Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/f63144ab-5ea7-3165-a0a0-6a0a187250b3.roa
File:                     f63144ab-5ea7-3165-a0a0-6a0a187250b3.roa (raw, json)
Hash identifier:          bI44Eo4BWEQASodSDmg0DhNARfnaMv0v8Yp0jj9bV0w=
Subject key identifier:   C7:A9:21:9A:D2:9B:6C:97:40:3E:13:12:13:E1:3D:4F:62:C9:76:9E
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F43285846E9658A21CFEA962E00AC54C0
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/f63144ab-5ea7-3165-a0a0-6a0a187250b3.roa
Signing time:             Sun 18 Aug 2024 01:00:29 +0000
ROA not before:           Sun 18 Aug 2024 01:00:29 +0000
ROA not after:            Sat 16 Nov 2024 02:00:29 +0000
asID:                     8987
IP address blocks:        2605:4300:2c1c::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Oct 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:e9:65:8a:21:cf:ea:96:2e:00:ac:54:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Aug 18 01:00:29 2024 GMT
            Not After : Nov 16 02:00:29 2024 GMT
        Subject: CN=7d15202b-65eb-477a-8657-f8100ad68bff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:6c:ec:60:c1:f4:26:95:e2:26:98:f4:f5:48:
                    65:46:47:b7:67:d3:88:dc:e5:d3:46:f1:d4:c8:d0:
                    be:d4:ba:94:4a:c0:1d:a2:f9:27:58:d3:13:15:e5:
                    37:9b:b7:83:a9:ff:8e:6d:65:34:01:fd:d3:6c:b8:
                    a8:92:e8:a7:29:cd:55:a9:1f:23:e4:e6:06:ae:84:
                    9d:78:00:4e:bb:83:f3:c5:64:04:58:e6:b7:f9:4b:
                    5b:84:2a:13:47:b1:df:64:de:c0:4c:d5:74:6b:88:
                    db:f0:ec:70:ca:11:59:d8:ac:bd:97:f9:db:44:5d:
                    e2:a2:b8:87:bd:2e:18:03:58:7f:20:09:23:45:2f:
                    fd:36:9f:42:ce:08:8e:7f:55:a0:81:1c:86:90:f7:
                    e6:eb:ed:e9:b2:6c:f9:23:4f:54:43:eb:fd:ec:06:
                    c4:3b:06:5b:ad:ff:36:0b:06:4f:1c:f4:a6:87:2b:
                    dc:c7:1e:99:18:b1:a7:a3:11:25:31:de:87:b2:6e:
                    f1:07:d5:90:cc:e9:5a:9b:c2:80:40:1b:36:92:c3:
                    a6:c0:1e:a0:76:c5:48:d8:ee:40:fb:7f:a6:ec:1c:
                    2d:f6:11:fa:0d:1d:54:fc:c8:74:25:d1:e2:a9:62:
                    a2:dd:d2:18:56:14:ef:6b:4a:32:6a:fe:3a:94:76:
                    8a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:A9:21:9A:D2:9B:6C:97:40:3E:13:12:13:E1:3D:4F:62:C9:76:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/f63144ab-5ea7-3165-a0a0-6a0a187250b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4300:2c1c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:1b:d5:b6:d6:55:02:1f:98:b2:a3:62:6f:3c:57:9d:55:2b:
         89:84:66:70:27:15:dd:5f:70:fc:19:ec:9a:ca:1f:c6:9a:19:
         17:44:35:26:bf:2c:c5:db:3c:b6:4c:c5:61:78:bb:0f:71:fe:
         67:ca:33:aa:f2:15:cd:37:89:67:31:2a:64:2a:e7:14:00:ad:
         75:a3:2f:db:d3:40:30:80:87:01:1f:30:7c:bb:84:f2:39:a7:
         99:83:4f:6a:c2:1c:ee:b3:e7:c7:17:8d:7f:69:af:30:05:6f:
         6b:03:d0:30:7a:15:d7:8c:ac:02:44:87:0f:5b:b4:4f:1c:e2:
         7d:9a:a7:61:47:89:63:6b:a5:c2:ef:83:cb:84:8b:d5:68:32:
         35:38:15:5d:7d:09:25:1a:ff:28:89:3b:bc:e7:c1:f3:80:62:
         b2:fc:eb:b9:4d:76:38:15:fd:86:e0:bf:6b:14:9f:32:a5:c5:
         12:48:c2:ec:a9:5d:e8:b3:1b:62:53:30:72:ac:2a:a5:c0:7e:
         35:15:c8:1f:9b:d2:db:68:db:1c:b5:af:e1:38:69:5a:80:11:
         9f:1f:fa:78:26:ba:a4:8c:64:43:36:cf:e3:e3:32:1c:97:18:
         06:12:ac:d8:d1:4d:22:c2:89:3f:cf:c1:41:9d:1c:a1:f2:bd:
         c6:c8:38:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 21:16:34 2024 by rpki-client on console-ams.rpki-client.org