Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/4a01a1a6-1af9-3f6d-99a1-c2fde0dd06c9.roa
File:                     4a01a1a6-1af9-3f6d-99a1-c2fde0dd06c9.roa (raw, json)
Hash identifier:          I8mbipw4pJUBtuOilXG2w8e3ltg+7Ra/qr+Df00SgV4=
Subject key identifier:   64:50:B2:38:08:FE:1B:D3:E3:3C:48:6A:45:90:95:B9:2A:01:C5:DB
Certificate issuer:       /CN=8e2da239-793e-4082-afde-6458f2319e7e
Certificate serial:       010D0C9F43285847A30BF437D2D355E7C476F480
Authority key identifier: B6:1E:B0:C8:29:6F:59:D0:64:2B:44:2F:41:AC:38:58:E0:07:01:E8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/4a01a1a6-1af9-3f6d-99a1-c2fde0dd06c9.roa
Signing time:             Wed 23 Oct 2024 13:00:41 +0000
ROA not before:           Wed 23 Oct 2024 13:00:41 +0000
ROA not after:            Tue 21 Jan 2025 14:00:41 +0000
asID:                     3630
IP address blocks:        2620:f:7::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8e2da239-793e-4082-afde-6458f2319e7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8e2da239-793e-4082-afde-6458f2319e7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a3:0b:f4:37:d2:d3:55:e7:c4:76:f4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e2da239-793e-4082-afde-6458f2319e7e
        Validity
            Not Before: Oct 23 13:00:41 2024 GMT
            Not After : Jan 21 14:00:41 2025 GMT
        Subject: CN=5572ccca-a426-45eb-b698-e1d082766561
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e9:28:b5:69:26:3f:11:09:85:9a:f0:0f:c3:
                    6d:6b:ed:73:83:d6:81:bf:71:65:ca:d2:9f:f3:2e:
                    a1:f2:f2:96:aa:a8:4c:58:75:db:c4:95:27:66:31:
                    7b:17:f1:fb:ad:c0:48:4a:dc:4b:b7:55:55:68:8f:
                    57:7f:8b:86:e7:b4:87:7b:d3:3f:de:18:a6:e7:be:
                    9f:70:04:75:5d:3c:03:43:ad:ce:04:46:69:c6:3c:
                    ff:3f:68:ca:01:99:b5:6c:e2:14:3f:18:47:7e:d7:
                    f2:dd:ce:90:18:7c:0d:a3:ef:eb:a5:5c:62:2d:17:
                    fa:3b:7b:54:b9:01:76:a8:9d:72:a7:58:a6:23:2f:
                    6c:06:77:c2:a9:4a:65:e4:ee:9b:43:e2:9b:4e:ba:
                    b0:d4:3d:58:c9:71:5c:c9:ef:cc:ec:10:ec:ee:a5:
                    cf:31:cd:d8:29:81:ec:3f:55:84:51:70:26:9d:f5:
                    81:ef:7e:49:df:54:16:ab:2c:4d:aa:08:71:33:5b:
                    f1:c1:4c:71:44:9b:f5:4c:fe:f9:6d:84:59:a8:06:
                    8d:cb:53:72:33:fe:89:8e:95:f0:05:62:94:f4:37:
                    66:78:c9:97:15:c4:b8:60:a2:5d:75:da:8e:c1:dd:
                    35:79:ed:88:7c:c7:9c:cf:3d:d2:16:bd:32:59:8d:
                    d2:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:50:B2:38:08:FE:1B:D3:E3:3C:48:6A:45:90:95:B9:2A:01:C5:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/4a01a1a6-1af9-3f6d-99a1-c2fde0dd06c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8e2da239-793e-4082-afde-6458f2319e7e.crl

            X509v3 Authority Key Identifier:
                keyid:B6:1E:B0:C8:29:6F:59:D0:64:2B:44:2F:41:AC:38:58:E0:07:01:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:f:7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:b9:7a:5e:49:d6:3b:f2:f9:21:db:27:9e:d7:30:2d:8f:24:
         1c:b0:4e:ff:ef:72:29:ae:c1:62:20:72:48:78:7a:bb:0a:1b:
         4d:51:fb:0d:93:18:14:97:6a:27:4a:a4:84:3f:ab:4e:a4:3f:
         c7:2a:01:90:0e:e9:7f:27:05:aa:03:ef:12:74:b4:81:de:03:
         ba:8a:0d:ea:4e:eb:1a:43:58:55:ed:36:5b:e2:31:d0:88:ff:
         c0:13:08:36:fd:1f:17:75:d1:5c:fe:dd:8e:8f:96:b9:d6:14:
         39:55:31:43:fa:e3:97:94:f2:8d:6c:2e:f9:52:e0:a9:61:97:
         8d:16:1e:cd:6a:1a:e1:c3:43:17:ae:9f:d6:e1:3d:c8:a6:3f:
         4d:d9:b1:ec:b4:57:af:59:d3:f2:82:bf:4e:b0:dd:51:1b:27:
         26:d5:fb:01:a6:84:f8:73:28:95:1c:49:c9:7f:31:b8:f0:07:
         cd:bc:ce:d6:53:fb:2a:65:42:d5:78:af:16:a7:63:26:6c:38:
         d8:4d:c8:48:c7:b0:d8:24:de:42:ff:51:68:2d:70:36:88:08:
         93:48:34:71:51:e7:79:87:b5:89:03:24:69:ee:18:d5:4b:2b:
         f9:4c:5c:b5:10:00:fb:6a:2d:62:bf:b8:65:35:d2:cd:e6:f2:
         99:d1:91:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:08 2024 by rpki-client on console-fra.rpki-client.org