Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/ce1a6d02-2095-35b1-b89d-03f020480026.roa
File:                     ce1a6d02-2095-35b1-b89d-03f020480026.roa (raw, json)
Hash identifier:          GLEYQ5OWuxaEHuqxf7PUsy3kkqgWCdBij8f6uePZRLA=
Subject key identifier:   86:8A:6B:C4:5B:91:28:B1:80:46:3E:10:28:72:F4:F4:47:F4:DB:B5
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F432858472405CA83D57D6A18D5AC8300
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/ce1a6d02-2095-35b1-b89d-03f020480026.roa
Signing time:             Sun 08 Sep 2024 01:00:31 +0000
ROA not before:           Sun 08 Sep 2024 01:00:31 +0000
ROA not after:            Sat 07 Dec 2024 02:00:31 +0000
asID:                     237
IP address blocks:        2001:468:2620::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:24:05:ca:83:d5:7d:6a:18:d5:ac:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Sep  8 01:00:31 2024 GMT
            Not After : Dec  7 02:00:31 2024 GMT
        Subject: CN=568f5d38-d5c1-41be-a5cd-e6399091d3f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8c:c7:95:1a:97:19:0b:8e:fe:e2:c2:1a:90:
                    11:97:65:33:40:99:5d:ba:c8:7b:e7:7b:01:91:76:
                    f9:2d:3e:9d:bd:61:48:f8:96:59:c8:09:fa:62:1d:
                    f4:e9:06:54:7b:2d:99:13:a6:40:d8:40:88:28:9a:
                    10:e3:fc:4f:49:47:e5:9d:f1:0a:53:ac:6a:93:66:
                    8f:54:14:2a:3f:e0:23:51:5a:78:22:fe:98:3b:6c:
                    21:f4:c7:12:2e:8c:63:21:dc:f2:9a:84:fa:35:3d:
                    f7:c0:ed:df:73:f2:0b:ee:cf:de:23:68:27:fe:58:
                    86:63:61:f7:7d:9f:e4:52:94:c6:27:9f:b2:d4:be:
                    0b:20:60:bd:a4:74:d6:25:0c:e1:75:0f:66:17:0a:
                    81:f4:1f:d5:1b:6f:d2:18:8b:ad:82:8e:ae:b0:59:
                    83:d1:be:19:2f:99:5a:68:7d:42:96:e3:11:3b:b3:
                    96:a3:3f:c6:98:7b:71:d8:ec:1f:71:f5:bf:be:30:
                    8b:bb:de:1d:42:67:ce:2c:27:e7:15:1b:bf:4d:7d:
                    3d:4b:07:15:fd:01:cf:5b:07:5a:62:ed:5c:7a:50:
                    d0:e9:4b:09:24:39:7e:bc:cb:f5:50:47:5c:91:72:
                    c3:9c:23:97:08:87:38:a3:db:5a:17:6c:33:32:1d:
                    54:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:8A:6B:C4:5B:91:28:B1:80:46:3E:10:28:72:F4:F4:47:F4:DB:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/ce1a6d02-2095-35b1-b89d-03f020480026.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:468:2620::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:fe:02:9c:a8:3b:34:0c:51:2d:8a:c0:c6:0c:c0:02:1e:c9:
         55:e3:5f:de:a7:1f:42:eb:55:cc:e3:fd:2f:a9:4c:22:b2:2f:
         87:ea:3f:ac:27:0c:b9:fd:b4:dd:25:9d:ff:2c:a5:9b:6d:2c:
         90:3d:cc:d1:7c:07:e1:92:ea:f3:81:4e:a0:19:c0:bd:8b:2c:
         a2:d4:7c:66:90:74:8d:10:f4:00:15:68:2b:7c:75:46:51:08:
         16:e8:30:c3:ed:2d:32:46:af:3f:40:3a:05:cc:fa:be:51:34:
         ae:81:9c:e4:b2:f9:af:07:88:cd:36:3d:0e:4b:b4:d9:79:1a:
         dd:a4:c0:4c:4e:cd:ec:e4:b1:3a:f1:01:ea:89:50:bb:dc:de:
         c9:3d:af:99:8a:23:ef:13:27:d1:4e:91:6d:26:56:df:d4:bb:
         55:ec:9b:65:6e:1d:ef:19:ed:7b:eb:97:b7:d6:89:39:3e:40:
         71:79:66:8a:78:f6:77:1c:7b:56:cb:47:db:e2:aa:5e:21:a2:
         1c:05:f3:e6:df:f0:5a:01:62:91:dd:00:f2:dd:af:80:1b:24:
         d9:0a:b0:f2:67:22:80:b8:2d:62:64:b1:29:a3:c8:b6:41:2d:
         2f:8a:f4:c0:4f:5a:e3:c2:33:f8:25:aa:66:d7:fc:1d:83:6f:
         67:cf:35:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:14:56 2024 by rpki-client on console-ams.rpki-client.org