Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/ef8c503e-d7f4-3f51-b58c-46569aa92e58.roa
File:                     ef8c503e-d7f4-3f51-b58c-46569aa92e58.roa (raw, json)
Hash identifier:          Rb06EXFXhKMyunt661UVSSAM1BYlH3vKK4jVZcIjXTY=
Subject key identifier:   10:BB:CF:EC:8C:FB:F1:68:16:BC:8F:69:E7:0F:73:76:74:E3:E2:AE
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F43285847AE36BC8ECA576D1CF071F0C0
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/ef8c503e-d7f4-3f51-b58c-46569aa92e58.roa
Signing time:             Sun 27 Oct 2024 13:00:41 +0000
ROA not before:           Sun 27 Oct 2024 13:00:41 +0000
ROA not after:            Sat 25 Jan 2025 14:00:41 +0000
asID:                     62775
IP address blocks:        2001:468:1f21::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ae:36:bc:8e:ca:57:6d:1c:f0:71:f0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Oct 27 13:00:41 2024 GMT
            Not After : Jan 25 14:00:41 2025 GMT
        Subject: CN=559fcf92-3b36-4653-9cc7-99673b6bb8db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:18:65:04:7f:5d:1f:27:72:d9:f1:e9:c5:ea:
                    37:4e:db:04:52:46:15:a8:2d:18:0d:72:be:d3:08:
                    7d:73:ab:2e:74:dc:da:8a:36:2b:7a:5f:5e:b0:66:
                    60:ac:e4:84:62:8b:7b:66:d9:1d:2d:1d:5f:00:97:
                    21:b9:44:50:56:c1:47:d8:af:8f:3f:89:99:0c:0d:
                    59:4e:d6:fb:98:14:59:64:b4:f0:6d:d7:84:d0:04:
                    6c:60:84:97:97:8e:5c:89:3a:68:62:22:58:f4:af:
                    80:9c:7b:d6:4d:1f:51:9a:25:26:ba:1c:be:aa:cb:
                    f2:03:42:62:96:cd:10:bd:93:fc:06:1f:e3:c9:1c:
                    1f:ae:b4:31:b6:91:58:bd:01:68:4f:fd:95:0c:3b:
                    66:95:2e:0e:76:8a:2f:be:e6:7c:05:d4:18:59:ee:
                    b4:51:0a:8c:e0:04:e6:c6:8d:7e:22:fe:f0:e8:01:
                    22:f4:7e:26:53:27:65:fd:00:f0:f2:4c:d2:b8:9a:
                    1d:07:03:e2:d0:62:59:a3:f7:a2:6e:ed:a9:ee:bf:
                    62:95:ea:96:00:09:5b:a2:e1:2d:e7:9a:49:cf:ce:
                    e6:c7:60:e9:20:e0:b8:cf:1b:29:5c:6c:f8:9e:d0:
                    e7:5a:b9:c4:8c:8d:27:d9:19:c6:ec:e5:5c:75:02:
                    d9:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:BB:CF:EC:8C:FB:F1:68:16:BC:8F:69:E7:0F:73:76:74:E3:E2:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/ef8c503e-d7f4-3f51-b58c-46569aa92e58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:468:1f21::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:cb:0b:5a:6f:a8:2c:a3:e0:18:a9:83:0c:ee:d6:d8:94:b3:
         89:d9:84:a9:88:b7:33:87:3e:e7:64:04:04:e6:14:5d:f7:4f:
         9c:8a:58:2f:9b:d7:95:a8:4c:a8:a5:81:1e:27:bd:18:a4:28:
         de:1d:e6:f2:e8:76:02:43:f5:70:80:2a:10:21:53:8a:0a:2c:
         90:cf:68:0e:97:c4:4e:f4:16:f4:0b:29:bf:06:21:bd:7b:92:
         9c:29:66:5b:17:ce:cc:91:15:fa:90:a5:fa:c8:ce:d0:f3:6d:
         7a:4d:aa:68:bb:77:b1:4d:25:6a:2e:f1:ba:fa:a9:3a:74:93:
         02:7a:a1:6b:e3:5e:4c:55:ab:e5:7b:d0:b3:b5:fc:00:d3:73:
         ee:34:ed:86:0a:3f:86:72:0b:d5:ae:b9:e3:6c:a2:6e:c6:d9:
         aa:56:c9:db:6b:d4:57:c5:bf:02:14:c0:e1:fd:3d:e6:1f:45:
         d2:3d:5e:b1:a9:37:a9:ec:bf:0d:d2:27:fa:f2:96:3d:23:25:
         97:3a:62:63:f1:68:6b:e1:3a:c3:e8:58:dd:7c:58:20:be:18:
         47:bd:8b:74:67:90:43:21:0c:66:de:b5:cd:11:51:21:dd:d6:
         71:42:94:2e:bc:91:d4:fe:9c:cc:e2:ec:05:bf:56:b0:9b:ef:
         2b:97:f5:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:14:56 2024 by rpki-client on console-ams.rpki-client.org