Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/e9e4b82a-5d02-3ff9-8293-d43f1c276845.roa
File:                     e9e4b82a-5d02-3ff9-8293-d43f1c276845.roa (raw, json)
Hash identifier:          HvIb4+B0g4UuGOMkmgKGB1dQc/wAMz/9WmbgrbX6g0I=
Subject key identifier:   F3:CC:E8:59:8C:F8:22:5F:BE:2C:C4:EA:68:3F:10:59:60:5F:60:72
Certificate issuer:       /CN=6e9c5894-f794-4209-a00d-cf232363d7c6
Certificate serial:       010D0C9F432858474850AD282687B2DEAC087B80
Authority key identifier: EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/e9e4b82a-5d02-3ff9-8293-d43f1c276845.roa
Signing time:             Sat 21 Sep 2024 01:00:33 +0000
ROA not before:           Sat 21 Sep 2024 01:00:33 +0000
ROA not after:            Fri 20 Dec 2024 02:00:33 +0000
asID:                     22843
IP address blocks:        2620:100:9000::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:48:50:ad:28:26:87:b2:de:ac:08:7b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e9c5894-f794-4209-a00d-cf232363d7c6
        Validity
            Not Before: Sep 21 01:00:33 2024 GMT
            Not After : Dec 20 02:00:33 2024 GMT
        Subject: CN=5c7913e5-a5af-42fe-993d-777773b475e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:98:be:c6:9f:b8:c6:db:e2:4a:fe:23:77:c0:
                    7f:52:6d:50:7b:f1:be:65:07:22:a9:b0:5d:9c:46:
                    29:ff:f0:7f:a5:da:67:47:95:cf:87:12:70:63:7c:
                    dd:df:f8:29:8e:39:47:2d:ec:3b:90:e9:a4:f2:d8:
                    42:11:1c:9b:a7:32:97:e5:25:01:81:d4:b1:36:d6:
                    f7:ba:27:3e:b0:88:a8:48:a9:13:99:40:2a:c0:b0:
                    75:bf:3f:48:73:c8:d0:4a:95:50:f2:3b:20:62:3c:
                    19:ed:81:db:ae:eb:1e:bb:49:96:a2:36:20:5c:54:
                    2b:fd:a9:e9:44:e0:e1:93:50:ac:d9:d7:b5:ea:ac:
                    7d:ca:b5:52:7c:d6:b2:9a:59:ed:6b:94:54:53:f1:
                    ad:49:3b:af:4a:70:29:51:47:32:8f:06:c5:ca:58:
                    46:32:03:d2:1d:3f:8a:41:a6:53:03:85:75:e7:ba:
                    bf:c2:ac:0b:74:a4:4c:be:d0:95:87:e2:49:da:25:
                    fa:d8:0a:13:ca:a4:75:74:12:79:17:a7:71:0e:ff:
                    8b:01:12:13:08:a8:15:21:22:3e:4d:74:4a:60:1a:
                    8a:f4:e0:11:20:80:74:16:07:47:9b:82:d1:1f:c2:
                    cc:6b:26:9c:92:ab:a3:26:fe:77:c0:48:7b:f7:47:
                    3c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:CC:E8:59:8C:F8:22:5F:BE:2C:C4:EA:68:3F:10:59:60:5F:60:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/e9e4b82a-5d02-3ff9-8293-d43f1c276845.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl

            X509v3 Authority Key Identifier:
                keyid:EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:100:9000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:fc:8a:d7:db:5b:17:be:82:6e:c7:57:b0:b0:c8:5a:5c:99:
         9e:c4:94:3e:de:94:cd:f9:fd:c1:83:b4:dc:af:95:63:16:61:
         54:8e:a9:b6:2d:fa:fe:df:87:df:58:55:97:f8:73:21:2d:0c:
         10:48:08:68:d6:4d:48:46:0a:4d:72:e4:d7:c2:11:91:65:d6:
         dd:23:22:35:11:24:cb:10:7a:9f:61:22:a7:5f:82:53:56:a6:
         35:a7:2c:8f:9e:13:07:44:cf:d5:a1:f8:7c:54:ce:97:81:ac:
         df:7e:b6:b9:41:c6:99:6a:19:41:2f:c3:6e:8a:3d:6f:a9:d3:
         cd:bf:41:10:44:5e:af:c1:5d:a8:fc:fb:c1:ca:07:98:b1:76:
         21:20:02:b3:c3:70:be:da:bc:49:dc:5c:e2:4a:76:28:e4:f4:
         eb:71:c8:30:02:08:57:c3:ab:44:b4:a5:cf:f0:68:a0:6f:af:
         7f:20:a7:63:3a:90:6c:b6:79:f7:6f:da:03:ed:a3:21:20:7b:
         81:dc:e6:26:87:18:88:5b:d2:f6:2d:5e:65:87:5b:69:6d:52:
         87:8e:c1:59:39:23:48:cd:98:ff:4a:54:04:d9:45:30:fb:62:
         fe:30:93:6b:72:f9:8b:f7:ff:74:5f:4e:3b:a2:33:ab:73:00:
         90:14:ff:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:05:45 2024 by rpki-client on console-fra.rpki-client.org