Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899/8aefadba-6c2b-364a-882a-231170fd640d.roa
File:                     8aefadba-6c2b-364a-882a-231170fd640d.roa (raw, json)
Hash identifier:          eVbIQwmQdOuAr8CIGcSYFWVXmLkDqpxxtnDJv1yj57Q=
Subject key identifier:   4B:56:E1:67:56:F7:3A:55:6A:49:C9:7C:99:95:83:0C:53:88:0B:86
Certificate issuer:       /CN=969446db-6a2e-47bc-a33b-2dd883bfb899
Certificate serial:       010D0C9F43285847B9617547357E9FFE0FE0BF68
Authority key identifier: 8C:4C:51:45:1B:97:18:EC:29:F6:65:EB:83:73:27:E3:84:C2:00:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899/8aefadba-6c2b-364a-882a-231170fd640d.roa
Signing time:             Thu 31 Oct 2024 13:00:41 +0000
ROA not before:           Thu 31 Oct 2024 13:00:41 +0000
ROA not after:            Wed 29 Jan 2025 14:00:41 +0000
asID:                     26679
IP address blocks:        2620:112:e000::/44 maxlen: 44
                          2620:112:e000::/48 maxlen: 48
                          2620:112:e001::/48 maxlen: 48
                          2620:112:e002::/48 maxlen: 48
                          2620:112:e003::/48 maxlen: 48
                          2620:112:e004::/48 maxlen: 48
                          2620:112:e005::/48 maxlen: 48
                          2620:112:e006::/48 maxlen: 48
                          2620:112:e007::/48 maxlen: 48
                          2620:112:e008::/48 maxlen: 48
                          2620:112:e009::/48 maxlen: 48
                          2620:112:e00a::/48 maxlen: 48
                          2620:112:e00b::/48 maxlen: 48
                          2620:112:e00c::/48 maxlen: 48
                          2620:112:e00d::/48 maxlen: 48
                          2620:112:e00e::/48 maxlen: 48
                          2620:112:e00f::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899/969446db-6a2e-47bc-a33b-2dd883bfb899.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899/969446db-6a2e-47bc-a33b-2dd883bfb899.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b9:61:75:47:35:7e:9f:fe:0f:e0:bf:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=969446db-6a2e-47bc-a33b-2dd883bfb899
        Validity
            Not Before: Oct 31 13:00:41 2024 GMT
            Not After : Jan 29 14:00:41 2025 GMT
        Subject: CN=841d302c-2b77-4a48-93d3-41432005b79d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:60:1c:dc:cf:e1:5a:5f:bf:4e:83:39:ed:2d:
                    67:0f:86:cc:dc:e9:9b:59:d8:7b:6a:a6:56:91:02:
                    69:6f:a9:ea:81:1a:e6:8b:2b:cd:46:8c:d6:c6:b9:
                    b1:ae:e5:68:f5:12:9e:ea:9c:fc:d7:4d:39:d5:63:
                    91:e2:c7:bd:d8:81:4a:ae:a2:9d:eb:44:f1:93:d2:
                    53:56:9a:9e:f1:46:09:ab:f1:11:23:58:a7:ea:e6:
                    60:03:fb:aa:4a:09:b9:3b:6c:91:b7:b0:99:2d:7c:
                    2d:54:62:a4:1f:02:84:bf:1c:56:71:10:2f:6a:7c:
                    56:31:03:12:2b:04:de:c8:87:dc:8f:48:6f:17:cb:
                    26:8a:b2:70:5f:7d:95:0b:1b:e0:e1:56:17:1f:4c:
                    58:35:a6:d3:45:3a:0d:6c:34:dc:6d:68:12:67:33:
                    92:14:fb:45:c1:d5:15:40:f9:5b:b0:3b:27:d4:95:
                    73:f8:b4:09:1e:bf:b6:25:49:c0:eb:f5:04:ec:26:
                    70:53:9d:09:22:71:b0:c8:f1:9c:9c:4d:f6:18:61:
                    6e:64:ea:ad:43:83:d0:91:35:d9:d4:29:df:6d:da:
                    cd:a2:89:6c:cd:7b:fb:cc:b6:cc:ef:4e:1f:02:9c:
                    3c:31:df:c2:a1:6c:17:b5:55:de:e2:ba:0f:1d:ea:
                    e3:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:56:E1:67:56:F7:3A:55:6A:49:C9:7C:99:95:83:0C:53:88:0B:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899/8aefadba-6c2b-364a-882a-231170fd640d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899/969446db-6a2e-47bc-a33b-2dd883bfb899.crl

            X509v3 Authority Key Identifier:
                keyid:8C:4C:51:45:1B:97:18:EC:29:F6:65:EB:83:73:27:E3:84:C2:00:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:112:e000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:0c:f0:70:0b:0d:45:30:50:37:c2:56:0a:cc:c8:a4:a2:5a:
         83:45:36:02:e7:a0:99:db:fa:30:2c:1f:26:66:12:c6:1c:8b:
         ba:63:2d:27:59:c8:e1:8e:06:ff:e6:dd:5d:ad:34:d9:6f:f3:
         b5:ea:9f:23:ad:ce:8f:46:d5:b8:65:f9:bf:c9:e8:86:dd:0c:
         41:47:b9:15:94:51:72:46:83:73:86:59:41:c4:ea:a9:4a:d7:
         2a:2b:6e:46:13:cb:00:b4:0f:ad:80:c0:0b:14:12:e2:1d:aa:
         be:d9:cf:c2:22:20:f1:05:18:6d:ad:ca:20:1d:e4:d1:cd:6b:
         02:fe:1e:23:3e:3b:0d:55:3b:28:fe:7b:99:bb:19:55:97:00:
         79:4e:6d:e5:e7:62:0f:93:8e:6b:36:15:14:ee:19:8c:70:e2:
         28:5f:21:19:1b:af:92:64:7b:46:69:7a:ef:50:05:de:7b:cf:
         ba:fb:57:68:51:af:26:60:67:f8:40:a5:52:8f:21:15:b8:65:
         50:27:98:73:e0:01:0f:83:fb:c8:2e:72:2b:df:34:65:7a:46:
         55:09:52:d8:59:9e:c3:f2:d0:87:51:da:56:be:7c:fb:ab:e1:
         2e:76:43:77:e0:cf:62:32:b1:4c:65:d4:82:4e:72:4c:ef:f9:
         37:5f:ab:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:31 2024 by rpki-client on console-fra.rpki-client.org