Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/a31500f4-cfd5-3cea-b888-2f24641d721d.roa
File:                     a31500f4-cfd5-3cea-b888-2f24641d721d.roa (raw, json)
Hash identifier:          k5LThZJxK9HAgIhQW0luqzE6yVMW5a0UwPkFEGRHcuU=
Subject key identifier:   04:51:9A:7F:91:51:69:B4:45:F6:84:22:C4:D3:5A:B4:7C:24:0A:12
Certificate issuer:       /CN=c4182a0d-d744-441b-a850-e3f85aa3aafb
Certificate serial:       010D0C9F43285847C4AA18E559EEE78937972360
Authority key identifier: 2B:B1:91:D5:B4:CC:C3:BC:8A:7D:2F:CB:18:C8:09:FC:E6:99:C0:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/a31500f4-cfd5-3cea-b888-2f24641d721d.roa
Signing time:             Mon 04 Nov 2024 14:00:48 +0000
ROA not before:           Mon 04 Nov 2024 14:00:48 +0000
ROA not after:            Sun 02 Feb 2025 14:00:48 +0000
asID:                     14618
IP address blocks:        2620:135:7017::/56 maxlen: 56

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/c4182a0d-d744-441b-a850-e3f85aa3aafb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/c4182a0d-d744-441b-a850-e3f85aa3aafb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c4:aa:18:e5:59:ee:e7:89:37:97:23:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4182a0d-d744-441b-a850-e3f85aa3aafb
        Validity
            Not Before: Nov  4 14:00:48 2024 GMT
            Not After : Feb  2 14:00:48 2025 GMT
        Subject: CN=587b40db-54de-48c1-b27a-7b0d025d2c44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c0:af:08:5f:23:b4:3a:40:14:55:50:ea:7f:
                    74:21:7e:a8:46:8a:49:0b:70:9e:d7:14:30:2c:f9:
                    01:75:27:ad:7e:a0:3f:73:f4:7b:49:bf:a2:0d:e6:
                    7c:d1:b1:9f:67:46:df:f2:2b:c4:ca:f0:73:1f:44:
                    d2:1c:9b:6b:d3:3d:e0:7b:cc:4a:f5:7d:82:47:29:
                    e6:8e:85:21:3d:75:bb:50:60:35:66:97:d6:db:a8:
                    20:7a:9c:87:f7:8a:3d:01:f8:b9:d0:6c:cd:30:ae:
                    1c:b6:8e:49:73:d6:4d:f0:ed:61:6f:06:d0:2a:d9:
                    ec:8c:f9:51:5e:5e:98:55:ca:bd:58:bb:af:6a:f1:
                    29:b8:74:75:a0:15:31:95:85:f4:03:90:6e:a6:d0:
                    9f:99:9b:c9:dc:7a:90:c1:9c:86:c4:d6:96:a6:b3:
                    4c:2b:fa:df:14:33:bc:cd:fa:d7:d9:14:ff:be:ca:
                    e7:ac:33:b0:6b:b0:d9:90:c0:a1:a8:70:55:9a:cc:
                    a6:1b:d5:9f:ef:16:c6:9e:01:b4:b7:56:19:4a:10:
                    b8:6f:f6:71:40:6a:ed:e3:ea:8d:b6:8d:12:5a:99:
                    33:55:a1:dc:36:29:86:5b:f2:c2:e5:83:fe:57:a5:
                    52:94:7b:d0:b1:d3:23:ba:ea:ba:5a:91:99:43:24:
                    95:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:51:9A:7F:91:51:69:B4:45:F6:84:22:C4:D3:5A:B4:7C:24:0A:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/a31500f4-cfd5-3cea-b888-2f24641d721d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/c4182a0d-d744-441b-a850-e3f85aa3aafb.crl

            X509v3 Authority Key Identifier:
                keyid:2B:B1:91:D5:B4:CC:C3:BC:8A:7D:2F:CB:18:C8:09:FC:E6:99:C0:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:135:7017::/56

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:46:74:72:f4:8a:99:2d:cb:e2:a6:d0:7d:c4:6c:19:bc:a5:
         0c:aa:f8:7d:47:12:b0:54:92:01:72:2b:1c:9e:d9:9a:11:bc:
         a5:47:38:b4:8d:0e:b2:a9:82:3f:63:89:f1:46:49:08:b5:2b:
         0a:94:e6:3e:36:fb:1a:57:eb:e0:66:0c:be:b0:6f:97:d3:8e:
         06:2d:bc:24:62:68:d2:25:61:2d:ef:dc:13:c7:31:a0:62:f7:
         b6:cf:bb:e3:f9:f7:f9:ae:e4:25:6f:a5:20:fe:09:87:e9:4a:
         68:74:f4:da:5f:56:2e:96:29:95:d6:7e:3e:b8:40:c6:ee:53:
         ca:f1:0a:31:de:0e:f1:32:d0:7c:3d:0c:98:13:43:cb:12:16:
         34:b3:ef:a6:7a:bf:90:4d:03:6a:f8:c2:51:d7:ca:b6:b8:11:
         f9:29:af:d2:c9:6b:61:3d:73:e0:8d:7d:e2:08:e5:e5:e1:5f:
         30:99:38:e0:45:3c:06:8d:56:3c:ab:a5:61:9e:ae:63:e3:14:
         ec:26:3b:0b:14:77:4d:00:68:3a:8c:e4:c7:ff:85:05:89:b1:
         69:60:4e:32:56:66:40:a9:0f:47:57:38:57:a2:e7:24:c1:69:
         94:85:0b:a5:4d:13:dc:c4:17:0b:9b:3f:82:d1:8a:ca:40:92:
         9b:a2:c6:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:25:10 2024 by rpki-client on console-fra.rpki-client.org