Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a53cd081-f6e5-4e71-868d-a1c11921321d/47d03f04-4fc2-3a97-baf2-0020fbbff431.roa
File:                     47d03f04-4fc2-3a97-baf2-0020fbbff431.roa (raw, json)
Hash identifier:          +Pt247NM1wdIWJoORUSAs4+AhhrqB4+ScVZLoqK9/Yo=
Subject key identifier:   4A:F7:78:6F:C3:35:F6:C3:FA:ED:01:3F:39:C7:D2:EF:65:F8:E1:38
Certificate issuer:       /CN=a53cd081-f6e5-4e71-868d-a1c11921321d
Certificate serial:       010D0C9F4328584797E133D02541F5D8A8A5DF80
Authority key identifier: F9:CE:3B:42:82:77:4F:AB:8D:5E:A3:E8:8D:49:4F:29:81:87:7B:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a53cd081-f6e5-4e71-868d-a1c11921321d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a53cd081-f6e5-4e71-868d-a1c11921321d/47d03f04-4fc2-3a97-baf2-0020fbbff431.roa
Signing time:             Sat 19 Oct 2024 13:00:42 +0000
ROA not before:           Sat 19 Oct 2024 13:00:42 +0000
ROA not after:            Fri 17 Jan 2025 14:00:42 +0000
asID:                     16509
IP address blocks:        2620:122:f000::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a53cd081-f6e5-4e71-868d-a1c11921321d/a53cd081-f6e5-4e71-868d-a1c11921321d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a53cd081-f6e5-4e71-868d-a1c11921321d/a53cd081-f6e5-4e71-868d-a1c11921321d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a53cd081-f6e5-4e71-868d-a1c11921321d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:97:e1:33:d0:25:41:f5:d8:a8:a5:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53cd081-f6e5-4e71-868d-a1c11921321d
        Validity
            Not Before: Oct 19 13:00:42 2024 GMT
            Not After : Jan 17 14:00:42 2025 GMT
        Subject: CN=e241b3b1-ce0b-4f75-9e3e-c1e008207a93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:15:90:ec:ef:49:a0:10:5c:e7:29:6d:e8:aa:
                    7c:de:1a:b8:e2:27:e7:df:b3:8f:5b:54:b1:32:02:
                    d9:65:a7:32:6d:b1:ba:81:e6:97:78:b6:c5:07:bf:
                    55:f8:90:ce:56:da:64:2c:f3:73:46:8c:ed:ec:57:
                    80:b9:2c:12:74:3b:4f:5f:5b:c3:5f:3a:85:ee:b0:
                    ce:17:13:6e:56:73:7c:59:72:23:80:64:28:11:8e:
                    3f:ee:fc:44:4f:cc:34:cd:f8:99:4b:5a:8c:de:fc:
                    e0:c0:3f:87:03:ce:ee:03:c7:0e:4b:7c:19:85:c7:
                    8b:3e:40:da:96:17:19:f7:58:4a:1f:e2:21:37:ba:
                    9e:76:12:8b:c5:8a:01:a0:30:11:90:0b:2c:32:91:
                    1d:a4:44:48:03:ed:e4:e2:48:b3:45:f6:63:0f:4c:
                    2f:21:72:af:4a:7b:89:de:97:b4:86:88:21:dd:f9:
                    e5:cd:93:3f:f5:4c:d9:e4:54:63:29:09:ff:d0:81:
                    1a:69:9b:a7:f3:ab:a9:5e:d8:3a:44:ce:cc:12:7e:
                    18:23:ac:56:ce:21:4a:34:05:63:cc:a5:2b:30:ae:
                    18:8c:d4:81:fa:23:3d:c3:bb:2e:60:c0:6d:e1:67:
                    c6:0d:c0:c2:d1:54:fa:0b:e0:84:eb:a5:63:55:2b:
                    1b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:F7:78:6F:C3:35:F6:C3:FA:ED:01:3F:39:C7:D2:EF:65:F8:E1:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a53cd081-f6e5-4e71-868d-a1c11921321d/47d03f04-4fc2-3a97-baf2-0020fbbff431.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a53cd081-f6e5-4e71-868d-a1c11921321d/a53cd081-f6e5-4e71-868d-a1c11921321d.crl

            X509v3 Authority Key Identifier:
                keyid:F9:CE:3B:42:82:77:4F:AB:8D:5E:A3:E8:8D:49:4F:29:81:87:7B:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a53cd081-f6e5-4e71-868d-a1c11921321d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:122:f000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:48:db:89:0e:88:79:99:44:c0:8e:8c:d8:d2:c1:16:90:60:
         d2:67:c3:f9:b1:52:16:1f:c6:11:47:05:da:61:7e:72:73:4a:
         d9:76:79:08:31:b8:10:4d:7d:84:66:e8:8e:a1:6c:cc:58:51:
         b0:c7:b6:f0:85:6d:56:66:4f:64:05:c8:8a:d5:3a:26:5c:d9:
         d9:13:51:ed:ce:27:3a:c3:89:e7:e0:7d:74:88:bf:4d:dd:6f:
         fe:a5:9d:c1:fc:9c:f2:c6:77:de:e2:a6:d1:36:4f:a7:88:0c:
         22:2c:e4:12:13:e7:d5:4e:07:52:95:62:e1:3c:7d:f5:44:6e:
         9c:86:b5:2b:59:1d:f4:43:ff:d0:94:d8:39:85:fb:a8:f8:43:
         e9:7d:e8:75:4a:a0:f5:dc:ae:3a:06:46:f8:01:28:f3:11:1a:
         69:10:62:f5:df:30:57:be:9a:3b:5b:15:4b:13:0a:46:57:36:
         3a:ec:d8:d0:f7:f7:41:6f:18:41:2b:16:df:38:52:06:1d:70:
         99:6b:45:da:bd:d2:38:90:3c:4b:20:6c:db:23:28:11:36:c7:
         b3:64:d6:af:0f:9c:77:28:62:02:3b:70:3a:35:1e:f1:c7:50:
         5f:2d:f2:64:37:de:19:ca:eb:14:92:6b:3b:a3:a6:bd:3c:02:
         b1:12:6c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:43:04 2024 by rpki-client on console-ams.rpki-client.org