-9100-150faf4af22e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:2a:a0:a7:b5:84:82:91:bd:c7:df:2e:d1:20:
                    47:a0:88:e4:29:dc:bd:5f:4a:27:67:a5:28:28:37:
                    5f:d6:9c:ea:da:31:10:14:a7:21:cd:93:07:23:ce:
                    cb:b3:cb:12:2e:fa:82:35:77:0a:24:89:8e:04:fa:
                    f2:96:e8:65:05:4c:82:30:3e:04:84:7b:d5:ec:f5:
                    2d:22:82:96:78:d2:31:5d:c7:60:e2:4d:68:2a:eb:
                    7d:08:da:81:09:59:f2:40:82:99:1e:c2:57:67:29:
                    53:bf:7c:09:17:4c:16:06:8e:b3:b6:d5:13:c8:bb:
                    20:2d:03:48:4c:1b:ce:6d:eb:f2:45:e7:85:1e:76:
                    59:6b:94:54:8c:65:24:99:7e:f5:f3:78:f5:f8:d4:
                    c0:1d:87:79:d7:d5:3f:97:9d:23:43:7d:5e:b5:bc:
                    cd:6d:bc:50:6a:df:dd:69:49:d3:75:5d:db:b6:ce:
                    ab:56:19:21:dc:75:b2:5a:11:d2:c0:0c:b8:ea:6d:
                    7d:77:da:eb:57:ce:f7:83:1d:20:f9:2d:85:f9:67:
                    4a:e5:37:a1:03:b6:08:b6:47:58:3f:5e:77:5c:aa:
                    42:b4:49:d4:53:95:b7:6b:92:31:e5:1d:1f:65:d2:
                    1d:d5:37:96:b4:83:ce:f3:5f:8b:ad:44:11:80:db:
                    8f:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:1A:AD:E0:18:C2:46:91:13:5C:C0:08:19:61:1C:AB:BB:8F:64:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ee1c28f7-1ed9-381d-aa64-c6d176762b1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:d399::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:a7:ec:5a:48:9c:31:f0:da:58:6b:b5:de:33:d4:46:1e:fd:
         2a:6b:79:0a:66:80:db:51:a2:ea:88:09:48:30:45:76:09:04:
         8f:ea:c2:59:6c:ab:0d:5f:89:90:a8:2e:e7:19:50:0b:77:53:
         e6:33:b6:5e:ad:52:18:66:33:fc:be:f3:47:93:20:f2:2b:64:
         4a:2b:f2:b1:4c:ea:44:f0:f9:90:69:2f:de:a7:f2:54:c7:9b:
         1e:f4:ee:5e:04:d0:51:30:eb:87:0c:59:ee:df:02:01:8c:74:
         bb:24:af:d8:9f:e8:bf:07:6a:fc:cc:f7:0d:d1:fa:41:16:68:
         6e:b8:1e:3c:08:e5:69:d4:83:70:68:e0:df:bb:b3:18:31:dd:
         c7:f2:40:d6:6f:26:79:5a:ab:f3:11:78:e7:8a:87:b3:26:2e:
         2f:97:ac:0f:bd:cf:73:4a:b4:de:c6:78:2f:24:32:84:ca:1f:
         44:08:19:7a:26:e5:b6:02:88:e0:2a:80:ae:69:37:eb:05:8f:
         0f:d3:c5:6f:c9:1f:a1:25:3e:60:d4:96:b3:54:31:75:1e:78:
         67:87:b5:02:ad:c9:a1:38:ca:3f:eb:89:83:ec:8e:9f:9b:4c:
         f1:88:17:06:e5:31:af:03:23:a6:75:4d:44:44:24:53:89:66:
         1c:81:6b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 18:47:39 2024 by rpki-client on console-fra.rpki-client.org