Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/fd4a3099-43b0-38ac-8212-1a3ccb4bebd5.roa
File:                     fd4a3099-43b0-38ac-8212-1a3ccb4bebd5.roa (raw, json)
Hash identifier:          6R3sAMQMd2+zdr8M04EIfhUz9fpOpd/MlBlMP1HnZPA=
Subject key identifier:   BF:7D:1F:C4:1E:61:DD:A5:60:82:3F:59:61:12:25:78:25:0B:55:4B
Certificate issuer:       /CN=c4182a0d-d744-441b-a850-e3f85aa3aafb
Certificate serial:       010D0C9F43285847C4AA18D37C9143FD167DA7C0
Authority key identifier: 2B:B1:91:D5:B4:CC:C3:BC:8A:7D:2F:CB:18:C8:09:FC:E6:99:C0:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/fd4a3099-43b0-38ac-8212-1a3ccb4bebd5.roa
Signing time:             Mon 04 Nov 2024 14:00:48 +0000
ROA not before:           Mon 04 Nov 2024 14:00:48 +0000
ROA not after:            Sun 02 Feb 2025 14:00:48 +0000
asID:                     16509
IP address blocks:        2620:135:7017::/56 maxlen: 56

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/c4182a0d-d744-441b-a850-e3f85aa3aafb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/c4182a0d-d744-441b-a850-e3f85aa3aafb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c4:aa:18:d3:7c:91:43:fd:16:7d:a7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4182a0d-d744-441b-a850-e3f85aa3aafb
        Validity
            Not Before: Nov  4 14:00:48 2024 GMT
            Not After : Feb  2 14:00:48 2025 GMT
        Subject: CN=c72cfa3b-0c5a-4f13-945f-e740acd592fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f7:cc:9e:23:8f:9c:e9:ab:63:c9:d4:4f:15:
                    e6:4c:d7:1e:d9:58:4b:3c:bd:98:32:56:30:78:3e:
                    81:bd:b1:52:be:ac:7a:77:f7:53:84:71:5d:c3:b2:
                    b8:37:c3:9a:86:b2:1d:19:a7:a4:43:aa:6f:e4:56:
                    25:1e:14:e1:ea:ed:88:d7:4a:46:ab:c2:cf:7a:3c:
                    1e:26:62:a5:8c:37:3c:ab:97:ad:70:37:3b:a4:65:
                    a1:dc:49:69:ec:df:f0:34:5b:d4:2a:7f:a6:ad:c4:
                    9b:32:68:c8:1c:20:0e:69:fb:f5:81:ce:82:48:4a:
                    17:9c:ad:1a:2a:10:c7:52:4c:14:9e:90:6e:2c:8c:
                    c9:2a:b6:47:a2:19:43:3a:7d:a4:5c:fc:9c:84:44:
                    9a:0a:94:43:e5:8e:b3:ce:40:9a:be:bf:82:62:80:
                    01:50:f5:38:3b:a3:80:a0:df:d2:b5:ee:c7:5d:55:
                    0f:11:2b:8e:4a:e5:67:38:f4:9c:3c:da:13:8a:02:
                    f7:cd:13:b9:c0:1d:b6:06:3e:a1:da:6d:3c:f3:08:
                    fb:eb:28:9b:f0:35:ba:3a:42:db:de:03:25:ec:7b:
                    8b:e6:ec:5f:c9:f5:4e:24:de:e5:a8:18:fc:2c:30:
                    88:dd:c5:60:bc:f6:24:1f:45:9b:df:d5:ab:85:81:
                    de:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:7D:1F:C4:1E:61:DD:A5:60:82:3F:59:61:12:25:78:25:0B:55:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/fd4a3099-43b0-38ac-8212-1a3ccb4bebd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/c4182a0d-d744-441b-a850-e3f85aa3aafb.crl

            X509v3 Authority Key Identifier:
                keyid:2B:B1:91:D5:B4:CC:C3:BC:8A:7D:2F:CB:18:C8:09:FC:E6:99:C0:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:135:7017::/56

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:e5:b2:9d:2a:1f:6b:44:2d:87:7b:bf:d7:45:87:86:d8:df:
         d2:dd:01:74:de:8e:e3:84:57:5a:85:a3:f5:a2:5a:be:92:e8:
         2e:2e:83:28:f2:3a:7a:00:51:13:c5:42:31:e7:fe:1b:63:6d:
         0c:39:4f:7f:bf:ad:bf:87:57:ab:fe:9d:4e:45:9d:08:f2:2d:
         82:9e:92:cd:ca:b8:22:13:4d:14:d3:6a:9e:c5:91:9f:af:ed:
         8c:76:d2:b9:0c:5f:95:75:31:3f:b8:bf:8d:48:ac:a7:22:6e:
         88:3c:3c:0a:ed:af:97:28:81:99:97:31:a5:6e:33:9a:3b:7a:
         50:ab:33:65:fc:71:66:47:b9:70:95:70:bc:ec:58:72:0c:c6:
         11:05:9f:7e:8d:e1:67:38:a2:2a:45:13:2f:aa:c8:ec:be:65:
         a5:ee:05:1e:00:a3:fa:a5:b2:fa:58:da:1f:97:b2:d1:6e:92:
         9c:46:42:4d:45:9a:2c:02:5a:c7:5f:29:fe:7c:c8:c4:e2:be:
         cf:64:1b:9b:cc:1f:eb:da:90:e2:d2:52:f0:a2:04:91:08:8b:
         cc:6f:99:11:9f:b5:d0:c4:4d:ea:1d:37:65:cd:b5:95:4b:cd:
         aa:d3:bc:f1:60:2f:e6:5a:c4:50:1e:c7:ef:ef:27:a1:fa:1e:
         85:3b:2c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:25:10 2024 by rpki-client on console-fra.rpki-client.org