Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/510a172f-b6e3-3bbf-a070-b9648ffd679b.roa
File:                     510a172f-b6e3-3bbf-a070-b9648ffd679b.roa (raw, json)
Hash identifier:          N8HeOQtFsps19VyHv+M/1s6JaNa2lA8sbMg+0IvNULk=
Subject key identifier:   EF:53:B4:57:EA:B1:B5:94:B1:32:26:AC:5F:1A:6E:0D:F8:B9:4C:16
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847CA3F9231252AAE1BFE113D00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/510a172f-b6e3-3bbf-a070-b9648ffd679b.roa
Signing time:             Wed 06 Nov 2024 14:00:41 +0000
ROA not before:           Wed 06 Nov 2024 14:00:41 +0000
ROA not after:            Tue 04 Feb 2025 14:00:41 +0000
asID:                     20940
IP address blocks:        2600:1488:6240::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ca:3f:92:31:25:2a:ae:1b:fe:11:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Nov  6 14:00:41 2024 GMT
            Not After : Feb  4 14:00:41 2025 GMT
        Subject: CN=a16102a2-fcd0-43c1-a60e-021d4eef157f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5e:e9:89:26:5a:c2:c3:54:90:22:b2:ab:9f:
                    a3:b6:79:f6:61:cf:f1:2e:26:5e:dd:48:7f:d3:5f:
                    62:bc:7b:07:32:63:b7:42:8e:ca:65:a5:bf:a2:a0:
                    65:7e:db:9a:d5:68:38:fe:01:44:11:52:1e:51:1e:
                    5e:70:98:16:a7:e6:85:a3:c7:a4:fc:e2:b6:ef:06:
                    2d:2c:f6:1b:89:4f:f8:eb:a7:90:ac:9d:7d:11:5a:
                    f1:98:7b:40:fb:88:d2:36:94:02:28:8b:c6:72:73:
                    f5:26:94:a1:02:5e:a9:ad:e6:31:f1:6a:e4:0d:8f:
                    b6:93:01:51:3f:5d:a5:10:81:61:c6:e4:f5:b8:bf:
                    0d:cb:7d:cd:83:b1:0b:61:35:f5:05:2e:fe:87:e4:
                    8f:1a:9a:55:49:8e:54:80:08:0a:aa:4a:92:61:85:
                    e0:d0:85:a3:6b:bc:d0:56:ac:75:62:63:28:22:28:
                    46:68:eb:64:9e:50:95:90:e4:5c:48:6b:bb:b7:0b:
                    d6:83:75:1f:ac:68:44:b6:e9:9f:27:c2:a8:80:3a:
                    52:6f:e1:04:5d:50:ac:37:e3:1d:6f:63:a9:af:b2:
                    f1:07:f7:37:bf:6e:e1:e2:48:f2:0b:dd:14:13:66:
                    1d:96:4f:db:2b:39:f7:a7:29:d5:4c:f2:01:d7:63:
                    17:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:53:B4:57:EA:B1:B5:94:B1:32:26:AC:5F:1A:6E:0D:F8:B9:4C:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/510a172f-b6e3-3bbf-a070-b9648ffd679b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1488:6240::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:f8:3b:11:3f:73:8f:cf:19:fd:03:0d:74:fe:3c:ed:81:59:
         24:14:ed:5e:d9:68:77:b1:6f:c5:80:37:79:fe:74:85:1c:1d:
         79:ea:a3:5f:33:83:a8:f6:c0:15:07:0a:72:a0:c6:9d:09:19:
         de:1d:6d:81:cc:4f:3f:7c:4d:1d:0e:c4:5e:91:fb:6b:6e:64:
         f6:45:bb:8b:c0:39:80:7d:64:d2:f8:97:69:0d:ba:76:78:3d:
         fc:aa:58:c3:06:95:a8:cf:33:a9:4f:da:2a:94:d6:45:4d:1d:
         86:ed:75:8e:c6:cd:3c:ec:0e:e0:66:83:bd:aa:12:9a:ab:a7:
         e7:0d:6e:6e:78:81:76:fa:f8:38:2c:39:e1:bb:e0:fe:83:1d:
         c8:15:3a:67:41:32:c1:d8:e0:43:69:72:1c:77:f6:54:a0:1d:
         c6:c8:fa:6b:c7:6b:73:12:bb:fe:ed:e3:3f:9c:35:7c:eb:4b:
         8a:e5:64:7e:33:1d:02:49:dc:36:1f:3b:e6:73:5c:f3:d0:00:
         d7:b8:c7:f9:ce:0b:3b:56:2b:ac:a8:af:00:a6:9b:68:79:44:
         ff:c9:2b:c4:1a:5b:07:80:42:13:cf:f0:71:7a:12:92:10:27:
         b1:a1:cc:84:85:e3:ba:90:ed:0c:d3:cc:8c:99:96:2b:83:c1:
         21:68:27:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:39:29 2024 by rpki-client on console-ams.rpki-client.org