Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/e30c1665-e4b2-3b17-b89d-2f71574ba8af.roa
File:                     e30c1665-e4b2-3b17-b89d-2f71574ba8af.roa (raw, json)
Hash identifier:          3CdsjxgW6tZCFJCjV2b1nAejmZlZuSvUFvUhG2TA92I=
Subject key identifier:   45:73:7E:7A:18:A6:67:0C:F5:F5:78:FA:7C:15:5B:FF:2E:FF:EB:D8
Certificate issuer:       /CN=bc831f6b-71a6-46bb-9f64-2da80ccc244c
Certificate serial:       010D0C9F4328584770CBA11408FFDA943149ED20
Authority key identifier: A9:50:46:A5:5A:7E:BB:0F:CE:06:22:BA:A4:AF:11:59:F2:3E:CD:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/e30c1665-e4b2-3b17-b89d-2f71574ba8af.roa
Signing time:             Sat 05 Oct 2024 13:00:42 +0000
ROA not before:           Sat 05 Oct 2024 13:00:42 +0000
ROA not after:            Fri 03 Jan 2025 14:00:42 +0000
asID:                     18254
IP address blocks:        2600:b400::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/bc831f6b-71a6-46bb-9f64-2da80ccc244c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/bc831f6b-71a6-46bb-9f64-2da80ccc244c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:70:cb:a1:14:08:ff:da:94:31:49:ed:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc831f6b-71a6-46bb-9f64-2da80ccc244c
        Validity
            Not Before: Oct  5 13:00:42 2024 GMT
            Not After : Jan  3 14:00:42 2025 GMT
        Subject: CN=e7a93751-fccf-4fb1-a5dd-2959f122a187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:36:8f:0a:98:f5:25:62:5a:1a:56:6f:4f:02:
                    65:f5:9e:dd:14:fa:f9:48:f3:a2:82:5d:a2:c2:e8:
                    97:5f:7b:ed:1b:6e:53:37:ef:9b:31:b3:bb:32:42:
                    97:59:10:df:e8:15:5c:d9:62:3d:3b:9e:01:16:5b:
                    7b:3b:e1:4c:0f:e4:3c:0e:04:47:a0:f7:c1:ee:33:
                    ae:24:3c:ef:cf:e1:37:9d:57:af:1d:d7:e1:e2:44:
                    58:5b:44:93:6c:d6:99:fe:5e:4a:da:32:08:38:b7:
                    1d:87:75:fb:64:46:25:00:7f:ee:7c:ab:3a:f4:1d:
                    00:9c:66:4b:d5:ce:a9:50:cd:5b:ee:c7:4d:a0:f4:
                    4a:11:d5:49:20:31:52:67:d2:0b:a8:31:bd:93:c3:
                    0b:ab:18:b2:ad:09:51:af:ad:f2:5e:9f:57:8d:03:
                    12:72:06:93:27:1e:33:cb:89:9c:14:b0:5a:1f:fb:
                    70:eb:73:80:09:3c:c7:96:b5:59:eb:87:96:44:6b:
                    7c:a4:b5:82:b6:4a:48:85:74:6a:61:71:e2:8d:80:
                    3e:56:64:d4:f1:46:1d:b1:4d:a3:a7:48:f6:0c:db:
                    a9:7f:8a:eb:90:ec:14:fc:1b:a6:39:e9:10:e3:10:
                    d2:8e:4e:ef:1e:b9:9a:2c:6d:dc:a2:86:0d:ec:76:
                    2f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:73:7E:7A:18:A6:67:0C:F5:F5:78:FA:7C:15:5B:FF:2E:FF:EB:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/e30c1665-e4b2-3b17-b89d-2f71574ba8af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/bc831f6b-71a6-46bb-9f64-2da80ccc244c.crl

            X509v3 Authority Key Identifier:
                keyid:A9:50:46:A5:5A:7E:BB:0F:CE:06:22:BA:A4:AF:11:59:F2:3E:CD:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:b400::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:dd:5c:c5:60:f8:2a:ed:e2:e0:27:60:38:d7:ca:6a:20:af:
         40:cd:df:1b:9a:85:b3:2f:e2:db:f4:dd:da:b4:6a:7e:fd:5e:
         af:19:38:f6:11:e5:11:4d:02:11:b8:b4:ab:0e:5a:ec:20:76:
         e8:89:bb:d6:db:2d:57:f3:87:e5:6e:2c:ca:89:ad:96:1d:14:
         eb:bb:6e:e7:ce:f6:15:47:89:eb:f9:e4:b7:63:37:4c:52:db:
         8a:0d:93:0f:bb:17:5f:fc:67:02:3f:72:fe:7f:ff:ae:40:0b:
         32:52:22:42:b6:7c:99:87:7d:85:87:5d:39:2b:d9:76:bd:8b:
         44:ce:ee:27:89:39:53:2c:65:11:9a:ea:9b:61:c4:51:8c:17:
         04:2f:36:af:ed:54:21:4c:39:94:d2:73:3b:b4:d0:cb:94:9c:
         9d:b6:29:08:52:4c:6f:56:5a:d0:2d:67:e1:04:b3:f2:76:1b:
         04:23:14:b2:c1:44:d3:4b:e7:3d:2e:00:6f:c2:f2:96:30:10:
         3d:d3:59:08:05:28:2c:db:ba:86:52:3a:31:81:e3:09:1c:41:
         f3:d0:b6:fe:dc:d8:b0:47:27:c7:1e:1f:73:f8:2e:52:90:69:
         63:40:54:53:ee:3c:dd:ec:39:0a:4a:34:06:14:bd:33:c2:8a:
         76:97:b2:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:42:51 2024 by rpki-client on console-ams.rpki-client.org