Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/a3f11860-68fa-3387-b9fd-715d801b2410.roa
File:                     a3f11860-68fa-3387-b9fd-715d801b2410.roa (raw, json)
Hash identifier:          yqOIqqasBUFST1pdHhvnNKaZBVaDhIr1FCJP8RvA9Fs=
Subject key identifier:   10:70:BE:60:33:76:66:B6:6D:0E:6E:2A:C3:77:75:4E:91:C3:22:04
Certificate issuer:       /CN=8eda9035-7c9b-45a0-b98b-a45be535f082
Certificate serial:       010D0C9F432858474850A83B2F3755AEB35159A0
Authority key identifier: 64:FD:D2:B4:D5:A9:0A:A0:F5:66:68:E4:2B:96:51:54:E7:7A:66:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/a3f11860-68fa-3387-b9fd-715d801b2410.roa
Signing time:             Sat 21 Sep 2024 01:00:33 +0000
ROA not before:           Sat 21 Sep 2024 01:00:33 +0000
ROA not after:            Fri 20 Dec 2024 02:00:33 +0000
asID:                     399728
IP address blocks:        2620:98:e004::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:48:50:a8:3b:2f:37:55:ae:b3:51:59:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8eda9035-7c9b-45a0-b98b-a45be535f082
        Validity
            Not Before: Sep 21 01:00:33 2024 GMT
            Not After : Dec 20 02:00:33 2024 GMT
        Subject: CN=1f77ade2-18a2-48cc-a478-5fab51087b6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ba:30:03:98:f5:c0:56:6a:6e:2a:3b:9f:66:
                    ea:0d:2b:e4:d7:5c:33:2b:8c:ec:d3:40:4e:2e:35:
                    f3:f6:05:9d:47:1f:51:7e:3a:6d:24:34:ba:d2:49:
                    b5:50:a5:f0:81:eb:d0:98:49:f4:7a:fc:03:e7:2e:
                    cd:50:8f:4b:4c:22:d6:61:fe:da:f4:8d:cc:2a:d9:
                    a0:2a:3e:9d:29:4f:7c:af:fd:c0:a5:31:34:6d:43:
                    13:5e:bc:f6:59:d7:67:1a:c2:f9:f1:24:f1:08:d0:
                    ec:c9:62:23:5e:66:be:4e:70:c2:dc:ce:ca:3d:a9:
                    48:e2:4d:13:c8:61:c6:86:8b:a2:33:eb:a3:f2:ba:
                    17:c3:f2:e6:39:9b:98:3c:b3:63:9b:21:2f:35:01:
                    4d:ba:9f:89:3c:73:29:80:00:52:cf:e3:34:cf:f1:
                    d9:73:41:bc:f2:61:d9:6d:fd:e2:c8:ff:da:98:cb:
                    1b:0f:80:07:c8:af:9c:1c:04:29:a8:90:f2:dd:e4:
                    7f:8a:93:ec:c5:87:2d:c2:59:0c:86:5f:eb:6c:e4:
                    00:5e:bc:a1:a6:6a:68:ec:e8:ca:a0:4f:65:eb:e9:
                    7a:81:aa:49:50:6d:8f:4b:a1:d0:07:00:06:15:38:
                    6c:7d:71:83:10:04:13:d4:da:d4:8d:d4:3f:c9:80:
                    19:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:70:BE:60:33:76:66:B6:6D:0E:6E:2A:C3:77:75:4E:91:C3:22:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/a3f11860-68fa-3387-b9fd-715d801b2410.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.crl

            X509v3 Authority Key Identifier:
                keyid:64:FD:D2:B4:D5:A9:0A:A0:F5:66:68:E4:2B:96:51:54:E7:7A:66:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:98:e004::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:3d:fe:c1:65:e9:d2:ac:19:a9:0a:8f:a3:a2:fc:f7:b3:99:
         5c:6b:66:c3:87:55:d7:49:2c:3c:e2:30:ad:c9:29:f1:2b:b7:
         4b:03:63:ea:3c:1d:b5:ca:1d:33:c1:25:12:04:f7:14:9a:ea:
         ec:be:d2:4c:1b:dc:d9:95:61:74:53:92:45:e9:30:cf:4f:30:
         15:01:15:3a:ae:cc:27:e0:ac:3a:30:44:46:e2:35:96:fe:74:
         14:58:74:fa:cb:40:49:f0:e1:e4:34:f0:c4:9e:c2:29:9a:7a:
         39:27:df:d7:a1:9a:8c:40:41:cd:ff:ae:bb:01:68:cf:29:2b:
         58:e2:e9:d4:52:68:d8:df:0a:c7:de:ea:f3:b6:ce:3f:51:3f:
         b3:0d:ca:29:42:c8:40:d4:c2:ea:fd:4f:e5:49:91:24:52:e5:
         eb:9e:28:a8:50:79:a5:4a:40:73:7c:d7:f6:32:91:7b:d9:54:
         6c:a5:ed:03:95:f5:37:24:f4:b7:0a:5f:13:7b:ab:64:00:1d:
         ec:35:20:09:ac:a0:80:0d:30:e9:6a:a8:43:29:dc:98:f0:24:
         72:22:9a:e0:a6:93:78:a4:17:d4:5a:03:18:47:58:45:02:4f:
         5a:5b:11:9e:9b:11:ff:8d:39:5f:36:6b:16:08:da:6e:15:95:
         c8:f8:82:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 01:26:38 2024 by rpki-client on console-ams.rpki-client.org