Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/319d5f20-2367-457b-970b-7f1c1a60fcae/3139829a-5e22-379a-8ff7-d4b23faacffe.roa
File:                     3139829a-5e22-379a-8ff7-d4b23faacffe.roa (raw, json)
Hash identifier:          By83RtKWfzRLl1GvNDdkQAFlt+91OhubaTofCe/Iy6k=
Subject key identifier:   E5:78:BE:01:52:DC:F2:9C:E7:C8:E2:2A:45:FF:6E:BB:2B:C4:A5:C0
Certificate issuer:       /CN=319d5f20-2367-457b-970b-7f1c1a60fcae
Certificate serial:       010D0C9F432858480BDA653EFFA6843F50BC9A60
Authority key identifier: 9C:51:2B:15:7A:87:63:E4:EE:5C:4E:E6:F3:26:B7:38:67:1C:E2:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/319d5f20-2367-457b-970b-7f1c1a60fcae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/319d5f20-2367-457b-970b-7f1c1a60fcae/3139829a-5e22-379a-8ff7-d4b23faacffe.roa
Signing time:             Sat 30 Nov 2024 02:00:39 +0000
ROA not before:           Sat 30 Nov 2024 02:00:39 +0000
ROA not after:            Fri 28 Feb 2025 02:00:39 +0000
asID:                     14630
IP address blocks:        2620:12e:e000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/319d5f20-2367-457b-970b-7f1c1a60fcae/319d5f20-2367-457b-970b-7f1c1a60fcae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/319d5f20-2367-457b-970b-7f1c1a60fcae/319d5f20-2367-457b-970b-7f1c1a60fcae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/319d5f20-2367-457b-970b-7f1c1a60fcae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0b:da:65:3e:ff:a6:84:3f:50:bc:9a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=319d5f20-2367-457b-970b-7f1c1a60fcae
        Validity
            Not Before: Nov 30 02:00:39 2024 GMT
            Not After : Feb 28 02:00:39 2025 GMT
        Subject: CN=d2f06ac1-d3c8-4a04-8770-60ccdaeb05e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:68:a4:bb:89:1d:b7:ab:b4:f2:f7:72:63:1b:
                    0c:ea:a6:d5:d1:ab:ba:9f:3c:e5:f6:9a:c1:4e:02:
                    97:e6:8a:18:3a:17:33:27:8e:4b:5c:50:f7:76:71:
                    cb:40:7c:43:69:96:1b:57:cf:5a:8d:e3:c8:c9:3a:
                    7e:99:5a:a6:50:ad:ad:fc:a4:ab:c2:e7:d7:66:8b:
                    07:9a:a1:5b:05:d3:8b:d1:b7:4b:ab:17:5d:f5:6d:
                    e7:70:66:18:d3:f5:1d:53:ac:a2:03:f5:b4:37:25:
                    bb:9d:0c:cf:12:40:9f:e6:d2:49:4b:ec:5f:bf:32:
                    82:5d:c9:a2:25:d8:34:cb:63:4c:b2:b9:1a:09:b4:
                    a8:b0:76:d1:70:16:05:09:5b:6f:a6:9f:69:cf:1d:
                    3a:d6:59:7d:23:d8:63:34:4f:a7:74:c0:e4:ce:87:
                    4d:a0:27:25:46:16:43:48:19:10:bb:d5:96:78:77:
                    6b:a4:ea:5b:f7:a3:89:85:48:cf:6e:fd:2b:36:e4:
                    e8:f2:3e:6b:37:a3:68:5a:b4:16:0c:90:55:63:9f:
                    0e:5d:15:29:b3:44:cc:8d:eb:af:50:6d:75:ed:22:
                    07:d0:79:9f:5f:cc:6b:41:57:7f:c4:01:c8:aa:c9:
                    cc:5c:43:d8:02:57:9b:aa:97:75:27:00:ed:42:3b:
                    6f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:78:BE:01:52:DC:F2:9C:E7:C8:E2:2A:45:FF:6E:BB:2B:C4:A5:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/319d5f20-2367-457b-970b-7f1c1a60fcae/3139829a-5e22-379a-8ff7-d4b23faacffe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/319d5f20-2367-457b-970b-7f1c1a60fcae/319d5f20-2367-457b-970b-7f1c1a60fcae.crl

            X509v3 Authority Key Identifier:
                keyid:9C:51:2B:15:7A:87:63:E4:EE:5C:4E:E6:F3:26:B7:38:67:1C:E2:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/319d5f20-2367-457b-970b-7f1c1a60fcae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:12e:e000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:b1:7f:0f:2c:02:02:82:d5:b3:76:45:0d:96:61:e3:3f:8f:
         f6:de:7a:11:e7:38:44:d8:ad:2c:a2:f2:8e:62:61:02:fb:11:
         60:c5:f3:d9:c9:76:80:10:2c:3f:74:73:2b:3d:d1:ee:db:12:
         56:99:1d:2a:42:3b:d5:36:ac:7c:ec:90:ea:88:83:fe:f3:3f:
         c6:77:25:c2:ba:a2:32:f5:ec:c4:23:0f:db:97:d7:cc:9d:e7:
         58:48:80:c3:90:24:31:9a:12:24:9a:79:fc:de:e8:d2:ba:1a:
         81:7a:dd:bf:20:5d:60:b3:f5:8d:cd:45:ce:d1:07:2d:38:ef:
         62:93:ef:98:1e:f3:20:69:87:4d:ba:6c:14:63:76:0f:20:a1:
         08:81:a4:73:23:fd:05:05:27:43:87:4f:7f:a2:e4:56:38:ce:
         26:c1:5a:d8:14:3a:af:8d:be:30:8f:07:68:41:b6:14:0f:a3:
         7a:df:d2:ee:17:b7:0e:09:8b:1e:38:8d:b4:2c:b4:4c:a0:a6:
         ed:96:01:68:99:c1:4b:5c:bf:7a:51:5e:ef:99:ee:2a:91:b1:
         e2:f4:b9:ed:cf:c7:9e:28:11:28:b8:ad:7d:d8:76:1f:a9:31:
         40:ef:99:ec:78:5d:ce:8d:f1:bc:4a:49:a9:2b:7e:e6:fd:67:
         21:51:f3:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:37:11 2025 by rpki-client