Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/1a640b8d-2f75-3f95-bc47-eca644a37c87.roa
File:                     1a640b8d-2f75-3f95-bc47-eca644a37c87.roa (raw, json)
Hash identifier:          so0xogB7kM26Lr3EfYs2DceTTj2p8Iw1LJ7ZZCuI4DI=
Subject key identifier:   5F:8A:C3:5A:66:F8:7F:3B:B1:15:A3:32:0D:F6:61:AE:3B:13:3D:CC
Certificate issuer:       /CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
Certificate serial:       010D0C9F43285847F2BA3177152F2DEE78E589D8
Authority key identifier: 5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/1a640b8d-2f75-3f95-bc47-eca644a37c87.roa
Signing time:             Thu 21 Nov 2024 02:00:38 +0000
ROA not before:           Thu 21 Nov 2024 02:00:38 +0000
ROA not after:            Wed 19 Feb 2025 02:00:38 +0000
asID:                     394354
IP address blocks:        2620:10a:8017::/48 maxlen: 48
                          2620:10a:801a::/48 maxlen: 48
                          2620:10a:80e7::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f2:ba:31:77:15:2f:2d:ee:78:e5:89:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
        Validity
            Not Before: Nov 21 02:00:38 2024 GMT
            Not After : Feb 19 02:00:38 2025 GMT
        Subject: CN=316ca95b-6896-480c-b692-161f96a85f91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:bd:14:af:a4:a1:90:bb:86:2d:b4:68:d8:44:
                    dc:ef:6a:19:f2:a1:0f:60:05:ac:5d:81:27:23:3a:
                    f8:4c:89:d7:eb:d6:7c:f2:87:95:db:af:3d:7e:03:
                    81:25:ba:35:4c:a4:5b:1d:29:50:5a:12:3f:59:03:
                    c1:40:e9:8f:15:6a:ac:e2:f0:ae:9b:66:c4:1d:2b:
                    33:94:84:e1:01:af:d8:55:37:f4:20:52:5e:8b:f1:
                    d4:02:ad:ca:58:fb:ab:d1:10:b4:08:d1:94:70:6f:
                    8c:77:93:bb:66:03:44:7b:09:6e:10:22:7f:6c:77:
                    58:42:36:f6:66:b0:5d:ae:b1:04:e9:f8:df:89:8c:
                    a3:c7:c5:e4:f9:ff:6c:8c:da:90:b5:85:59:c1:2b:
                    46:7b:89:74:7c:9b:43:d4:7c:50:32:28:09:2d:df:
                    75:76:d4:00:d6:92:96:cc:51:e0:5d:89:45:ea:15:
                    2f:a6:6f:e4:6b:55:f3:ed:64:ac:62:0a:1f:7b:10:
                    8a:a7:63:c2:98:8b:8b:c1:dd:2f:45:28:5a:21:e2:
                    61:21:40:a8:2a:58:e3:2b:3f:f5:ec:04:64:a0:9e:
                    b8:1c:08:bd:4f:40:e1:17:8f:02:79:94:b5:06:6d:
                    a7:de:7d:d1:d0:72:8b:42:3e:40:2c:ea:4b:5d:4c:
                    cf:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:8A:C3:5A:66:F8:7F:3B:B1:15:A3:32:0D:F6:61:AE:3B:13:3D:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/1a640b8d-2f75-3f95-bc47-eca644a37c87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl

            X509v3 Authority Key Identifier:
                keyid:5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:10a:8017::/48
                  2620:10a:801a::/48
                  2620:10a:80e7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:59:cd:dd:e6:e2:c2:b9:6d:3f:ce:50:07:17:79:35:61:e4:
         72:32:88:de:18:4c:75:84:c3:90:6c:04:3d:bc:85:3d:f2:7b:
         8c:d0:ef:39:c8:11:34:83:3f:8a:df:bc:26:e2:86:74:2c:7e:
         d8:48:29:cd:b1:81:59:e4:86:86:b4:01:f3:6e:1e:3c:53:75:
         e5:36:8d:f5:76:51:db:25:8b:52:4b:44:1e:56:c8:2d:39:39:
         49:91:91:cb:c6:95:28:7b:8a:4a:01:2f:35:30:75:ed:2a:ce:
         66:f1:41:cd:02:34:db:0f:81:a6:cc:08:c7:5a:76:f4:60:98:
         17:99:72:e6:58:fa:f9:91:6a:87:e8:b4:60:d7:7e:7c:b7:3f:
         9c:cd:ab:f0:e0:7d:d3:da:7a:65:a4:83:16:a0:93:d6:2b:51:
         86:f2:ef:5c:fc:16:83:4c:f2:02:dc:9d:86:b7:9b:14:e3:d8:
         f0:68:d8:c1:f2:ae:a8:dd:3b:63:20:45:87:ad:2c:2a:11:63:
         52:ce:b8:97:e0:68:8a:75:53:ba:10:1a:a2:d7:6f:9c:85:3a:
         53:5f:07:c9:79:9e:5e:6b:d8:c3:c6:9b:54:ba:e8:b6:69:f2:
         47:5b:2e:b9:2d:fb:99:57:96:b1:33:44:f3:e7:f0:ce:03:1f:
         a5:2a:1b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:38:50 2024 by rpki-client on console-ams.rpki-client.org