Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/dde03462-bea1-3694-8eff-b21c9b05836f.roa
File:                     dde03462-bea1-3694-8eff-b21c9b05836f.roa (raw, json)
Hash identifier:          BLZojORDxse4PRN9i9SONPxsQ+whJkXwoL2m1EqYvIE=
Subject key identifier:   65:26:DC:25:DA:0A:65:35:9A:C9:CC:02:46:CE:43:D9:E1:AA:66:2D
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F432858475910C49382F759CB46FE7FC0
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/dde03462-bea1-3694-8eff-b21c9b05836f.roa
Signing time:             Fri 27 Sep 2024 01:00:31 +0000
ROA not before:           Fri 27 Sep 2024 01:00:31 +0000
ROA not after:            Thu 26 Dec 2024 02:00:31 +0000
asID:                     1225
IP address blocks:        2001:418:3ff:4::/64 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:59:10:c4:93:82:f7:59:cb:46:fe:7f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Sep 27 01:00:31 2024 GMT
            Not After : Dec 26 02:00:31 2024 GMT
        Subject: CN=966dbf39-806f-43b7-9449-97e400e9faab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f8:27:28:89:7e:d5:c0:10:a8:fe:aa:45:2f:
                    47:25:1e:cb:32:b6:53:40:6c:59:44:75:08:73:5a:
                    f5:e5:c4:3c:64:22:06:79:bd:6d:01:fb:03:f9:60:
                    1e:ef:f0:56:2e:bc:de:c6:55:7a:b2:b2:3a:5e:81:
                    92:8c:70:df:f2:83:12:00:04:3b:ca:6a:a2:2d:3f:
                    53:01:c3:95:e0:80:46:fd:ab:5b:66:f7:37:61:19:
                    de:89:92:cf:28:59:e3:18:8b:1d:7d:d2:0d:79:fe:
                    5d:38:89:89:91:39:b9:cc:e2:33:a4:bc:28:d5:10:
                    0f:da:48:f7:a2:f1:4c:b3:20:29:43:83:0e:d5:d4:
                    82:1f:64:82:60:19:77:50:c5:31:7d:4d:85:27:c6:
                    ac:7f:97:6c:1e:ec:c5:77:fa:e6:fe:b1:20:92:98:
                    81:cf:db:c3:60:37:b3:a5:1c:0a:b6:ec:d3:8f:ef:
                    21:ce:73:2e:ae:f6:59:45:ee:72:eb:f6:f8:58:ba:
                    54:01:8c:ec:80:a3:1a:25:26:64:de:d6:98:c8:7b:
                    7c:3d:6f:96:a8:c8:75:21:00:b0:23:b2:c8:e4:4c:
                    d8:c8:4f:68:90:23:61:93:61:b6:33:a0:aa:f6:a9:
                    63:48:99:78:7d:c2:ef:f7:62:c5:07:03:c5:7d:52:
                    00:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:26:DC:25:DA:0A:65:35:9A:C9:CC:02:46:CE:43:D9:E1:AA:66:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/dde03462-bea1-3694-8eff-b21c9b05836f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:418:3ff:4::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:cf:24:0d:48:ff:5f:12:64:fe:f3:2f:ef:94:fd:8f:49:6f:
         58:1c:cb:f9:5b:23:79:ea:cc:37:32:1a:5c:7a:75:3a:45:f1:
         b4:2a:0c:3d:b1:61:db:c1:38:49:bb:37:3e:e0:a8:d7:b4:06:
         c6:7b:2e:61:7c:ac:d3:5e:09:f9:82:b5:28:57:ec:56:bf:fa:
         0a:f4:28:07:f2:1a:fe:8f:70:d8:6e:ce:98:d5:b1:2f:fe:d6:
         9e:3e:50:a9:11:c8:4b:7c:94:73:bc:2a:78:77:d5:7c:d9:44:
         06:bf:df:90:36:ca:89:df:43:8c:8d:c8:27:3e:41:91:f8:07:
         3e:51:d4:a3:92:b2:24:02:45:db:48:7b:f2:6e:9c:f6:2e:7d:
         f0:a1:5c:92:e0:a8:77:bd:c0:d1:5f:42:0d:21:9e:c1:18:10:
         a2:e1:23:d7:6a:15:20:09:6f:ba:8d:ba:cb:09:26:14:92:ad:
         45:56:69:72:5a:32:6d:4b:04:fd:62:35:13:ad:83:eb:4b:69:
         8b:12:15:5d:c0:d7:23:ad:77:3f:bd:af:cc:f8:91:5f:b4:b7:
         31:35:20:21:41:5a:a6:83:3d:02:e3:0f:84:97:74:a2:f7:9d:
         07:8a:b7:f9:17:c5:60:89:60:74:d9:0d:60:eb:a7:9f:f5:9f:
         bb:28:79:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:15:19 2024 by rpki-client on console-ams.rpki-client.org