Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1799bef7-379d-3d89-8827-fe96da225bfb.roa
File:                     1799bef7-379d-3d89-8827-fe96da225bfb.roa (raw, json)
Hash identifier:          4IHHEU8hZtwZvjoH9x22XyZEBYEfoiwY2zjXMoqHRxE=
Subject key identifier:   51:DA:A5:CD:06:6F:7F:20:3E:45:28:8A:5F:66:A1:8E:8C:D8:12:21
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847B696C445DA04833CD79F0C00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1799bef7-379d-3d89-8827-fe96da225bfb.roa
Signing time:             Wed 30 Oct 2024 13:00:40 +0000
ROA not before:           Wed 30 Oct 2024 13:00:40 +0000
ROA not after:            Tue 28 Jan 2025 14:00:40 +0000
asID:                     20940
IP address blocks:        2600:1410:d000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b6:96:c4:45:da:04:83:3c:d7:9f:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 30 13:00:40 2024 GMT
            Not After : Jan 28 14:00:40 2025 GMT
        Subject: CN=00c7254a-7723-4ca7-a686-d43d2410a04c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f0:8e:24:6a:d9:6f:d9:08:68:83:1f:03:0b:
                    3c:30:56:23:e4:ec:1b:34:5f:b9:90:7b:88:8f:a2:
                    77:6e:f0:5f:91:89:3b:1d:ea:24:85:14:0c:60:50:
                    d0:64:16:b2:f5:c2:55:5c:50:77:8b:6b:23:65:4e:
                    85:6a:be:ec:30:7c:21:c8:30:22:f9:1d:78:4c:ee:
                    c8:93:ea:ff:0d:95:b1:e7:93:9f:59:23:24:18:27:
                    8c:09:7b:8c:98:06:00:27:3c:64:d6:de:a5:26:1b:
                    52:25:9e:c2:ad:3b:e0:78:ef:1a:43:d6:81:4c:1a:
                    d3:5a:4f:2c:37:c6:00:c5:79:bd:f6:6f:55:f9:05:
                    89:e0:cb:65:47:bd:62:fd:26:49:32:68:46:59:03:
                    78:8f:ae:35:eb:e5:ca:1b:84:6c:5c:5b:7e:9f:bb:
                    7f:f2:b2:0a:d8:da:2c:8b:30:32:47:84:59:02:7c:
                    b8:17:ef:60:ab:51:75:5c:20:6e:a8:03:13:01:19:
                    ad:9d:88:ea:e1:0f:07:1a:d4:9b:e7:27:42:f8:3f:
                    09:fc:19:25:b8:f9:6a:a2:53:45:ee:61:25:2f:c9:
                    c9:43:60:3a:9b:95:61:cf:90:ab:e7:e7:2d:45:cc:
                    a6:73:62:82:44:64:cb:40:f1:7b:a8:17:3e:b3:bc:
                    9e:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:DA:A5:CD:06:6F:7F:20:3E:45:28:8A:5F:66:A1:8E:8C:D8:12:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1799bef7-379d-3d89-8827-fe96da225bfb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1410:d000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:29:4b:e2:79:90:17:68:4c:a9:df:29:55:f0:0b:11:f6:bb:
         65:16:80:52:bb:10:c1:33:2b:1f:87:ad:bd:cf:44:19:38:e0:
         97:1c:75:60:bd:da:f4:fc:ba:4b:22:b1:ef:0d:ff:2f:d0:df:
         b5:7c:7d:3f:bb:9a:41:45:f9:ba:9a:91:7d:4a:da:aa:c8:6a:
         cc:f7:26:66:70:94:d6:00:00:3f:05:d2:32:6e:e7:e4:2c:70:
         30:59:cd:d2:83:43:29:be:f4:bd:e1:88:81:5d:e3:da:19:a3:
         48:21:1f:a0:17:53:1d:44:0a:5d:9c:ef:ef:35:30:3e:48:bc:
         3d:aa:20:e0:37:74:e2:7b:17:2d:4d:b3:a4:b1:74:63:ab:3e:
         73:ee:f8:32:89:58:06:7f:8b:3b:5a:4e:b7:0e:32:49:fb:66:
         0a:1e:3d:a0:7c:ed:f9:89:ec:83:6d:81:12:9b:32:42:59:d3:
         06:8c:4c:c1:3a:11:df:6d:7e:fc:d8:10:63:a8:bb:a5:87:2d:
         74:cf:c3:08:9f:9d:3a:a7:58:c4:71:cd:b9:61:36:81:b5:6c:
         3f:ff:0f:cc:1b:17:e0:6f:47:b7:93:bd:41:f4:c5:05:65:b0:
         2e:42:69:e2:49:f1:df:af:7f:8f:9b:b0:dd:89:9f:e7:41:11:
         dd:34:a7:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:39:02 2024 by rpki-client on console-ams.rpki-client.org