Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/1bbc0781-a709-3c5b-8c8e-1d60c304cab0.roa
File:                     1bbc0781-a709-3c5b-8c8e-1d60c304cab0.roa (raw, json)
Hash identifier:          rJysmFneN2PK/Q87BN7P8Y7zCn9d/S0/C+zYqHRaQLg=
Subject key identifier:   7F:DD:91:B2:9B:43:ED:FD:61:A6:30:39:5B:83:A2:B2:92:CE:D4:08
Certificate issuer:       /CN=f767ea16-72b4-402a-9b2f-7583fe390bb7
Certificate serial:       010D0C9F432858473A5B944FD3DBC924FF9C8540
Authority key identifier: 7A:C6:2E:73:FB:82:27:31:62:5F:C0:8E:76:FB:20:55:A6:05:B9:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/1bbc0781-a709-3c5b-8c8e-1d60c304cab0.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     14773
IP address blocks:        2620:1d5::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/f767ea16-72b4-402a-9b2f-7583fe390bb7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/f767ea16-72b4-402a-9b2f-7583fe390bb7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:94:4f:d3:db:c9:24:ff:9c:85:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f767ea16-72b4-402a-9b2f-7583fe390bb7
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=52d96e7b-355a-4bca-83e6-ad59833faefe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:35:e1:e1:cb:8f:4c:d9:88:d5:53:11:4a:f4:
                    79:2a:3e:4e:ed:b5:3c:6c:04:de:fa:bc:2e:86:7f:
                    8b:72:b3:53:e7:ef:ab:08:8b:1c:e5:d5:80:8f:fe:
                    52:b0:29:69:ee:9d:6f:6e:ee:d5:f5:1c:fe:d3:65:
                    a0:2a:12:cd:5e:89:7a:0a:4b:67:e8:56:3c:9f:10:
                    80:23:f9:7d:d8:00:82:1d:cc:8c:ac:23:ec:34:d4:
                    d3:89:1e:38:2a:58:3e:a4:ca:49:cd:6d:ec:26:0f:
                    45:e4:b3:33:31:06:89:d3:1c:da:b4:ad:bf:e4:0d:
                    5e:61:1d:8c:07:27:ad:ca:bc:ce:2a:dd:36:5e:00:
                    fe:4e:7e:24:3d:81:6a:c8:10:0d:f1:bb:fe:74:29:
                    6d:8e:ec:02:3e:45:3e:4e:90:e2:4f:b4:d3:9b:29:
                    6d:ce:8a:b7:37:64:08:b9:27:d2:e3:55:17:8d:2a:
                    6f:eb:db:7e:a8:e5:68:52:28:8a:ea:82:75:6b:14:
                    cb:9d:26:cb:38:13:ce:b2:52:76:ab:68:2d:ea:d2:
                    b8:d4:7a:c0:91:46:f9:8f:be:a4:f8:28:73:10:b9:
                    ab:b1:02:dc:41:95:e0:43:19:6f:c0:d6:b4:07:d4:
                    b5:a3:e6:57:02:50:1b:06:d6:58:b7:6d:c0:13:83:
                    b2:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:DD:91:B2:9B:43:ED:FD:61:A6:30:39:5B:83:A2:B2:92:CE:D4:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/1bbc0781-a709-3c5b-8c8e-1d60c304cab0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/f767ea16-72b4-402a-9b2f-7583fe390bb7.crl

            X509v3 Authority Key Identifier:
                keyid:7A:C6:2E:73:FB:82:27:31:62:5F:C0:8E:76:FB:20:55:A6:05:B9:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1d5::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:6f:f7:be:db:c8:a9:da:f5:98:64:c2:49:6a:c9:d7:1c:13:
         3a:b5:03:e5:f9:f0:08:b4:f3:7a:6c:13:43:16:19:68:9b:03:
         e7:c4:92:27:b5:40:45:25:d7:5b:33:42:c2:d7:9c:45:2c:44:
         db:8f:8d:99:23:42:35:7a:62:86:35:63:29:2f:1d:b2:8a:5c:
         2a:a1:27:8f:1f:e8:6b:11:5f:8c:e5:7b:00:57:43:4c:6f:ea:
         38:5f:e6:ca:72:1f:f0:f0:c4:ec:49:a4:12:41:54:12:9f:bc:
         32:60:0f:15:62:71:55:8e:f4:49:03:8f:10:7e:79:20:e5:54:
         30:39:9a:d8:4c:e6:d8:e3:d0:c8:67:a9:f6:c8:1b:2c:87:5b:
         3c:38:a8:9f:46:4a:65:26:13:21:3a:9d:90:91:9f:5d:a0:b7:
         36:45:d4:63:fe:73:57:8c:d2:17:fc:0d:04:29:e1:01:68:4e:
         35:3d:b3:25:87:fd:59:b8:f4:63:1d:4f:b8:c0:c1:c6:05:fc:
         f9:35:ce:4a:09:e9:5a:12:97:db:c4:6f:69:3f:95:5c:76:25:
         9c:58:87:7a:c9:41:aa:d9:69:68:84:5a:c3:9d:23:f2:23:ad:
         d9:ba:20:53:31:e8:62:66:bc:a6:aa:6e:83:67:f1:a4:38:b8:
         2e:b9:e6:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:22 2024 by rpki-client on console-ams.rpki-client.org