Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/6e92f77b-e528-38fe-a618-5f254f2bcc7a.roa
File:                     6e92f77b-e528-38fe-a618-5f254f2bcc7a.roa (raw, json)
Hash identifier:          BB2kQyG7DyiOjOSXOUQOEERa/Qo+ZiVtaBL5niCB4fQ=
Subject key identifier:   76:9E:B1:71:1D:A6:EE:9A:98:2D:F2:0A:A7:3C:0C:9F:89:52:B7:20
Certificate issuer:       /CN=ebd609f9-488f-4ccb-b562-f82edd8191dd
Certificate serial:       010D0C9F432858473D25F964C668E6555D340000
Authority key identifier: FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/6e92f77b-e528-38fe-a618-5f254f2bcc7a.roa
Signing time:             Tue 17 Sep 2024 01:00:31 +0000
ROA not before:           Tue 17 Sep 2024 01:00:31 +0000
ROA not after:            Mon 16 Dec 2024 02:00:31 +0000
asID:                     25623
IP address blocks:        2001:4830:2070::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3d:25:f9:64:c6:68:e6:55:5d:34:00:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebd609f9-488f-4ccb-b562-f82edd8191dd
        Validity
            Not Before: Sep 17 01:00:31 2024 GMT
            Not After : Dec 16 02:00:31 2024 GMT
        Subject: CN=a61ad633-989f-42ef-a351-95f0a9b4def2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d5:b8:35:46:ff:f0:ec:ee:ca:82:ef:2e:5a:
                    20:12:a4:78:50:1c:05:e1:1e:04:6f:71:96:ab:69:
                    08:69:40:0e:d5:73:44:c1:48:86:ff:b2:49:1a:7e:
                    09:73:1d:34:d2:74:88:c1:98:b7:af:9b:86:05:28:
                    ba:7d:48:50:9a:5c:6e:ae:4d:3b:7e:07:3b:ba:bc:
                    44:a9:c1:3b:52:88:9e:56:65:de:53:9e:9a:98:72:
                    39:6b:13:e6:ba:08:30:84:31:41:73:8b:84:26:2c:
                    57:0f:5c:a9:8e:27:0c:fa:96:42:89:00:5a:8d:20:
                    55:8e:3e:8e:1e:94:98:b0:f3:73:be:e7:c1:ee:ad:
                    6d:77:11:be:2a:fd:7f:fa:73:37:9d:83:f6:10:54:
                    e2:01:49:35:96:27:28:ee:2c:7d:84:d2:40:b8:e2:
                    c7:48:c7:5d:30:89:3a:8d:4c:c0:bf:79:cf:17:a8:
                    95:e0:e0:bc:c0:76:55:f1:b2:61:57:a9:2f:29:25:
                    41:74:8d:2b:44:34:b3:d9:c9:b8:d0:4a:82:0d:eb:
                    8d:7e:60:5a:ef:d3:13:fd:37:1e:d4:2a:8b:70:6f:
                    67:f0:33:38:8a:dc:96:1b:b4:05:25:30:9f:94:9d:
                    24:61:4f:e1:38:4b:6f:e7:68:6e:20:41:59:47:d9:
                    93:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:9E:B1:71:1D:A6:EE:9A:98:2D:F2:0A:A7:3C:0C:9F:89:52:B7:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/6e92f77b-e528-38fe-a618-5f254f2bcc7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl

            X509v3 Authority Key Identifier:
                keyid:FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4830:2070::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:18:66:9f:5e:f0:ad:99:71:ba:cd:56:f0:f0:f9:7b:44:a9:
         48:02:1a:26:29:ea:22:89:51:58:5d:eb:86:8c:05:ce:d5:07:
         42:89:d7:63:23:61:1f:78:e7:ab:85:90:bf:89:37:5c:c2:37:
         62:07:cc:04:3a:cc:f7:f6:40:11:d2:68:25:04:4f:eb:6e:47:
         98:d0:7e:7c:d0:57:bc:d6:6f:77:a0:6c:a4:3d:eb:e0:63:8c:
         54:24:77:3d:2a:e6:e7:02:b6:61:75:88:59:98:b0:04:3e:25:
         58:a6:96:42:1b:c5:ec:2a:11:13:a8:01:dc:a9:dd:18:d9:58:
         f4:d5:6f:d7:d7:c8:a4:11:3f:4d:8a:e9:67:17:c9:96:ac:f5:
         cd:f2:a8:9f:4a:69:8e:08:b0:95:52:00:b5:d9:1b:9d:69:03:
         25:d9:1d:c0:f5:d1:b6:44:34:7f:4e:d4:7b:6c:c8:49:51:09:
         41:81:9b:f8:3f:d2:e0:b6:15:cb:31:d5:35:5b:8d:27:0e:de:
         c9:32:97:0b:81:9e:b4:ef:2b:ec:4a:50:d8:fd:ba:9a:be:f3:
         a6:1d:a0:d4:cf:37:de:f2:87:fa:9b:03:17:c7:fe:fe:4e:93:
         94:1d:cb:be:76:cf:8c:34:09:f7:61:2c:a9:47:19:c0:4d:1e:
         52:04:5f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 22:16:28 2024 by rpki-client on console-fra.rpki-client.org