Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96/d09435c9-c66e-3a69-a2cc-42d29a9c36f3.roa
File:                     d09435c9-c66e-3a69-a2cc-42d29a9c36f3.roa (raw, json)
Hash identifier:          dk2LCWZin8z2NCl1sjyAMMjQhl1aKrhu7xOm1kHK8O4=
Subject key identifier:   25:C8:BF:17:D1:85:D4:E9:3A:37:0F:A6:B9:71:67:51:29:B7:3A:38
Certificate issuer:       /CN=7334a22a-f222-4457-889f-5478966ecf96
Certificate serial:       010D0C9F4328584797E12FDF457C850E5ECA5A80
Authority key identifier: C4:3E:A5:1C:D6:FA:F5:2F:16:D6:43:A2:C3:7D:EC:33:8F:FF:48:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96/d09435c9-c66e-3a69-a2cc-42d29a9c36f3.roa
Signing time:             Sat 19 Oct 2024 13:00:42 +0000
ROA not before:           Sat 19 Oct 2024 13:00:42 +0000
ROA not after:            Fri 17 Jan 2025 14:00:42 +0000
asID:                     397085
IP address blocks:        2620:13c:1000::/40 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96/7334a22a-f222-4457-889f-5478966ecf96.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96/7334a22a-f222-4457-889f-5478966ecf96.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:97:e1:2f:df:45:7c:85:0e:5e:ca:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7334a22a-f222-4457-889f-5478966ecf96
        Validity
            Not Before: Oct 19 13:00:42 2024 GMT
            Not After : Jan 17 14:00:42 2025 GMT
        Subject: CN=64568033-e847-47b8-8239-90bc3c8f4e89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:75:6c:32:16:1d:8a:af:cf:41:9c:ab:87:6e:
                    51:28:64:0d:21:54:be:7d:66:0f:9a:d1:46:b2:db:
                    97:32:2c:0a:48:32:e3:e2:8e:c3:a2:10:ab:2c:14:
                    c2:48:92:48:7a:74:50:79:30:fe:32:0c:61:70:0a:
                    ac:c6:05:a8:e3:4f:28:f8:87:a6:80:42:b7:04:ab:
                    14:20:77:39:46:14:9e:02:26:03:d0:3b:96:be:af:
                    94:42:be:dd:d9:a8:bf:0f:cc:5c:ff:ab:ac:c6:57:
                    d0:50:3f:b5:ad:42:4b:1d:00:7b:40:47:70:c4:b2:
                    c6:4c:b7:29:e9:b6:69:67:a5:9c:05:af:5c:3d:43:
                    5e:2a:65:8d:0d:c0:81:a7:0c:20:21:f6:05:07:c4:
                    e6:20:ea:88:e0:36:a5:fa:21:28:9b:af:f3:4d:38:
                    5f:df:52:be:65:38:35:03:e7:5a:e5:b9:9f:b6:f9:
                    36:dd:ff:f2:0e:5c:43:b9:ea:ba:80:d9:8e:4b:8e:
                    92:2e:b2:7e:02:aa:f6:83:16:e5:18:32:61:f0:39:
                    b2:8c:f3:83:e3:7f:51:b1:e9:fd:32:90:a4:66:b7:
                    e1:1e:3d:5f:53:1a:28:b9:2b:2a:47:4d:2b:01:10:
                    47:eb:53:f6:e8:11:98:50:7d:0b:ae:65:01:4a:62:
                    cb:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:C8:BF:17:D1:85:D4:E9:3A:37:0F:A6:B9:71:67:51:29:B7:3A:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96/d09435c9-c66e-3a69-a2cc-42d29a9c36f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96/7334a22a-f222-4457-889f-5478966ecf96.crl

            X509v3 Authority Key Identifier:
                keyid:C4:3E:A5:1C:D6:FA:F5:2F:16:D6:43:A2:C3:7D:EC:33:8F:FF:48:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:13c:1000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:0f:a2:b3:68:4d:d2:94:09:17:a2:6b:82:2d:b1:9e:45:b2:
         3d:68:cc:b9:43:41:0f:de:e8:1d:16:ec:de:52:93:95:55:36:
         85:3c:e6:95:38:89:71:85:14:f8:19:6d:4d:4e:6c:49:a9:40:
         90:16:de:91:4b:f5:e4:cc:a9:6f:e1:99:1c:93:c7:85:eb:2d:
         53:bc:b5:70:8f:4c:94:7c:81:1a:a8:07:d8:1a:d7:56:14:8a:
         e7:41:a4:ba:55:a5:e0:fd:1b:d5:32:1d:d7:55:f6:85:2b:ae:
         3d:69:73:be:75:ab:dc:25:9e:8f:9f:b1:df:d6:76:57:e7:ef:
         92:d4:f1:03:6e:20:be:06:eb:b6:98:95:0f:d2:36:4e:81:94:
         f9:1d:e6:7b:60:05:5e:a1:21:ce:25:a8:15:c3:90:7a:07:32:
         d3:4d:95:ad:f2:da:54:80:97:ea:35:aa:2b:f0:3d:35:6e:29:
         18:9b:23:ee:8c:7a:4a:c1:12:df:1a:19:f5:fe:84:90:2f:6d:
         67:85:a3:3e:60:d0:34:22:e3:7f:d3:9a:8e:53:c1:7a:6e:59:
         04:c9:bf:16:67:28:3f:e9:46:ac:c7:54:86:1e:42:5a:21:af:
         94:ef:bf:65:48:9c:ed:2a:72:aa:96:51:4c:69:71:d8:54:7b:
         ce:4d:d9:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:40:04 2024 by rpki-client on console-fra.rpki-client.org