Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/9226ae08-c759-3a7a-b17b-4d72f55ed057.roa
File:                     9226ae08-c759-3a7a-b17b-4d72f55ed057.roa (raw, json)
Hash identifier:          3Y4nwk2aB9i7Bv5uREiJ8CCSHdZUF1KHRLdR56KRTOU=
Subject key identifier:   ED:1F:68:E1:F4:A2:B6:F7:72:CC:DC:D7:17:01:F0:4B:B2:F6:4F:7B
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F432858475910CC2AF7F7FEE89AC1ED00
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/9226ae08-c759-3a7a-b17b-4d72f55ed057.roa
Signing time:             Fri 27 Sep 2024 01:00:31 +0000
ROA not before:           Fri 27 Sep 2024 01:00:31 +0000
ROA not after:            Thu 26 Dec 2024 02:00:31 +0000
asID:                     1225
IP address blocks:        2001:418:1456:b15::/64 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:59:10:cc:2a:f7:f7:fe:e8:9a:c1:ed:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Sep 27 01:00:31 2024 GMT
            Not After : Dec 26 02:00:31 2024 GMT
        Subject: CN=d7770e81-0d8a-44d7-ad9d-a3626b5b9132
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:00:07:1f:4b:38:f6:21:f3:a9:44:69:54:08:
                    b1:c8:09:6f:1d:5b:20:ba:db:7a:18:0a:4b:8a:7b:
                    c0:eb:e8:54:0f:28:b3:8e:df:15:6d:a0:fa:02:bf:
                    cd:42:cb:de:61:fd:34:05:32:6b:65:2d:fd:4a:bb:
                    a0:98:e6:e8:5e:4a:c2:ab:73:2e:23:bf:9e:33:d2:
                    65:4c:ab:15:c1:2f:4b:78:04:a9:63:d0:2d:0e:2d:
                    f2:7d:30:75:83:66:2d:43:e4:90:1c:3b:25:bb:f8:
                    72:ba:92:05:1e:6a:cd:56:70:7b:8b:25:5b:2d:52:
                    a5:16:60:77:7c:e7:6f:05:06:b4:57:0d:26:27:bb:
                    6f:e6:e3:44:a1:71:bb:73:02:7f:2e:84:fb:85:2a:
                    58:12:83:b1:39:23:26:cb:fa:55:93:47:37:d6:e3:
                    bc:bb:20:ff:91:19:64:65:9d:08:e8:46:a8:78:43:
                    d0:e5:47:f1:1d:86:e7:06:d1:19:41:dd:5d:16:c7:
                    03:e8:d6:13:6a:b0:70:b9:e5:5e:44:29:b2:12:7c:
                    ed:da:45:b2:28:9f:d5:39:b3:eb:d0:2b:31:ec:6c:
                    08:75:5d:71:d7:67:eb:3c:a4:aa:92:f7:03:2e:12:
                    06:cd:72:9a:c4:39:70:64:13:79:30:69:51:59:4c:
                    49:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:1F:68:E1:F4:A2:B6:F7:72:CC:DC:D7:17:01:F0:4B:B2:F6:4F:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/9226ae08-c759-3a7a-b17b-4d72f55ed057.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:418:1456:b15::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:87:ee:53:c5:ef:d3:73:70:9f:df:28:79:69:1c:d3:79:6e:
         11:55:be:99:0b:64:37:07:0a:06:45:34:49:c3:4e:ed:26:d0:
         2a:38:ff:53:9d:dd:6d:73:45:97:47:e3:8b:56:73:92:1c:ed:
         11:f4:cd:db:d6:58:69:1b:94:d2:50:67:69:23:be:3f:39:a8:
         33:75:c5:53:0a:64:8d:19:f5:4d:ba:88:3b:f4:bf:8e:cb:af:
         b3:8a:31:e1:84:7d:eb:31:b0:9a:8e:6d:6a:29:c4:3d:1c:57:
         bd:b4:91:ae:a5:ca:26:f7:e2:7f:e8:fc:55:44:00:88:aa:10:
         41:8e:e7:a5:d3:32:5a:6a:84:5e:0d:b8:b4:3c:bf:fa:91:a4:
         26:f1:9e:f8:c3:6d:74:b9:4c:73:ae:4c:42:79:75:a7:70:55:
         ce:20:c4:36:49:bc:78:9c:82:02:4f:0f:46:c5:3f:67:57:62:
         38:e9:46:23:0a:82:11:eb:03:16:d3:09:c2:13:37:97:83:1e:
         a6:92:be:e6:9a:65:d9:c9:bf:16:53:a6:91:97:c2:f3:d0:27:
         15:62:9d:0d:1b:48:25:e8:39:1b:39:44:48:8b:27:40:29:45:
         80:13:d7:e0:26:80:49:ae:6b:10:1d:fd:27:17:58:99:53:3a:
         12:65:5b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:29:04 2024 by rpki-client on console-fra.rpki-client.org