Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/1f7e55fd-ffb0-3261-9139-c0fb8997bbb1.roa
File:                     1f7e55fd-ffb0-3261-9139-c0fb8997bbb1.roa (raw, json)
Hash identifier:          DIcz4ekJ8BC+qPbTaxlto5qb/TMCI+MUQ/9wpVkuq0E=
Subject key identifier:   EE:E1:42:0B:60:63:74:44:27:0E:82:A1:64:68:38:C0:77:71:17:A5
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F432858472405C225FC1BEAB548E32780
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/1f7e55fd-ffb0-3261-9139-c0fb8997bbb1.roa
Signing time:             Sun 08 Sep 2024 01:00:31 +0000
ROA not before:           Sun 08 Sep 2024 01:00:31 +0000
ROA not after:            Sat 07 Dec 2024 02:00:31 +0000
asID:                     11164
IP address blocks:        2001:468:1f0c::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:24:05:c2:25:fc:1b:ea:b5:48:e3:27:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Sep  8 01:00:31 2024 GMT
            Not After : Dec  7 02:00:31 2024 GMT
        Subject: CN=b68fdd8b-af3d-4e80-907b-3024bf5c8fc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:3e:48:d7:4a:da:b5:b5:12:ed:da:a3:12:06:
                    76:cf:4f:bb:9c:ad:fa:d2:ec:ea:35:63:62:fa:a5:
                    54:fa:24:bb:4f:f6:74:ac:e6:7b:c4:1a:26:39:48:
                    d4:d5:4e:88:3c:3f:f6:6a:f2:d9:3e:7f:48:a2:a8:
                    99:de:6b:08:f1:d4:f2:57:e3:89:89:38:69:ab:9a:
                    51:b6:73:06:76:19:73:13:22:d1:4d:7a:4e:53:dd:
                    d1:23:12:84:b7:85:83:aa:e2:bf:81:54:b9:f6:54:
                    c2:af:3e:80:cc:3b:0c:1d:8e:7e:06:1f:7f:67:fa:
                    1f:8d:1c:5a:3b:10:5b:e9:b9:9f:32:22:d9:9b:ab:
                    06:34:32:74:6c:c1:e3:84:68:9c:a6:f8:c1:1d:bf:
                    8c:cc:30:e2:34:af:66:71:35:99:c6:60:52:c0:bc:
                    c0:70:78:ef:bc:a3:8d:bf:10:d6:32:79:92:ce:5d:
                    cf:eb:31:e5:1f:ab:63:fc:c1:cf:2c:be:0b:9a:b6:
                    95:47:9a:dd:ba:15:ee:77:b4:ff:03:e5:60:d9:ac:
                    9b:3d:92:49:a9:76:66:34:f9:24:c4:f3:15:ca:aa:
                    56:c4:43:93:63:14:f6:08:f7:9e:96:54:6d:6f:32:
                    fc:72:9e:31:2c:2f:12:94:e5:ba:63:a2:65:ab:61:
                    cc:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:E1:42:0B:60:63:74:44:27:0E:82:A1:64:68:38:C0:77:71:17:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/1f7e55fd-ffb0-3261-9139-c0fb8997bbb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:468:1f0c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:82:31:58:af:dc:13:6e:93:fc:f7:75:2c:f5:3b:8a:6a:cf:
         d4:bf:a9:02:92:a6:12:08:29:75:ac:de:ee:04:4b:27:3c:ca:
         ce:a9:f8:c5:93:72:70:77:14:76:3a:07:68:9b:f3:ae:36:b6:
         65:0f:bf:ec:88:1e:1a:d4:d2:e0:bf:37:aa:a0:fb:ae:0d:6d:
         fb:96:fc:78:89:7e:04:f4:7e:b5:b7:d6:57:27:15:89:38:c8:
         be:2f:5e:60:10:7c:a7:d0:ae:4a:64:c5:0e:a4:e0:14:41:71:
         ff:14:60:62:4d:e2:3c:01:c0:9b:34:69:e3:61:b6:92:f9:f7:
         da:cd:04:09:db:ee:d5:bf:a4:16:c9:4f:09:e7:5f:b3:ad:11:
         48:37:9d:e5:16:e5:8a:77:02:6b:2c:bd:c0:67:2f:8c:c2:58:
         d1:80:0a:5d:33:a2:f9:79:06:82:82:84:3b:72:61:f0:ee:84:
         20:76:48:f8:06:7e:37:f0:88:ab:29:21:61:c5:de:d3:7a:e8:
         f2:e0:67:df:6f:1b:56:9e:dd:ff:e0:a4:47:44:02:8f:dd:ea:
         68:4a:14:ef:74:b9:a6:d6:da:24:62:99:3a:07:e5:03:71:79:
         65:ee:9c:dd:ac:89:29:f1:0e:07:70:d9:81:53:e0:95:31:96:
         ef:64:ef:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:00:33 2024 by rpki-client on console-ams.rpki-client.org