Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d8c68f3-ceba-4a62-b5b1-ecc9bc879393/6b13e27b-aa58-3502-8e4a-2abefb7d6eb6.roa
File:                     6b13e27b-aa58-3502-8e4a-2abefb7d6eb6.roa (raw, json)
Hash identifier:          UNicK05EcczVDHGLfOEoxMCIKWZ6m012GpnEhJyIETU=
Subject key identifier:   62:F1:03:4E:64:DB:B7:EB:07:D1:E0:FA:40:82:7D:3B:22:C4:12:C9
Certificate issuer:       /CN=9d8c68f3-ceba-4a62-b5b1-ecc9bc879393
Certificate serial:       010D0C9F432858472405BEE5DCACD8F9ABF34F80
Authority key identifier: 2F:C5:AC:45:E8:78:AF:6B:C3:75:02:F5:24:25:14:4C:79:D1:6B:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d8c68f3-ceba-4a62-b5b1-ecc9bc879393.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d8c68f3-ceba-4a62-b5b1-ecc9bc879393/6b13e27b-aa58-3502-8e4a-2abefb7d6eb6.roa
Signing time:             Sun 08 Sep 2024 01:00:31 +0000
ROA not before:           Sun 08 Sep 2024 01:00:31 +0000
ROA not after:            Sat 07 Dec 2024 02:00:31 +0000
asID:                     5661
IP address blocks:        131.247.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d8c68f3-ceba-4a62-b5b1-ecc9bc879393/9d8c68f3-ceba-4a62-b5b1-ecc9bc879393.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d8c68f3-ceba-4a62-b5b1-ecc9bc879393/9d8c68f3-ceba-4a62-b5b1-ecc9bc879393.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d8c68f3-ceba-4a62-b5b1-ecc9bc879393.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:24:05:be:e5:dc:ac:d8:f9:ab:f3:4f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d8c68f3-ceba-4a62-b5b1-ecc9bc879393
        Validity
            Not Before: Sep  8 01:00:31 2024 GMT
            Not After : Dec  7 02:00:31 2024 GMT
        Subject: CN=2325fcc9-9ecf-4a4f-909d-bcbd75e756ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:cd:3a:f0:19:1f:86:1b:10:27:a8:77:9c:ef:
                    11:f3:c5:99:ee:b5:38:5b:4e:7f:63:6a:33:8c:93:
                    b9:6e:80:0a:34:a2:b8:31:0b:37:80:54:2b:ba:9f:
                    bc:35:06:bd:26:ba:50:cc:ea:7c:c8:6e:7d:45:d1:
                    25:b1:03:c7:52:0e:31:8e:ed:6d:a7:25:7c:34:c2:
                    bb:c8:eb:01:4d:bb:9e:32:76:b1:3f:e2:79:09:4e:
                    0f:f3:7a:23:14:e1:85:87:93:c3:b2:c3:8a:f2:4e:
                    1a:55:78:61:32:71:be:85:db:a4:08:fb:4a:99:10:
                    44:8d:0c:46:34:d0:e3:dc:14:1b:66:c3:35:37:c3:
                    ea:fe:be:72:a2:c3:1b:bb:35:ff:1d:b5:3f:83:aa:
                    2b:53:00:18:6d:b4:8b:95:5e:f8:cd:b0:17:8e:9b:
                    ae:a7:88:a4:a9:d8:2e:29:ec:37:6e:b7:cd:fe:9f:
                    fa:82:43:a8:0e:d7:67:df:95:e7:78:0f:66:51:d6:
                    41:37:a4:b8:a1:44:af:5b:d3:7d:71:0f:d4:86:54:
                    b8:1a:90:9a:17:a1:3d:6e:99:08:09:0d:6d:0d:ff:
                    9a:69:f1:5b:ba:f9:6c:a7:9c:e6:84:bc:2f:f6:78:
                    80:32:dc:3b:47:9a:74:30:f5:c5:05:e8:95:0d:a1:
                    ab:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:F1:03:4E:64:DB:B7:EB:07:D1:E0:FA:40:82:7D:3B:22:C4:12:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d8c68f3-ceba-4a62-b5b1-ecc9bc879393/6b13e27b-aa58-3502-8e4a-2abefb7d6eb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d8c68f3-ceba-4a62-b5b1-ecc9bc879393/9d8c68f3-ceba-4a62-b5b1-ecc9bc879393.crl

            X509v3 Authority Key Identifier:
                keyid:2F:C5:AC:45:E8:78:AF:6B:C3:75:02:F5:24:25:14:4C:79:D1:6B:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d8c68f3-ceba-4a62-b5b1-ecc9bc879393.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.247.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:49:63:c3:48:d4:26:d3:1e:23:cb:a5:00:6c:93:73:44:28:
         93:57:bd:25:04:ed:d2:67:6c:e9:9c:e5:31:25:34:a1:b0:10:
         57:01:ce:5d:19:e7:e0:85:69:e0:ec:5f:20:6b:81:79:82:80:
         d0:85:80:4f:d2:88:ea:fd:d5:88:20:05:5e:63:ed:fd:cd:59:
         6a:60:1c:5d:f8:f0:88:1c:da:af:1f:a4:5c:05:d1:b9:f9:73:
         84:62:77:3f:3a:e9:b1:68:1d:db:5b:6e:be:4e:0c:da:d1:16:
         05:bb:a8:10:cd:63:64:75:60:35:b5:e4:b9:5a:d9:f3:be:1d:
         c0:67:aa:da:ee:f9:b7:a2:1c:d2:3d:c1:ce:6d:1c:3e:06:a1:
         1c:69:63:21:ad:58:de:b2:8c:c4:6c:7e:95:19:c6:ef:42:c8:
         44:83:23:cb:37:d1:aa:78:21:40:4a:cc:1e:ce:e4:f5:07:24:
         53:5d:d2:15:f5:d3:b3:eb:4f:e4:bb:f0:b3:c5:66:0a:f9:3b:
         80:a4:3c:3b:f4:b5:2f:77:f0:80:8e:ba:78:a3:e7:2d:d9:78:
         75:83:c5:96:19:2a:39:c9:9b:ee:39:35:04:7a:9a:2d:32:1f:
         37:fd:f5:b4:47:57:82:9d:10:dc:25:80:4c:99:ad:82:7b:5d:
         3f:8f:d0:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:50:59 2024 by rpki-client on console-fra.rpki-client.org