Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/f204cb4d-22af-3e8f-8171-b184c97add9e.roa
File:                     f204cb4d-22af-3e8f-8171-b184c97add9e.roa (raw, json)
Hash identifier:          GbcyzbLCRE2tbakD0/jmViN6fjSTvOiKWNSRPdssqEc=
Subject key identifier:   B1:41:F2:2A:6D:7A:48:34:62:70:9A:D3:9D:23:9A:14:B2:A7:6B:3E
Certificate issuer:       /CN=8e2da239-793e-4082-afde-6458f2319e7e
Certificate serial:       010D0C9F43285847537B7C0213238D981ECF0D80
Authority key identifier: B6:1E:B0:C8:29:6F:59:D0:64:2B:44:2F:41:AC:38:58:E0:07:01:E8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/f204cb4d-22af-3e8f-8171-b184c97add9e.roa
Signing time:             Wed 25 Sep 2024 01:00:31 +0000
ROA not before:           Wed 25 Sep 2024 01:00:31 +0000
ROA not after:            Tue 24 Dec 2024 02:00:31 +0000
asID:                     3755
IP address blocks:        2620:f:6::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8e2da239-793e-4082-afde-6458f2319e7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8e2da239-793e-4082-afde-6458f2319e7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:53:7b:7c:02:13:23:8d:98:1e:cf:0d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e2da239-793e-4082-afde-6458f2319e7e
        Validity
            Not Before: Sep 25 01:00:31 2024 GMT
            Not After : Dec 24 02:00:31 2024 GMT
        Subject: CN=52c82855-e425-45cb-8750-2b7811885f20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:bb:ba:6c:53:61:2e:49:b3:05:be:35:80:50:
                    8d:36:eb:84:e4:b4:fc:90:25:6b:0c:e4:64:10:ad:
                    35:c2:0a:40:46:fe:df:3f:22:1c:c2:bb:77:9a:0c:
                    7f:e2:a6:fc:d0:08:0a:76:ca:da:be:66:57:1a:3d:
                    2a:bc:3a:d2:92:f5:55:75:33:7c:4a:29:00:43:2b:
                    ad:58:ed:d3:1c:de:45:4d:b4:52:0d:7f:f7:74:21:
                    0c:83:52:e4:69:e8:00:7a:47:db:fe:5f:4b:56:ac:
                    0f:cc:37:bf:36:83:42:f4:a0:6a:2c:e6:24:47:1c:
                    2e:8e:55:00:f8:18:e2:3c:5d:e7:4a:5d:0b:76:ed:
                    30:90:e9:e2:99:9a:dc:12:b7:86:d9:68:21:3e:77:
                    17:de:ed:a8:89:0f:10:10:6e:92:02:e0:9f:47:f9:
                    58:cd:45:46:16:56:04:1c:90:66:84:08:83:40:47:
                    ab:97:8c:5e:9f:5b:76:f8:e2:23:31:b6:85:74:e1:
                    9e:67:6d:e5:2d:59:f9:67:88:be:75:da:3d:89:d6:
                    7d:f8:da:9c:82:e1:5e:fb:28:21:e1:e1:e2:a9:ca:
                    92:9c:a9:74:7b:f1:bc:0c:da:64:23:65:ff:6b:01:
                    fb:6c:d5:eb:a2:c9:d7:7e:01:c8:6a:57:51:64:4a:
                    34:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:41:F2:2A:6D:7A:48:34:62:70:9A:D3:9D:23:9A:14:B2:A7:6B:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/f204cb4d-22af-3e8f-8171-b184c97add9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8e2da239-793e-4082-afde-6458f2319e7e.crl

            X509v3 Authority Key Identifier:
                keyid:B6:1E:B0:C8:29:6F:59:D0:64:2B:44:2F:41:AC:38:58:E0:07:01:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:f:6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:81:dd:35:2f:17:8c:ab:83:9d:4e:18:3b:81:72:87:58:51:
         3d:26:70:3c:88:1c:94:b4:21:e9:b5:4a:6f:44:37:b4:ea:bb:
         da:0a:9e:68:cd:d2:5f:e5:53:ad:c6:95:86:42:e9:b7:65:a8:
         38:03:17:29:1f:5c:33:29:5e:1f:fd:e1:77:2e:59:15:04:bf:
         01:3c:ee:8c:ee:28:08:5e:ac:63:79:c0:fc:40:c6:82:72:5d:
         e3:b8:27:5e:a6:bf:80:6b:ab:96:9d:8a:c7:52:0b:19:30:77:
         dd:62:5b:54:a1:18:68:4d:f5:7d:23:71:dd:49:06:e1:a0:fb:
         c0:86:7b:cb:74:ed:29:a8:85:98:c2:4d:08:ed:2f:85:d7:18:
         8b:ca:d1:e2:63:8c:01:2f:ec:0a:91:02:0a:de:52:17:0c:f4:
         20:cc:83:3d:68:21:6c:16:50:2e:13:3b:fa:f4:eb:2a:81:3d:
         79:a3:cd:55:1a:07:a1:1d:e1:54:d4:65:38:dd:11:52:98:a4:
         ce:48:6d:65:02:9b:89:cb:c4:3f:15:c4:d3:e3:20:6e:a9:4c:
         c2:28:25:94:e4:16:ba:43:b4:b2:56:68:ec:82:40:d2:00:b1:
         5e:88:82:10:18:4c:1a:13:fb:7c:1c:1b:b1:79:18:6e:f6:d5:
         62:8f:22:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:09 2024 by rpki-client on console-ams.rpki-client.org