Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355/8aae9afe-07e9-3e54-840c-a7fbebdb6eee.roa
File:                     8aae9afe-07e9-3e54-840c-a7fbebdb6eee.roa (raw, json)
Hash identifier:          /ho118xE0Deih2TiPFqZYrULz16cDFU35nNSV6gyLz4=
Subject key identifier:   59:5B:7E:AF:24:E8:BD:89:81:34:CF:A1:B6:05:2E:9C:61:CF:30:D1
Certificate issuer:       /CN=8fda0e10-f6bf-4c23-bffb-d4a9a7352355
Certificate serial:       010D0C9F43285847B696B516670C6C27DF4E8A40
Authority key identifier: 10:52:7B:7E:B8:F7:A6:F4:07:6F:CF:CD:5A:3F:12:E3:1D:D2:2C:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355/8aae9afe-07e9-3e54-840c-a7fbebdb6eee.roa
Signing time:             Wed 30 Oct 2024 13:00:40 +0000
ROA not before:           Wed 30 Oct 2024 13:00:40 +0000
ROA not after:            Tue 28 Jan 2025 14:00:40 +0000
asID:                     2381
IP address blocks:        2001:4e0:1010::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355/8fda0e10-f6bf-4c23-bffb-d4a9a7352355.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355/8fda0e10-f6bf-4c23-bffb-d4a9a7352355.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b6:96:b5:16:67:0c:6c:27:df:4e:8a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fda0e10-f6bf-4c23-bffb-d4a9a7352355
        Validity
            Not Before: Oct 30 13:00:40 2024 GMT
            Not After : Jan 28 14:00:40 2025 GMT
        Subject: CN=e2b880b4-d20c-4d9d-b0c9-48798bcde208
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:31:c4:31:05:41:d2:a3:78:83:d8:a1:17:42:
                    20:3c:1c:c9:da:cd:fa:0c:42:60:f0:5b:33:6e:fd:
                    27:ba:cb:fa:20:fe:7e:1c:c9:89:27:e2:3d:22:05:
                    89:eb:0f:cd:b5:6e:1b:5c:81:a4:33:b7:73:fe:86:
                    94:7e:f2:60:cd:e0:05:6c:8b:fc:5d:b2:f3:29:22:
                    4d:1b:d0:08:e8:d3:c3:3d:6d:b4:cd:09:fc:a9:1a:
                    ac:ee:f8:e3:e5:1c:69:1f:e8:e2:b8:18:62:59:c0:
                    be:49:83:96:39:00:f9:29:3c:84:f2:c0:ab:35:c5:
                    7c:bc:57:56:88:3a:e1:80:2f:a7:c7:17:0b:e9:7c:
                    d1:38:8d:74:37:41:06:c6:12:8b:30:77:e8:da:fa:
                    ee:5e:0a:75:9f:90:a6:04:df:03:ea:0a:10:7c:6c:
                    05:16:95:a1:11:da:fc:64:7e:5c:4b:07:8a:62:de:
                    fb:f1:1c:13:c8:bc:a6:65:ad:90:a9:dd:a5:d7:c9:
                    0a:b5:78:25:e0:e1:9f:f9:01:c1:59:d0:81:ae:82:
                    c3:2c:06:52:cf:d6:b7:c7:03:53:58:de:8d:61:7c:
                    de:d1:b1:fa:f0:0c:4c:eb:81:95:97:2e:c1:4c:07:
                    78:6f:4f:0d:60:bc:27:48:61:53:b5:ca:8f:33:aa:
                    cd:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:5B:7E:AF:24:E8:BD:89:81:34:CF:A1:B6:05:2E:9C:61:CF:30:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355/8aae9afe-07e9-3e54-840c-a7fbebdb6eee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355/8fda0e10-f6bf-4c23-bffb-d4a9a7352355.crl

            X509v3 Authority Key Identifier:
                keyid:10:52:7B:7E:B8:F7:A6:F4:07:6F:CF:CD:5A:3F:12:E3:1D:D2:2C:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4e0:1010::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:8c:2f:14:f8:2f:1b:1e:f3:18:76:8d:48:2e:0e:0d:68:4f:
         bd:62:b1:31:99:30:af:a8:8b:78:f9:c3:a5:62:87:79:91:9e:
         ff:41:cf:ba:18:4c:6b:29:50:2a:40:b6:fa:e3:c5:a6:dc:60:
         6e:a0:6f:18:c6:9a:e7:a2:05:0b:a2:94:aa:3a:18:de:f6:67:
         eb:2c:20:2a:5f:1f:1b:b0:e9:0e:2d:7e:6c:22:9e:cc:cd:99:
         66:42:3c:ef:ac:a7:80:0e:4b:39:97:47:9e:66:11:4f:4a:30:
         82:8f:05:33:0b:1e:06:d5:33:4f:34:40:0b:0e:1c:cf:d4:63:
         08:af:08:74:10:82:7d:07:eb:a7:8e:04:45:4f:ce:8f:01:02:
         45:3f:5e:f0:77:63:86:56:18:33:ea:df:fa:cf:f7:2d:b9:83:
         27:d0:f8:3b:fc:2a:84:dc:9b:12:80:69:71:eb:d6:57:f2:2a:
         7f:33:f4:d8:2d:e6:1c:90:38:8c:d9:b8:7f:f1:82:e7:bf:ca:
         d5:b8:23:c5:cf:7d:32:25:d5:8e:10:90:27:90:31:75:a7:10:
         c2:66:81:f4:38:72:eb:07:f6:05:ea:07:bf:c3:06:78:2b:57:
         cd:61:a8:fe:b6:35:18:3b:3e:a9:41:4d:35:41:a3:e3:37:1a:
         d0:1c:2e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:40:35 2024 by rpki-client on console-fra.rpki-client.org