Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/a8f015e0-31b0-3f44-9c1c-82959f4ce881.roa
File:                     a8f015e0-31b0-3f44-9c1c-82959f4ce881.roa (raw, json)
Hash identifier:          tn0mrGfmHBgvL5uwPESoTBS0g4yGU+ytBbOVjNqZA5M=
Subject key identifier:   1A:FD:F5:FF:65:53:35:E2:B4:46:CF:FB:29:07:30:89:DE:B3:F2:7F
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584782F0FED8311C40A07341EF80
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/a8f015e0-31b0-3f44-9c1c-82959f4ce881.roa
Signing time:             Sat 12 Oct 2024 01:00:32 +0000
ROA not before:           Sat 12 Oct 2024 01:00:32 +0000
ROA not after:            Fri 10 Jan 2025 02:00:32 +0000
asID:                     8987
IP address blocks:        2605:4300:2c11::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:82:f0:fe:d8:31:1c:40:a0:73:41:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Oct 12 01:00:32 2024 GMT
            Not After : Jan 10 02:00:32 2025 GMT
        Subject: CN=2e5b48c2-87c0-48cb-824f-53a6a985fb32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a4:36:22:32:af:a4:cb:72:0c:75:a5:ed:e2:
                    a8:18:ee:64:e6:2a:5d:9c:c4:7f:a0:cb:db:d7:85:
                    c1:69:7d:5a:f9:92:45:4a:5c:f2:4b:a7:b0:22:12:
                    26:d0:a2:8a:65:2b:e7:3c:c2:55:66:5b:a3:a7:41:
                    4d:aa:2a:ff:2a:53:b3:25:49:3f:cd:79:23:79:51:
                    5f:eb:d0:e0:8c:2b:73:47:34:aa:3d:48:ee:3d:fb:
                    37:e7:c6:d5:f1:11:48:6e:e6:1d:84:8d:af:6f:e4:
                    c2:f8:82:82:8e:8a:65:5d:b3:5b:ec:ef:9b:b4:b8:
                    ac:b5:30:0f:f4:71:bd:ef:84:5f:26:64:2a:0f:c4:
                    01:38:d2:e8:ed:9a:ba:d7:f5:e7:a3:ff:0b:21:f0:
                    29:1d:24:84:28:c5:11:45:e1:60:8c:cb:c8:f1:d8:
                    34:f7:2f:56:08:17:34:31:bc:7b:22:2d:c7:eb:a5:
                    17:0f:25:e8:a3:1f:5d:42:7c:61:49:c3:f5:2b:51:
                    dd:4b:0e:a4:6c:7f:e9:9c:6f:4e:59:7d:8c:7c:7c:
                    8c:73:72:20:b2:d5:48:48:31:59:36:c3:2e:ab:a2:
                    52:cb:23:3c:87:7d:ad:ee:7f:9e:63:69:38:8f:80:
                    d2:b1:ee:7d:5a:e5:c0:e5:e0:6f:9f:5e:39:74:02:
                    d7:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:FD:F5:FF:65:53:35:E2:B4:46:CF:FB:29:07:30:89:DE:B3:F2:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/a8f015e0-31b0-3f44-9c1c-82959f4ce881.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4300:2c11::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:88:85:26:77:ea:91:b4:27:cf:87:91:1d:1c:5e:ca:cf:14:
         4f:8f:ca:bf:73:7d:d3:2f:10:ca:f6:53:e9:3b:08:94:52:20:
         c3:74:3d:ef:cf:8e:99:bb:85:3b:6f:db:55:97:ec:cf:5e:82:
         db:1e:d8:37:1b:ee:07:2f:1c:a0:09:89:25:e8:f4:7c:78:56:
         d5:cf:74:b4:c7:75:83:59:15:fd:89:42:65:85:2f:9f:c6:b4:
         67:fc:d2:25:f4:4e:32:d9:7d:10:8b:10:f7:78:3c:5a:ce:37:
         07:82:3a:20:6e:ee:ce:69:09:19:1e:1e:a3:76:bc:07:76:1f:
         38:5d:4d:c6:48:2d:a0:e5:03:cc:61:d8:63:94:39:79:a4:24:
         d0:54:3e:df:04:c0:c7:3a:49:c6:9b:fe:92:06:ec:8e:3e:38:
         75:ca:2f:94:5d:e1:f9:f3:57:01:3f:7b:62:e8:dc:a6:14:2b:
         48:71:aa:1a:b6:8d:85:96:fe:be:e4:f8:8f:68:5a:b3:e1:cf:
         e3:0b:72:f5:1b:03:74:e2:7d:a3:23:1b:a5:ea:82:ce:5b:86:
         13:58:cc:87:fe:cd:f7:99:b5:fa:62:17:ed:19:74:17:f8:c8:
         71:c7:fb:48:c4:2b:15:80:59:60:8d:95:60:54:99:5a:ce:b3:
         11:8d:08:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:34:59 2024 by rpki-client on console-ams.rpki-client.org