Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/8d14633a-c255-3b7e-9ef7-37895263dfec.roa
File:                     8d14633a-c255-3b7e-9ef7-37895263dfec.roa (raw, json)
Hash identifier:          D5ofKbanC0FeIg2yY9ydy7PCb1MxOZfw5Tvw1QA1InM=
Subject key identifier:   C4:35:55:4C:2D:03:CB:C8:DA:9E:B3:E2:DB:CC:93:BC:DE:0F:45:E9
Certificate issuer:       /CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Certificate serial:       010D0C9F4328576D51CC73C042CFC173EBEA1068
Authority key identifier: 38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/8d14633a-c255-3b7e-9ef7-37895263dfec.roa
Signing time:             Tue 30 Jul 2019 04:00:00 +0000
ROA not before:           Tue 30 Jul 2019 04:00:00 +0000
ROA not after:            Mon 30 Jul 2029 04:00:00 +0000
asID:                     21499
IP address blocks:        2607:f208:df05::/48 maxlen: 48
                          2607:f208:d310::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:eb:ea:10:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
        Validity
            Not Before: Jul 30 04:00:00 2019 GMT
            Not After : Jul 30 04:00:00 2029 GMT
        Subject: CN=cb6c53dc-88fb-455f-861c-2b28572ad139
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:97:4c:51:85:5e:8d:3d:68:f4:f6:f6:34:e8:
                    96:d7:fa:e9:73:a9:49:9e:df:37:6d:f6:61:f8:ec:
                    18:17:f4:7b:72:6e:d9:d5:9b:1b:53:d0:e6:a8:d4:
                    10:55:77:c2:b9:d8:e5:cd:67:40:f3:42:5f:21:71:
                    d3:90:b2:98:64:ff:a9:2f:fc:a1:04:42:90:f0:93:
                    d5:87:ef:3b:7c:3e:90:c2:12:0f:17:8e:09:01:be:
                    fe:b0:42:ae:63:38:8f:8e:cf:1b:d3:62:2b:20:7b:
                    5f:60:07:eb:83:af:06:2b:b3:3a:0f:c2:5d:70:34:
                    44:1e:87:a5:e3:d4:91:5e:5b:f2:7e:16:03:38:4c:
                    e4:0a:ba:81:eb:31:1a:46:9f:6b:fa:8c:c1:c7:9b:
                    63:dd:6d:d3:f3:95:d9:60:d9:50:76:95:4c:1a:6e:
                    40:a6:b6:94:07:2d:49:1f:7c:50:97:3b:72:ad:cc:
                    cd:7e:d7:22:c5:51:6e:e8:ac:eb:c8:ca:43:b9:57:
                    ad:f8:74:26:9d:6a:99:60:5a:af:e5:f0:7a:8f:8d:
                    06:fb:84:8d:6a:6c:ed:0c:09:dc:1d:ef:86:e2:44:
                    92:91:41:21:d9:47:28:24:8f:ec:88:ee:0b:0c:4a:
                    50:ad:8b:44:8d:e5:b1:27:44:de:28:19:4c:da:ff:
                    66:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:35:55:4C:2D:03:CB:C8:DA:9E:B3:E2:DB:CC:93:BC:DE:0F:45:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/8d14633a-c255-3b7e-9ef7-37895263dfec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl

            X509v3 Authority Key Identifier:
                keyid:38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f208:d310::/44
                  2607:f208:df05::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:4a:63:ca:9b:9b:81:f5:f7:a0:7c:e2:6b:6b:53:d1:8a:6f:
         64:ef:23:17:32:8b:d3:98:8c:3f:d9:7b:39:1e:c0:a6:53:f0:
         6b:ce:8f:88:84:41:89:02:85:06:06:40:a5:ac:1e:e8:78:08:
         da:77:6a:58:99:dd:b1:09:97:fe:d2:36:95:fa:af:12:15:9b:
         77:bc:01:9a:e3:28:d5:ba:3b:dd:b5:41:8e:cb:1e:3a:1a:7a:
         2f:6b:86:08:a9:c0:bd:a3:5d:b8:3f:96:9b:9e:3c:e3:f0:07:
         0b:2e:f1:4a:45:c1:a6:c2:60:c4:3e:08:4c:c0:d1:d5:f4:de:
         10:2f:00:6d:f4:f4:4a:43:63:07:88:6b:c5:53:d3:1b:c4:73:
         77:1e:47:17:b9:f2:28:16:6f:89:82:eb:3d:69:02:69:49:e7:
         40:85:bd:e6:bd:db:b2:d6:ac:e0:78:e4:c5:b2:3b:e5:36:60:
         9a:4a:ba:7e:14:7c:7a:07:04:46:42:9d:9f:55:58:a6:91:72:
         8b:d6:28:57:27:8a:0b:c5:1f:35:5a:ff:b8:ff:40:bc:af:01:
         27:7d:2b:cc:64:b9:56:af:3f:79:61:3e:e4:47:3b:c6:7e:b8:
         01:6b:f8:5c:cf:a7:01:46:1b:a9:c1:af:0d:f8:a1:be:63:b6:
         1c:8e:72:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:56:30 2024 by rpki-client on console-ams.rpki-client.org