Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/8dfd5f6d-30c2-3ab5-9e90-8fdec3ef44ea.roa
File:                     8dfd5f6d-30c2-3ab5-9e90-8fdec3ef44ea.roa (raw, json)
Hash identifier:          P/MEPnGsiJQhTidsHsp69cmiWG4DLA85l8e0/7f3Y60=
Subject key identifier:   EF:DF:BF:62:19:9F:54:F6:9C:2D:6B:2C:9F:42:F2:04:4D:5C:8A:3C
Certificate issuer:       /CN=8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5
Certificate serial:       010D0C9F432858473A5B7D735875AB865F558280
Authority key identifier: 92:04:3A:A3:CA:F8:0F:3C:8D:45:A1:49:B5:5F:4B:AD:F5:C3:D9:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/8dfd5f6d-30c2-3ab5-9e90-8fdec3ef44ea.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     10965
IP address blocks:        2001:410:2000::/40 maxlen: 48
                          2001:410:2000::/48 maxlen: 48
                          2001:410:2001::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:7d:73:58:75:ab:86:5f:55:82:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=c6e22da9-0fce-4011-80e5-3566b325416d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:20:34:df:73:43:b5:5d:af:d7:63:2a:b7:c4:
                    7a:98:93:fd:2c:e6:6c:6c:80:c6:f3:79:4c:0b:ef:
                    de:a1:ae:c4:a7:6c:53:76:ba:89:60:d6:99:f3:e2:
                    d2:53:72:3d:ee:21:2a:b5:ff:71:d6:9f:da:3b:3c:
                    5a:a4:96:4f:cf:ed:83:dc:07:c6:43:8d:be:5c:9b:
                    5c:9a:79:3b:83:25:17:17:08:99:76:5d:34:0b:fa:
                    0f:7c:c0:87:bd:7d:76:f6:06:97:18:4a:66:9d:b6:
                    9a:28:42:e8:0c:94:b1:42:be:f0:8d:1b:84:4a:53:
                    b7:14:6e:3f:a9:95:99:3b:1f:a5:4b:a8:ff:f2:d3:
                    e5:a7:9c:ad:40:7a:ec:2a:82:8a:5f:9b:99:ec:c1:
                    68:d9:a7:ab:ba:63:b7:85:1f:42:f2:b1:87:79:4b:
                    34:51:ff:ff:71:68:10:5d:eb:9a:01:18:9f:f4:09:
                    c8:74:df:5d:07:48:01:5d:67:af:52:19:97:1e:48:
                    aa:0e:e7:47:1d:ed:ff:20:d9:6b:e4:c3:96:f3:9c:
                    3d:89:0d:25:4b:5d:b3:63:d6:97:f1:10:b0:f1:31:
                    e5:6e:24:6e:31:0b:c4:3e:24:2e:2f:bc:33:8c:c3:
                    cf:0f:93:b9:27:6e:96:62:28:f6:f9:e4:6a:a3:fc:
                    16:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:DF:BF:62:19:9F:54:F6:9C:2D:6B:2C:9F:42:F2:04:4D:5C:8A:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/8dfd5f6d-30c2-3ab5-9e90-8fdec3ef44ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.crl

            X509v3 Authority Key Identifier:
                keyid:92:04:3A:A3:CA:F8:0F:3C:8D:45:A1:49:B5:5F:4B:AD:F5:C3:D9:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:410:2000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:25:9c:f2:9b:b7:30:e1:8b:7c:1a:0e:f8:ca:35:f5:7e:45:
         ca:7e:47:42:41:86:74:55:2a:3b:8a:1b:8f:c8:54:a5:03:3f:
         4c:6d:50:7c:df:74:5a:6e:f8:38:ba:bb:82:77:51:55:30:3a:
         23:b6:e4:12:ec:43:33:ba:9b:85:f1:fb:57:0f:6e:5f:14:ce:
         cd:44:18:a0:f8:f7:e5:65:88:75:05:fe:dd:14:e0:91:1a:1b:
         fd:de:57:3c:1a:91:66:5a:4d:e5:2b:e0:5d:1d:0b:e0:f7:ae:
         2f:99:b6:dc:bd:ee:c2:41:3d:7a:17:4e:17:09:fe:63:30:3b:
         b8:80:c8:79:39:98:ab:e8:37:fa:59:f0:75:37:a7:05:f3:eb:
         61:09:f1:e3:3d:7f:f9:f4:11:c4:77:c5:bf:f4:bb:3e:fc:77:
         51:3e:f1:94:bd:25:f2:c5:65:4f:d6:e3:ad:31:23:01:be:59:
         16:79:31:d2:05:c0:ad:6b:04:1d:b6:5a:d0:0e:85:3f:04:43:
         9a:38:db:77:0d:4a:47:e1:a0:82:1b:a4:37:24:ae:d7:77:85:
         bc:d4:71:90:36:96:7f:b6:59:e1:ce:e5:76:b3:7a:78:8b:be:
         c0:14:a7:39:7d:15:9f:66:ad:0a:27:ec:c7:44:39:92:be:04:
         8b:21:86:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:00:36 2024 by rpki-client on console-ams.rpki-client.org