Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d5cd4bd8-7b59-38d7-9eb1-0513e756b884.roa
File:                     d5cd4bd8-7b59-38d7-9eb1-0513e756b884.roa (raw, json)
Hash identifier:          9KPGN+1ckeTF/FhDFiJhG0jaNBEvhIDqntnpmi6tHHg=
Subject key identifier:   14:02:43:D3:F5:9B:85:0B:49:90:20:23:72:5F:17:C9:3A:1E:BD:51
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F432858475910CC37F85AB41F30F06D00
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d5cd4bd8-7b59-38d7-9eb1-0513e756b884.roa
Signing time:             Fri 27 Sep 2024 01:00:31 +0000
ROA not before:           Fri 27 Sep 2024 01:00:31 +0000
ROA not after:            Thu 26 Dec 2024 02:00:31 +0000
asID:                     1225
IP address blocks:        2001:418:1456:b16::/64 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:59:10:cc:37:f8:5a:b4:1f:30:f0:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Sep 27 01:00:31 2024 GMT
            Not After : Dec 26 02:00:31 2024 GMT
        Subject: CN=eecd4867-b8f8-4577-9d8a-9ed4e037838c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:09:63:4b:a1:73:db:c2:d3:43:a8:09:97:51:
                    d2:d0:f2:8f:e2:05:e0:fa:d5:32:ef:57:f0:22:9c:
                    92:95:2d:e7:a9:c0:72:b4:33:91:b7:58:af:4e:98:
                    c2:8b:88:5d:48:eb:b7:32:48:33:24:df:73:ec:40:
                    a7:50:91:55:77:b0:59:ad:79:a6:39:9c:1f:2a:f0:
                    cf:51:cd:88:50:34:9e:58:56:c7:ad:2f:73:b4:f1:
                    78:a6:2f:11:7d:1d:c5:ee:2c:19:9f:1a:7e:c4:92:
                    f6:76:06:cb:ac:2a:19:41:33:8d:11:5a:d5:40:68:
                    e8:ff:e4:9a:f3:a8:83:a4:27:7b:97:d4:49:af:4e:
                    89:00:80:68:11:93:78:ee:d6:42:95:1c:bd:46:86:
                    c1:80:d3:96:1f:b4:04:be:31:b9:12:b1:8a:ef:27:
                    e1:98:76:59:a2:ed:3a:9f:c3:8b:bc:33:51:56:42:
                    09:6c:48:ee:ee:8c:3b:e2:3e:6f:af:1d:d8:03:40:
                    55:7c:ba:eb:91:c6:6d:93:10:29:11:3c:a9:9e:05:
                    8b:e6:76:20:b3:83:b3:b7:bb:f7:0d:f6:e5:09:71:
                    72:0d:35:e9:fb:5f:77:38:38:70:73:a0:69:ed:6a:
                    ff:ea:24:ad:44:36:4d:7c:07:c3:9f:dd:59:0b:7e:
                    22:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:02:43:D3:F5:9B:85:0B:49:90:20:23:72:5F:17:C9:3A:1E:BD:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d5cd4bd8-7b59-38d7-9eb1-0513e756b884.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:418:1456:b16::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:32:52:2a:e4:22:70:c5:e3:00:87:72:64:6e:a8:4c:98:76:
         f7:d2:d9:8b:b4:64:96:f8:a0:41:e6:77:fc:72:87:fc:61:6e:
         95:65:5c:5d:2b:b9:df:ca:93:5b:d4:e3:e4:e9:af:f8:83:d8:
         44:bb:81:38:da:cd:f5:15:e8:7e:1a:d2:81:ca:f9:51:3c:ee:
         2e:cd:b5:39:02:ad:0d:07:01:20:28:ab:e8:65:49:55:f9:b2:
         3f:6f:d9:b1:b0:f9:db:99:9d:55:10:23:1a:82:05:19:00:74:
         47:bf:4b:a4:4b:82:21:9d:a2:bb:14:49:c3:f6:21:bc:95:85:
         30:6c:0f:4d:d3:49:b3:6a:8e:7b:d3:3b:56:b6:7a:b9:06:cd:
         b4:64:14:24:d0:54:b5:cf:ed:76:ef:c0:02:be:3c:4b:4b:8b:
         b8:55:1f:74:1b:53:3e:22:78:9e:67:2e:f3:29:44:69:bc:b9:
         13:59:d7:97:6e:29:b5:c4:69:e7:44:e1:2b:5d:12:69:3b:b9:
         ea:62:bc:17:4d:1d:63:6e:e6:c4:e5:aa:2d:c1:28:22:b8:46:
         59:de:3c:78:e1:f1:1b:c7:b2:71:a6:35:4c:6f:42:d9:37:67:
         99:fb:8b:a6:a2:72:52:1c:67:a2:74:37:e5:f9:44:61:d9:10:
         fa:a8:17:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:29:08 2024 by rpki-client on console-fra.rpki-client.org