Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/3b5f5588-b2d6-3b3c-afce-0ca173718c46.roa
File:                     3b5f5588-b2d6-3b3c-afce-0ca173718c46.roa (raw, json)
Hash identifier:          +DoGfxsBSu+XnBmj9mCHSgYqVdaucJL8fT/OkE1e+BY=
Subject key identifier:   D1:AB:02:5F:72:A6:7E:94:1C:22:9B:97:5E:6D:AE:01:77:85:3A:F5
Certificate issuer:       /CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
Certificate serial:       010D0C9F432858476C9DB29A571ACF40B412BD00
Authority key identifier: 5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/3b5f5588-b2d6-3b3c-afce-0ca173718c46.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     55195
IP address blocks:        2620:10a:8021::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9d:b2:9a:57:1a:cf:40:b4:12:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=37e654b3-eefa-40f3-884a-c92546a5c248
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:36:17:d7:f0:4e:42:f7:a8:dc:69:72:74:80:
                    ad:6b:ff:51:1a:93:dd:66:51:54:dd:ea:30:6b:da:
                    63:f6:f5:b8:92:0d:cf:99:34:2c:43:ea:8a:0a:e1:
                    d9:2b:13:54:4a:66:93:a2:83:bf:24:63:61:da:42:
                    f6:b6:76:02:cb:b3:9f:ab:59:f8:eb:cb:fd:36:5a:
                    61:9b:95:d8:e7:13:15:6d:24:e6:16:f1:b6:b9:75:
                    55:30:62:38:02:2b:f0:7e:04:bc:76:bc:79:64:dc:
                    2e:01:ab:d6:b0:68:0d:0e:95:8c:d2:b7:93:16:80:
                    28:be:d2:ba:bc:28:ca:31:ba:34:60:25:d6:a6:20:
                    aa:0d:63:51:e8:99:c3:3f:f6:18:64:24:28:ff:ba:
                    8b:11:81:f5:8f:c6:6c:e9:6b:af:42:e5:37:c5:f9:
                    0b:4b:ff:34:d5:52:7a:22:c7:d5:1d:00:c9:cc:36:
                    4d:2b:92:53:58:82:d8:91:0a:50:cc:38:3e:89:95:
                    ae:ac:38:e4:77:56:32:dc:f1:35:1d:a8:4e:5f:7a:
                    29:a6:ca:1c:e0:64:15:08:a7:f6:35:ab:f8:be:99:
                    9d:92:f9:3d:c1:58:a4:f1:39:01:d9:44:33:65:8a:
                    9c:02:56:73:49:5a:3a:5e:93:04:50:9a:52:d5:12:
                    28:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:AB:02:5F:72:A6:7E:94:1C:22:9B:97:5E:6D:AE:01:77:85:3A:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/3b5f5588-b2d6-3b3c-afce-0ca173718c46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl

            X509v3 Authority Key Identifier:
                keyid:5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:10a:8021::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:a1:e5:28:cf:26:af:87:47:e7:17:a5:9c:f5:d0:71:e0:92:
         50:09:e9:4e:31:d7:58:b4:cf:c2:35:19:27:1c:08:d6:db:5c:
         e8:a5:64:bc:9c:52:49:10:70:83:fa:f9:97:2d:34:0b:d4:62:
         fc:58:ee:66:6d:57:56:a9:87:73:47:6a:ff:1b:45:1f:f2:0e:
         cd:39:f7:5b:80:97:97:89:28:84:74:f5:71:19:57:3c:be:ee:
         71:12:11:48:92:de:02:02:fe:ac:4b:59:41:4e:d2:08:0d:7e:
         85:31:0f:38:a2:a5:84:dc:29:d3:ff:07:eb:bd:88:98:18:b3:
         51:89:8c:9e:17:e6:31:88:5c:c9:d8:64:6e:c4:ce:5f:48:b2:
         78:d9:9a:ab:09:c5:6e:1a:0b:9f:65:12:c6:61:e8:e0:76:4c:
         b5:24:28:da:a4:4d:d0:99:68:2e:ff:16:37:b0:2e:c3:b3:33:
         da:88:81:24:36:30:02:3e:fe:e9:4e:f1:55:9d:07:23:ef:8e:
         84:f3:e0:39:6d:26:6b:99:0d:fc:13:f3:c1:88:97:f4:17:a6:
         be:8c:51:65:ee:55:f9:ce:ee:61:f3:3d:7d:fd:4c:82:bd:ef:
         40:b5:c7:cb:9b:d7:98:69:c9:86:b0:d0:a0:99:a4:54:c5:fb:
         a5:6a:13:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:08:35 2024 by rpki-client on console-ams.rpki-client.org