Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/b0c012f4-baa2-3789-9ae9-0736d044aafe.roa
File:                     b0c012f4-baa2-3789-9ae9-0736d044aafe.roa (raw, json)
Hash identifier:          BqNr1X+eEsxcc/VUXSjLH/Jwg50EfPbtzB5P+9oxSpk=
Subject key identifier:   F0:BB:CD:3F:23:B2:A1:5F:92:A4:37:49:E0:F0:19:33:C8:F8:18:1F
Certificate issuer:       /CN=aad22c3d-3c14-42b7-a324-b1bb21649378
Certificate serial:       010D0C9F43285847924BD65C7ACDB103F6DBDF00
Authority key identifier: 67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/b0c012f4-baa2-3789-9ae9-0736d044aafe.roa
Signing time:             Thu 17 Oct 2024 13:00:42 +0000
ROA not before:           Thu 17 Oct 2024 13:00:42 +0000
ROA not after:            Wed 15 Jan 2025 14:00:42 +0000
asID:                     27281
IP address blocks:        2620:116:800a::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:92:4b:d6:5c:7a:cd:b1:03:f6:db:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aad22c3d-3c14-42b7-a324-b1bb21649378
        Validity
            Not Before: Oct 17 13:00:42 2024 GMT
            Not After : Jan 15 14:00:42 2025 GMT
        Subject: CN=e20a5234-a522-4fb1-a634-cab3fd124cee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:2f:4e:18:45:8e:ca:c8:90:5b:31:42:0d:d2:
                    e7:c2:f6:f3:a3:10:52:33:3a:64:a9:a9:24:f7:a5:
                    18:8f:5c:20:2e:b9:5e:42:0c:b9:7b:96:ca:f6:6e:
                    2c:7c:2c:f6:8c:81:db:2e:92:09:ec:a0:e7:de:1b:
                    79:e5:67:2f:3d:2e:e8:36:bc:0a:c6:58:88:ae:b8:
                    ca:f4:ff:5a:01:de:35:a9:c1:1f:49:73:89:c7:e3:
                    47:af:59:61:8b:81:bd:5b:28:90:2a:a8:84:fb:c3:
                    14:54:7e:36:06:25:45:db:9c:f6:b0:66:4b:fb:6c:
                    f2:7b:ad:32:a0:7d:4f:9c:5c:e9:81:2a:cc:ba:06:
                    ec:a4:aa:a7:6c:35:95:fc:83:a0:b1:15:d4:6d:07:
                    ee:c0:60:aa:de:8b:90:ec:90:c1:b1:b0:42:bc:80:
                    5c:56:c2:ea:4e:bf:d0:c4:02:06:81:ca:91:53:50:
                    9f:52:c7:5c:ce:f1:b2:7e:e4:8c:d0:ca:90:eb:e8:
                    59:40:2d:83:b9:29:a1:3f:d6:e4:71:17:a5:ac:bf:
                    b0:f9:fe:e0:fc:71:c0:5b:12:a8:81:56:be:d4:e9:
                    a9:22:30:eb:85:3b:ad:23:61:2c:af:bc:22:1e:b0:
                    95:50:ad:22:a4:2a:2b:41:8e:12:cc:85:57:8f:0c:
                    a3:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:BB:CD:3F:23:B2:A1:5F:92:A4:37:49:E0:F0:19:33:C8:F8:18:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/b0c012f4-baa2-3789-9ae9-0736d044aafe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl

            X509v3 Authority Key Identifier:
                keyid:67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:116:800a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:60:ce:f1:a0:56:79:5d:41:34:c3:5e:b7:98:1d:f6:50:e5:
         21:30:e0:ab:42:75:77:d3:4b:cf:0f:b3:7b:ed:24:01:22:96:
         0c:62:e8:06:41:45:3f:24:35:fc:51:85:17:d0:72:11:e3:1f:
         f5:b5:b6:59:fb:7e:20:a6:dc:18:a1:de:a4:54:c7:c8:d8:1b:
         ab:c3:1c:b5:94:ef:38:88:5d:2b:52:d7:80:23:35:a5:75:79:
         35:f7:dc:d7:3a:e8:c9:0e:f3:c3:99:94:a4:50:11:de:b7:b6:
         59:47:f6:b5:4c:5a:66:62:11:eb:44:d6:73:0c:61:f5:0c:9b:
         86:54:b6:d3:7b:e4:a3:3b:29:cb:9e:c2:56:73:50:d0:f0:da:
         26:8c:3e:0f:c4:a5:9d:48:aa:73:78:a6:96:79:91:d6:30:c8:
         19:9a:26:a3:3d:ec:e6:43:eb:bd:b9:05:37:8a:eb:a4:64:9d:
         46:ee:39:cc:2f:1b:16:ef:7f:f1:b5:04:6c:42:50:75:e8:c4:
         2c:68:42:05:c4:1a:6e:4e:89:7d:d7:e1:12:c1:88:22:e7:cd:
         eb:6c:c7:5c:2e:1c:32:86:ed:fd:42:0d:10:78:96:8c:ba:e9:
         78:b5:bf:f5:29:c0:00:44:4f:fc:b6:9b:f3:84:ed:12:0a:23:
         b5:0a:79:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:42:42 2024 by rpki-client on console-ams.rpki-client.org