Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/7ac32ada-1ff5-3c70-8375-2fd90f6f2402.roa
File:                     7ac32ada-1ff5-3c70-8375-2fd90f6f2402.roa (raw, json)
Hash identifier:          O6528suZdOBoebiiNtM/k6003++Ix/SDCsUbAPtCeO0=
Subject key identifier:   8C:CF:6A:D3:C7:B5:70:6F:32:BE:BC:2B:AC:68:30:EC:95:F8:88:89
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F43285847B96167FEA189CA447FEBB240
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/7ac32ada-1ff5-3c70-8375-2fd90f6f2402.roa
Signing time:             Thu 31 Oct 2024 13:00:41 +0000
ROA not before:           Thu 31 Oct 2024 13:00:41 +0000
ROA not after:            Wed 29 Jan 2025 14:00:41 +0000
asID:                     174
IP address blocks:        2001:49f0:d009::/48 maxlen: 48
                          2001:49f0:d014::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b9:61:67:fe:a1:89:ca:44:7f:eb:b2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Oct 31 13:00:41 2024 GMT
            Not After : Jan 29 14:00:41 2025 GMT
        Subject: CN=465a9e85-0afa-46e3-98e6-b7abe02d924c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:2e:60:73:7e:ff:ac:2e:e1:78:63:8d:72:a5:
                    b2:e4:91:dd:ea:14:62:ff:61:63:15:10:0d:40:6b:
                    9b:cd:97:78:ac:35:a0:55:21:84:d5:22:66:98:60:
                    d8:1f:e9:de:60:79:1a:a9:df:76:a3:4f:00:58:1b:
                    39:69:e0:6a:3a:2d:2b:a9:a3:33:28:fa:2e:0f:87:
                    22:3d:8a:f9:b8:f7:b0:7e:82:ad:f0:34:f7:d8:ec:
                    18:84:b1:9f:36:49:f5:3d:a1:04:5e:13:d7:57:26:
                    e7:64:9f:d6:7a:24:b8:78:ff:db:52:47:84:44:ae:
                    79:75:e2:f1:77:c7:d0:2f:ba:13:6e:a3:b4:a8:32:
                    f2:18:d0:13:b9:08:e3:aa:80:ac:fc:ed:3a:1c:61:
                    f5:a1:f9:21:ab:2b:86:52:b3:c6:13:58:f2:1c:9e:
                    33:fe:8e:0d:8e:77:f7:5e:37:ed:e8:31:89:a0:8b:
                    b1:dc:24:26:84:85:5a:1b:9e:1a:d3:c8:00:e7:54:
                    b4:9d:09:b0:6f:05:6e:40:9c:f2:3a:38:79:8a:3e:
                    53:3b:60:ce:de:ac:6c:13:5e:b5:3a:28:72:2a:1d:
                    d7:c4:af:09:ef:10:6f:11:d4:d3:14:da:be:61:7b:
                    7a:65:95:04:32:2b:e6:7d:a3:48:45:9b:df:87:d6:
                    e4:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:CF:6A:D3:C7:B5:70:6F:32:BE:BC:2B:AC:68:30:EC:95:F8:88:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/7ac32ada-1ff5-3c70-8375-2fd90f6f2402.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:49f0:d009::/48
                  2001:49f0:d014::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:df:d7:40:79:ed:43:82:23:23:dd:41:60:6a:1e:da:6f:5d:
         de:0e:98:a4:48:89:65:a9:a6:08:36:2a:b0:f9:47:ae:62:7c:
         b4:3d:5d:77:1b:32:04:14:3e:92:43:83:a9:e3:e6:25:41:33:
         bb:b6:4c:dd:76:43:46:78:a1:6b:5d:9a:d1:f0:74:95:8b:6b:
         56:db:05:37:a6:23:e2:b1:d2:a9:ea:23:bb:0d:a0:4e:46:fc:
         b8:93:81:a9:da:a7:55:77:94:0a:ba:08:11:38:18:d1:98:f6:
         b3:be:9a:1b:e2:ec:39:58:7e:42:f1:a3:3a:d8:d8:f3:a9:a7:
         67:90:9b:ed:5f:4a:68:92:a9:76:9f:df:54:b7:0e:24:bc:4b:
         ab:d2:4b:dd:69:f6:68:a8:98:14:9e:1c:f9:3f:1a:84:6a:8f:
         00:94:8c:96:fb:b2:77:d2:6a:90:fc:61:23:2e:36:ce:0c:ea:
         40:bf:56:56:cc:e4:0e:ea:59:20:02:b9:fe:6b:f1:42:12:8d:
         51:18:28:e7:ec:a6:39:2c:9a:43:5a:fc:f7:e7:73:e8:15:fb:
         2c:4e:ae:19:7b:83:90:78:43:19:a5:0c:85:a2:ab:e7:71:57:
         69:78:62:02:86:bd:39:45:26:63:7b:b5:38:c8:19:0e:b1:66:
         e0:45:e5:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:42:38 2024 by rpki-client on console-ams.rpki-client.org