Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9e248ce7-51b9-3740-875f-616e0fdb870f.roa
File:                     9e248ce7-51b9-3740-875f-616e0fdb870f.roa (raw, json)
Hash identifier:          5okY0oZVLi4EwKAu2THGiFSuddaC4AzFRLSBfcKZOMw=
Subject key identifier:   48:15:B3:F6:25:AE:B2:61:71:CF:7B:1B:FC:E3:3F:67:21:7A:64:2F
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584582A882F35AE78283F0658F80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9e248ce7-51b9-3740-875f-616e0fdb870f.roa
Signing time:             Thu 11 Apr 2024 13:00:36 +0000
ROA not before:           Thu 11 Apr 2024 13:00:36 +0000
ROA not after:            Wed 10 Jul 2024 13:00:36 +0000
asID:                     12222
IP address blocks:        2001:4878:c008::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:82:a8:82:f3:5a:e7:82:83:f0:65:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 11 13:00:36 2024 GMT
            Not After : Jul 10 13:00:36 2024 GMT
        Subject: CN=0ddef7aa-ff43-4b1e-b079-b193d7d73d66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:bb:94:61:c6:4c:29:26:9f:b1:3a:8c:a9:6b:
                    14:15:be:9b:99:05:b7:b0:fa:e5:05:f2:b7:3e:84:
                    1d:5c:d1:e5:b5:09:ec:06:76:89:52:e3:57:95:63:
                    6c:b5:9c:82:98:71:0d:f7:57:e8:b0:bd:dd:e0:66:
                    a7:a4:66:60:a3:5d:81:71:4a:a8:49:30:ea:9b:d3:
                    57:49:9e:58:78:f3:d1:a7:ef:0a:49:2c:9c:25:85:
                    93:c4:04:69:78:f1:44:4e:0c:00:aa:00:da:1a:7b:
                    c9:ea:f4:c8:5e:74:1a:4c:bf:37:06:a0:20:16:e7:
                    dc:07:9f:55:37:20:5e:27:4e:b4:c2:28:99:4c:ba:
                    fb:2b:4c:b3:61:db:57:ae:b3:73:d8:c8:95:dd:be:
                    f7:ac:8e:1f:e7:b6:b7:5f:c7:dd:b9:05:b2:62:c6:
                    4f:76:73:d4:49:6b:03:37:3a:24:58:2c:a6:5b:a8:
                    8d:81:79:be:74:4a:ca:e6:b2:3b:31:6c:2d:a4:51:
                    e1:6b:90:2f:88:92:86:05:0a:50:af:25:cc:99:de:
                    bf:14:39:f9:d7:85:ff:6f:be:b8:42:1d:57:60:d7:
                    ec:65:97:ff:94:fc:85:dd:18:79:3a:51:6d:5c:63:
                    a6:a0:20:ea:29:92:fc:ac:fb:c9:67:a4:af:ef:3a:
                    72:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:15:B3:F6:25:AE:B2:61:71:CF:7B:1B:FC:E3:3F:67:21:7A:64:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9e248ce7-51b9-3740-875f-616e0fdb870f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:c008::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:db:e1:3e:62:06:11:bf:16:c8:3c:5b:86:28:64:e8:6e:59:
         74:80:82:e7:1a:5c:55:68:70:07:3d:c6:9c:75:45:95:e1:1a:
         8c:af:77:56:b5:eb:5c:94:36:fc:d0:51:c9:9c:39:1d:07:2f:
         d1:fa:08:a3:7b:e9:6f:1f:52:d4:21:20:96:55:97:ac:31:f9:
         2b:f3:01:21:96:2b:30:08:92:7e:fb:4d:2f:a7:55:e0:81:4c:
         0c:33:4d:fa:4d:d2:cc:1d:08:80:48:2f:32:57:2c:ec:35:66:
         eb:35:af:92:f7:fc:fb:86:8b:5f:2d:9b:13:b7:02:1d:1f:eb:
         e4:fc:bf:61:3d:5f:95:e0:47:c0:be:4e:67:d0:3b:59:aa:a7:
         ae:d8:fa:ef:44:88:4f:65:f9:36:d6:8d:2e:e7:fd:a0:d5:f6:
         eb:3c:ec:54:e0:93:ad:a5:07:15:fd:8d:d0:44:6f:b2:f7:35:
         8d:62:08:e2:39:01:05:f2:9d:2d:6c:99:fc:9f:aa:71:1d:29:
         54:4a:6a:c4:e5:8f:cd:c4:cd:0f:be:b7:62:59:69:fd:7d:fa:
         49:df:c6:00:a7:25:d2:d8:72:45:d7:20:4c:bc:b1:93:a0:78:
         5c:a8:8f:0d:03:40:04:04:a3:74:8e:33:d6:21:22:26:f2:3f:
         d8:6b:6f:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:09:29 2024 by rpki-client on console-ams.rpki-client.org