Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6dfb8a83-8fe5-48a4-88df-ad72541dae26/c568d12f-84a4-31f6-8f97-9be5baaf2a9c.roa
File:                     c568d12f-84a4-31f6-8f97-9be5baaf2a9c.roa (raw, json)
Hash identifier:          pvsnMk/kBn8+nvcPSXWZ8Ffgg37WF9r2YEPQBCBAzAM=
Subject key identifier:   19:F3:65:90:90:DD:B5:4C:6C:18:D5:63:8D:1B:A9:E3:42:6F:07:98
Certificate issuer:       /CN=6dfb8a83-8fe5-48a4-88df-ad72541dae26
Certificate serial:       010D0C9F432858471E706405661C7DEB72635B00
Authority key identifier: 9D:4F:21:1C:94:F3:51:87:DA:8B:C9:E5:34:B0:F1:93:01:05:46:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6dfb8a83-8fe5-48a4-88df-ad72541dae26.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6dfb8a83-8fe5-48a4-88df-ad72541dae26/c568d12f-84a4-31f6-8f97-9be5baaf2a9c.roa
Signing time:             Fri 06 Sep 2024 01:00:31 +0000
ROA not before:           Fri 06 Sep 2024 01:00:31 +0000
ROA not after:            Thu 05 Dec 2024 02:00:31 +0000
asID:                     393454
IP address blocks:        2620:119:f000::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6dfb8a83-8fe5-48a4-88df-ad72541dae26/6dfb8a83-8fe5-48a4-88df-ad72541dae26.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6dfb8a83-8fe5-48a4-88df-ad72541dae26/6dfb8a83-8fe5-48a4-88df-ad72541dae26.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6dfb8a83-8fe5-48a4-88df-ad72541dae26.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1e:70:64:05:66:1c:7d:eb:72:63:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dfb8a83-8fe5-48a4-88df-ad72541dae26
        Validity
            Not Before: Sep  6 01:00:31 2024 GMT
            Not After : Dec  5 02:00:31 2024 GMT
        Subject: CN=1a73d0ff-9251-4e09-b28f-f062fd256f60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:60:66:26:4e:69:18:50:ac:41:0b:e3:ac:42:
                    80:74:40:32:bd:2a:7f:fe:84:f3:cb:68:4a:fa:e8:
                    15:3c:de:10:a5:e9:58:aa:1c:64:07:4d:75:ec:5b:
                    55:e4:26:a3:bd:73:77:de:5d:93:a0:66:c1:d8:c5:
                    08:58:4d:15:50:88:ad:ca:76:ac:05:9f:e0:6f:40:
                    7d:de:08:f6:3d:66:ab:ad:59:8d:a1:ef:e5:c3:52:
                    2f:0e:63:9e:06:9d:47:61:5c:d1:67:94:10:39:ef:
                    68:71:7f:fb:92:d1:a2:ef:28:cd:07:f9:14:43:0c:
                    e6:29:b4:2b:6d:29:e2:2a:cb:3f:b6:fd:8e:79:85:
                    60:cd:c3:9e:13:ac:62:7b:7f:da:50:67:ae:aa:cb:
                    e0:05:82:fc:04:08:02:2b:c7:f4:9e:ec:93:74:11:
                    3d:bb:98:da:97:7c:d6:12:cf:86:f3:20:47:c9:89:
                    28:e1:a2:5c:99:55:8b:a2:f2:2d:ee:c0:39:77:fb:
                    4f:f9:12:96:38:d6:d6:fb:53:1e:80:0c:1f:22:86:
                    b6:77:67:c2:9e:28:d1:48:b5:cc:0c:fb:71:71:3b:
                    43:1b:17:f3:b0:e0:cb:26:9b:23:dc:53:7f:54:91:
                    cf:2a:41:2d:90:bd:19:63:8c:de:a5:01:8b:d3:00:
                    7d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:F3:65:90:90:DD:B5:4C:6C:18:D5:63:8D:1B:A9:E3:42:6F:07:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6dfb8a83-8fe5-48a4-88df-ad72541dae26/c568d12f-84a4-31f6-8f97-9be5baaf2a9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6dfb8a83-8fe5-48a4-88df-ad72541dae26/6dfb8a83-8fe5-48a4-88df-ad72541dae26.crl

            X509v3 Authority Key Identifier:
                keyid:9D:4F:21:1C:94:F3:51:87:DA:8B:C9:E5:34:B0:F1:93:01:05:46:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6dfb8a83-8fe5-48a4-88df-ad72541dae26.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:119:f000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:e9:a4:95:f4:c3:41:3e:f9:22:e9:91:c9:1c:64:70:79:2d:
         b1:69:44:52:ca:c2:9e:1d:d2:28:71:56:35:86:49:61:be:9b:
         c6:67:c8:52:c3:74:91:79:7e:b8:67:7c:1c:64:3d:4e:86:a7:
         b8:73:bc:05:dc:2a:05:3a:85:1f:dd:0b:2f:af:3b:d4:3b:b5:
         af:5f:35:22:a7:eb:53:10:e5:5d:f9:74:cd:7f:7c:4c:10:83:
         1d:1f:6c:59:35:a3:72:8f:8f:f0:06:00:fb:b5:64:70:db:8c:
         73:8d:25:cc:9c:66:4f:51:d8:2c:8e:84:ad:10:fe:af:68:28:
         2a:f4:3e:f5:f3:f4:c3:04:3f:ca:c9:69:9c:dd:5e:68:42:10:
         fc:fe:c0:fa:31:16:41:3b:50:3b:a2:26:eb:29:4a:d3:b2:0e:
         ac:ab:11:82:b3:3b:b3:54:92:23:5b:e5:fa:ba:33:82:eb:c1:
         4b:c9:74:fc:d6:1e:7c:8e:60:59:1b:03:f0:c9:41:89:23:5a:
         30:c4:1c:6b:c6:4f:dc:14:fe:c2:f1:58:6f:24:10:6b:8a:b9:
         c6:f0:24:56:fe:90:cc:2e:6a:79:ea:05:57:67:22:97:34:30:
         04:aa:e8:43:db:32:8b:ec:ca:d5:bc:28:ce:1c:d3:e2:8f:08:
         d9:b4:93:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:20:01 2024 by rpki-client on console-fra.rpki-client.org