Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f0ed1d72-a60f-34ff-948c-2630beb3fead.roa
File:                     f0ed1d72-a60f-34ff-948c-2630beb3fead.roa (raw, json)
Hash identifier:          X7DIx9cFRz5JqaTTwvXbVeyHxUmZ/YYp/QEoMlT//Ts=
Subject key identifier:   44:1A:DF:5C:9F:12:73:8C:E9:B0:0E:5F:0A:EB:B0:CF:EB:87:BE:6A
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847CA3F8BFF7D658944C981F180
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f0ed1d72-a60f-34ff-948c-2630beb3fead.roa
Signing time:             Wed 06 Nov 2024 14:00:41 +0000
ROA not before:           Wed 06 Nov 2024 14:00:41 +0000
ROA not after:            Tue 04 Feb 2025 14:00:41 +0000
asID:                     20940
IP address blocks:        2600:1488:6200::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ca:3f:8b:ff:7d:65:89:44:c9:81:f1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Nov  6 14:00:41 2024 GMT
            Not After : Feb  4 14:00:41 2025 GMT
        Subject: CN=ee16a3bb-2924-4a99-9832-f1bb6a2f2d0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:12:34:9e:f0:1e:c4:12:cd:34:65:34:95:9c:
                    75:8a:6e:ef:20:8f:e0:bd:76:dd:f7:2b:ad:af:42:
                    dd:72:f4:05:85:bf:00:1e:04:e2:a3:1a:e4:b0:c0:
                    58:5f:80:d2:fd:30:e4:fc:8f:67:ed:f0:b1:e8:78:
                    25:6b:90:23:6a:9e:37:ad:66:eb:5c:3a:54:9e:e9:
                    fb:b1:3c:1f:4d:d8:8c:1d:6e:28:3c:bf:28:2e:d5:
                    16:0f:b5:40:fe:08:f3:28:b8:07:b5:2e:a4:c6:0b:
                    68:fa:96:e6:1b:fd:dd:fe:cf:4c:18:84:d2:ef:85:
                    e0:0c:fa:c2:ea:34:c5:c7:96:76:da:e3:18:78:09:
                    e0:86:3c:00:b6:76:90:f2:8e:49:e7:d0:64:c9:14:
                    d5:94:cd:73:e2:69:49:8c:4a:ba:0e:db:10:eb:fb:
                    0e:ed:3f:e5:51:93:01:cc:d8:b8:25:29:3b:7b:ec:
                    b9:08:6c:7f:3d:21:5a:35:c4:da:be:0a:2a:94:2c:
                    85:a0:c8:03:8d:b6:fa:4e:08:1e:21:87:3d:39:c8:
                    7f:5a:e4:3b:e3:b4:cb:fb:ba:15:a0:37:c3:da:93:
                    e9:f3:78:d8:ba:eb:d8:77:a6:f6:1f:c9:ab:f0:a7:
                    5d:4f:b2:83:b7:4e:97:9a:d1:a8:8e:b2:57:8a:08:
                    b3:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:1A:DF:5C:9F:12:73:8C:E9:B0:0E:5F:0A:EB:B0:CF:EB:87:BE:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f0ed1d72-a60f-34ff-948c-2630beb3fead.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1488:6200::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:4c:ec:e0:a8:96:d5:90:3e:f3:2e:ec:bb:25:9d:54:60:49:
         a3:b7:35:e4:1f:41:90:13:04:d6:08:25:65:bb:ef:02:9d:ef:
         9c:0e:05:c0:c9:8d:48:32:87:96:b4:3a:03:b2:71:29:05:3a:
         36:d8:10:4e:8a:65:9d:52:f7:56:5d:7a:bf:b9:9d:f3:40:d4:
         4f:5b:66:95:2f:d6:21:20:1d:39:14:81:70:93:a1:33:3f:5a:
         bb:0a:ae:8c:84:54:5a:08:36:e9:53:05:98:c0:8c:50:0a:9e:
         d2:eb:67:e3:ac:2b:83:a3:8f:12:b1:5c:bb:fe:a9:af:4f:65:
         32:d7:87:4d:8f:ff:27:0b:ea:c4:90:f8:ae:d9:e8:25:30:72:
         e8:19:29:77:ee:05:ab:f4:7b:5f:c5:15:bb:8c:e2:3d:cb:6a:
         ef:b1:56:45:c6:a2:c2:8b:b7:0a:76:23:06:b7:9d:1c:ba:ea:
         57:bb:16:43:1c:35:c9:63:33:84:8c:15:4c:e8:29:51:44:d2:
         68:00:55:8e:bc:93:cc:fd:1a:fa:f3:a4:32:6a:28:b6:09:6a:
         71:66:8f:d5:de:ff:18:d0:e5:81:3c:4f:07:9c:19:6e:65:4e:
         ad:08:92:53:7c:de:54:85:72:28:ce:0c:e8:84:92:f9:07:a3:
         af:81:54:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:40:42 2024 by rpki-client on console-ams.rpki-client.org