Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/88ccf5b7-5f5f-3fb7-9225-1c03e822a32f.roa
File:                     88ccf5b7-5f5f-3fb7-9225-1c03e822a32f.roa (raw, json)
Hash identifier:          NZKKWJWjWB0uRUE/EVIm8hNddTD+srwg3Olx7qNxQdQ=
Subject key identifier:   C7:93:B3:DE:75:C3:64:AE:63:5A:FE:48:59:A3:A1:A0:02:84:DB:3F
Certificate issuer:       /CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
Certificate serial:       010D0C9F43285846980A1EBC5996858379A221C0
Authority key identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/88ccf5b7-5f5f-3fb7-9225-1c03e822a32f.roa
Signing time:             Thu 18 Jul 2024 12:00:00 +0000
ROA not before:           Thu 18 Jul 2024 12:00:00 +0000
ROA not after:            Fri 21 Aug 2026 04:00:00 +0000
asID:                     36692
IP address blocks:        2620:0:cc0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:98:0a:1e:bc:59:96:85:83:79:a2:21:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
        Validity
            Not Before: Jul 18 12:00:00 2024 GMT
            Not After : Aug 21 04:00:00 2026 GMT
        Subject: CN=5e50f228-d416-4c4d-af7d-0bd7b04f1de3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:94:f0:f0:42:bf:f8:2a:ac:69:e3:22:41:7d:
                    6c:50:ad:3e:74:93:95:ef:0e:e5:01:53:49:b6:22:
                    7b:35:88:d2:cb:f4:8c:44:c9:59:0b:c7:fc:68:f2:
                    d1:69:a2:5c:10:bc:6c:51:97:fc:c2:d9:f8:f1:3d:
                    c2:a5:f2:f9:da:52:7e:ca:f5:10:8a:4b:66:9e:5f:
                    fd:01:4b:69:7b:36:25:ed:a4:63:4d:b2:5f:82:72:
                    5c:6a:f0:9e:b3:c7:9c:5e:83:a3:df:1d:5a:9f:bc:
                    14:88:ad:9d:4a:b7:08:f8:b3:ee:27:84:90:8e:27:
                    be:50:d4:63:d6:49:55:4f:0b:87:86:1e:99:6c:9b:
                    8b:74:96:4a:70:ee:c8:08:a2:a3:f9:ed:86:2c:30:
                    a0:c7:f2:48:50:b6:59:d6:dd:c9:a1:1c:15:30:81:
                    d2:8d:42:e2:22:e0:73:9c:5a:9d:fc:4d:29:f6:c7:
                    91:f7:87:d2:5e:91:a7:fa:3e:03:ad:7f:97:46:29:
                    34:a0:29:a0:43:22:54:34:a1:9f:c8:93:b3:fc:0c:
                    24:cd:22:e0:41:ae:f7:a1:3c:1e:70:10:20:94:70:
                    99:df:f8:b0:80:04:2d:46:af:8d:de:6c:ee:29:16:
                    b2:2f:88:ae:da:22:09:5f:43:de:89:c4:c9:a6:a0:
                    b7:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:93:B3:DE:75:C3:64:AE:63:5A:FE:48:59:A3:A1:A0:02:84:DB:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/88ccf5b7-5f5f-3fb7-9225-1c03e822a32f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl

            X509v3 Authority Key Identifier:
                keyid:9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:cc0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:be:58:f5:b8:47:df:a4:e8:4d:28:4b:9c:41:93:af:31:7f:
         3f:2c:78:b2:27:a5:63:b1:96:da:e4:09:a1:0f:ad:68:b9:15:
         8a:65:85:db:ba:78:c3:09:e5:8b:c6:28:a7:3d:a6:a1:64:4f:
         06:75:1f:46:af:32:bf:12:43:45:92:b5:c0:01:21:8b:53:02:
         5a:f8:29:2d:ea:6c:da:ed:f0:a9:0e:dd:c0:d0:d0:8d:37:9d:
         f2:8a:67:1c:e7:4a:cb:59:5e:e5:87:60:25:52:95:24:97:a7:
         22:2a:0a:40:29:7c:ac:7a:38:28:d7:e3:74:2e:ab:c2:0c:3a:
         ad:24:08:9c:c6:53:fb:47:50:05:e9:b4:be:47:c1:8a:5e:41:
         8c:4c:8d:81:a5:3b:69:91:db:aa:61:3b:5a:68:0d:bf:66:42:
         70:98:01:9f:78:92:5e:eb:6d:c6:65:89:07:16:96:7d:1d:2c:
         81:0c:10:91:9e:7b:09:9c:39:33:f9:e8:80:26:98:18:bb:17:
         25:f4:c5:8b:99:1a:70:05:ef:1a:58:22:8d:5d:61:ef:99:6e:
         ca:c3:d2:b8:63:23:1d:5d:d4:72:08:54:da:31:c9:c7:d1:c0:
         c2:b0:77:22:0a:1d:30:bc:95:80:38:2e:87:65:72:64:a5:1e:
         d6:89:63:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:42:36 2024 by rpki-client on console-ams.rpki-client.org