Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1ee14d2c-bab1-3488-ade8-679fa306a629.roa
File:                     1ee14d2c-bab1-3488-ade8-679fa306a629.roa (raw, json)
Hash identifier:          BBOgLE1ZqLkHEyQ5P/qnsAKIAwE+GTeX4wWzXyHBPPg=
Subject key identifier:   7D:B2:90:AB:B0:EF:47:75:A0:02:50:AE:1C:74:F0:80:96:93:8E:3F
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F432858475910CC199D6F262D939AAE00
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1ee14d2c-bab1-3488-ade8-679fa306a629.roa
Signing time:             Fri 27 Sep 2024 01:00:31 +0000
ROA not before:           Fri 27 Sep 2024 01:00:31 +0000
ROA not after:            Thu 26 Dec 2024 02:00:31 +0000
asID:                     1225
IP address blocks:        2001:418:1456:b0a::/64 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:59:10:cc:19:9d:6f:26:2d:93:9a:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Sep 27 01:00:31 2024 GMT
            Not After : Dec 26 02:00:31 2024 GMT
        Subject: CN=250b5f4c-31fd-4341-86fb-c7fe02325929
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:f9:a3:7a:77:7c:b2:37:ac:cd:16:26:e0:e9:
                    de:9a:54:e3:42:94:16:7a:8d:88:3b:4f:ae:35:36:
                    fe:28:16:32:77:a7:d9:6f:3c:31:78:99:ef:77:4a:
                    66:8a:fb:76:e5:4c:ce:45:e8:5e:05:e3:74:f8:e1:
                    2b:cb:67:6a:98:7c:0e:6f:ce:97:e5:ae:40:7c:46:
                    84:f4:74:4f:25:8f:6c:0e:8d:8f:6c:bc:43:1e:88:
                    00:a3:16:c2:0a:f0:ce:ca:1a:ed:19:4d:f0:f5:2d:
                    ca:37:d6:0e:8d:5d:a9:58:10:1b:29:0c:d8:c1:ea:
                    36:86:96:22:3b:36:1a:bb:83:27:38:54:b9:29:5e:
                    0f:fd:2d:65:49:4f:d0:9f:b1:04:7a:51:17:e4:ee:
                    e1:6f:d1:bd:e7:51:81:38:8c:9d:c0:41:c5:8a:26:
                    70:f3:c7:cd:c5:c5:62:e9:b8:39:1b:f4:bc:f0:17:
                    07:85:c5:59:e0:6e:28:be:79:94:ed:c1:5a:d3:84:
                    1b:d8:29:b4:dc:0d:a5:26:45:d7:de:da:0c:ec:cd:
                    6d:9b:1b:73:08:ea:ec:04:6b:29:a5:6f:c5:03:60:
                    12:e4:50:a2:58:cb:1f:65:27:02:53:97:66:d4:6b:
                    7e:ff:0c:b0:b3:4e:a2:9b:2c:38:1d:28:e7:44:cc:
                    c0:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:B2:90:AB:B0:EF:47:75:A0:02:50:AE:1C:74:F0:80:96:93:8E:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1ee14d2c-bab1-3488-ade8-679fa306a629.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:418:1456:b0a::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:df:24:bd:01:29:a6:e4:d3:bd:39:59:82:4e:66:49:a1:0b:
         74:35:5f:99:9c:b7:2e:24:d3:01:57:63:1a:be:74:27:35:4b:
         65:67:a2:76:63:6e:79:e6:3f:3f:55:61:11:6a:67:1a:90:fd:
         44:60:71:0b:a6:9a:b1:5c:88:7d:c2:51:4b:6b:ca:f2:8b:6a:
         2e:c7:8f:c6:6a:89:fc:a2:3c:3d:d1:05:2a:3f:a0:89:f3:d3:
         52:1c:61:d7:6b:ca:ec:04:00:67:83:45:0d:b7:81:66:15:08:
         7b:f6:dd:0b:d3:c4:81:7d:79:31:43:20:4b:69:fa:c0:89:c1:
         d1:0d:ec:25:49:3d:91:2a:1f:b8:32:d0:fc:a2:77:2e:d5:57:
         c6:4f:1b:0f:2e:70:4a:1a:98:72:c0:12:94:4b:3a:56:e0:f4:
         5f:6b:eb:f5:2e:dd:92:a0:b9:ee:ab:08:cc:62:13:f5:43:8a:
         78:d0:79:72:66:72:99:cf:b2:d8:b6:da:a7:17:e2:97:f0:b7:
         e4:97:36:be:f1:3e:5e:ba:ba:21:5d:2b:ce:b5:92:ad:51:3b:
         85:8b:a8:e3:6e:11:da:fa:c3:57:f3:41:9d:c3:72:20:61:b5:
         50:61:16:6c:80:3d:ae:e5:af:ef:f8:56:ec:ec:10:94:1e:f1:
         85:a7:87:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:15:08 2024 by rpki-client on console-ams.rpki-client.org