Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b9b0013b-aa8f-41bf-a6f9-0b1c072f5940/fc4d7dbd-9606-3f43-8365-cf54431aa61b.roa
File:                     fc4d7dbd-9606-3f43-8365-cf54431aa61b.roa (raw, json)
Hash identifier:          AlYH9ZuXwj9DzqqKr7rWdOGuRasiXVQWiCNC6zpRF5Y=
Subject key identifier:   94:A4:82:3F:0E:01:16:E8:5B:E0:EB:54:40:0C:66:EA:8F:0A:7A:45
Certificate issuer:       /CN=b9b0013b-aa8f-41bf-a6f9-0b1c072f5940
Certificate serial:       010D0C9F432858473095E3816268ECFC7EE31380
Authority key identifier: F7:2C:38:70:02:34:F6:5A:9B:E7:A2:B7:5D:4B:B1:E9:44:1C:74:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b9b0013b-aa8f-41bf-a6f9-0b1c072f5940.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b9b0013b-aa8f-41bf-a6f9-0b1c072f5940/fc4d7dbd-9606-3f43-8365-cf54431aa61b.roa
Signing time:             Thu 12 Sep 2024 13:00:41 +0000
ROA not before:           Thu 12 Sep 2024 13:00:41 +0000
ROA not after:            Wed 11 Dec 2024 14:00:41 +0000
asID:                     58419
IP address blocks:        2620:131:3008::/46 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b9b0013b-aa8f-41bf-a6f9-0b1c072f5940/b9b0013b-aa8f-41bf-a6f9-0b1c072f5940.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b9b0013b-aa8f-41bf-a6f9-0b1c072f5940/b9b0013b-aa8f-41bf-a6f9-0b1c072f5940.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b9b0013b-aa8f-41bf-a6f9-0b1c072f5940.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:30:95:e3:81:62:68:ec:fc:7e:e3:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9b0013b-aa8f-41bf-a6f9-0b1c072f5940
        Validity
            Not Before: Sep 12 13:00:41 2024 GMT
            Not After : Dec 11 14:00:41 2024 GMT
        Subject: CN=f56b0155-179f-4df1-a3c0-9a24773f649e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:06:ad:71:d8:45:c7:50:4c:d2:91:48:42:97:
                    6d:f9:56:af:3f:5a:36:43:b7:bd:0e:4a:2c:53:41:
                    13:3a:ae:34:96:c4:e4:98:87:8e:a3:bf:f2:1b:6b:
                    a5:44:1a:af:3c:8b:2a:73:ec:b2:e6:ef:05:e0:15:
                    e4:4c:d2:14:20:8e:65:29:44:78:1d:dd:a4:1a:a5:
                    6d:e3:3b:90:35:88:2f:fd:72:7f:00:ee:8e:31:8d:
                    44:46:ab:d6:6e:d9:9e:12:aa:b5:35:54:10:bd:c6:
                    85:f9:5d:6b:3e:0f:5f:02:c5:c0:2f:91:88:2f:01:
                    a1:f1:28:3c:fe:32:8e:1f:57:0c:ea:cd:c1:a5:8d:
                    d2:ff:cd:53:8e:8b:6d:70:29:f8:4f:92:dd:f7:00:
                    e6:33:15:71:1e:d4:22:2a:02:58:5e:15:0e:40:d5:
                    f5:b8:e0:a2:d4:a8:fe:5b:df:76:90:9e:c0:ba:a7:
                    52:1f:55:98:3d:5b:40:6c:15:21:50:3c:ce:9f:62:
                    d7:0f:ec:6f:d7:7a:23:4f:70:cd:50:72:95:37:82:
                    59:34:95:08:c0:95:87:2a:f7:71:3a:b5:3a:9f:e9:
                    b9:97:bf:f7:94:e7:d6:65:20:89:8a:10:2b:b7:51:
                    d5:84:71:f2:0c:6c:b9:b7:9a:18:b9:69:fd:98:35:
                    79:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:A4:82:3F:0E:01:16:E8:5B:E0:EB:54:40:0C:66:EA:8F:0A:7A:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b9b0013b-aa8f-41bf-a6f9-0b1c072f5940/fc4d7dbd-9606-3f43-8365-cf54431aa61b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b9b0013b-aa8f-41bf-a6f9-0b1c072f5940/b9b0013b-aa8f-41bf-a6f9-0b1c072f5940.crl

            X509v3 Authority Key Identifier:
                keyid:F7:2C:38:70:02:34:F6:5A:9B:E7:A2:B7:5D:4B:B1:E9:44:1C:74:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b9b0013b-aa8f-41bf-a6f9-0b1c072f5940.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:131:3008::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:02:c0:ef:4d:41:29:03:86:58:fc:5a:df:22:4a:b8:be:8a:
         9d:00:f8:a7:8b:38:3c:31:37:10:2a:45:b2:be:f5:3a:32:9f:
         fb:45:ac:7f:12:c8:0d:49:f4:91:d3:82:33:cb:65:98:bf:fe:
         a1:de:f3:8e:a3:88:02:c8:71:a4:8b:a5:28:23:b3:b5:8b:73:
         c3:1c:25:45:8b:d7:a0:b3:e6:e3:ec:dc:93:69:76:19:a3:db:
         3f:a5:90:8f:0b:da:e8:39:80:28:9c:f2:4e:08:3e:04:36:7b:
         92:15:0c:0b:8a:b7:6f:00:da:dd:0a:7a:a5:19:e8:d5:a4:9c:
         59:c9:63:9d:a4:da:ce:e2:19:b2:2b:e5:7a:42:f9:77:54:42:
         77:c0:a3:96:81:45:8e:bb:b0:20:2a:c3:1e:8a:21:17:5e:ac:
         63:7c:b7:d8:b2:3c:48:52:a8:c2:4c:af:f4:92:7e:ab:bb:f7:
         c2:05:d4:78:1c:d6:85:4b:5b:af:6e:8e:02:26:0c:65:6b:89:
         61:c9:40:79:ed:6e:f3:21:6b:06:fe:a0:69:1e:5b:3f:fd:47:
         82:10:8d:72:cb:3e:5d:27:14:e4:71:4c:23:a7:46:44:7f:0b:
         8c:79:fc:5b:20:97:d6:51:88:c5:3a:18:2f:a4:8d:e9:46:f1:
         ac:58:96:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:42:51 2024 by rpki-client on console-ams.rpki-client.org