Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f6285d45-9269-3c7f-af51-21be86401f66.roa
File:                     f6285d45-9269-3c7f-af51-21be86401f66.roa (raw, json)
Hash identifier:          TzxFPsMgQ2Izpl3S68ko7648dugK96qhAucwKdEV/yk=
Subject key identifier:   F7:EB:FD:A1:A8:95:AA:77:CA:07:E9:B1:F9:C2:42:31:73:12:22:01
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F432858476C9DBD6226982C658FA924C0
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f6285d45-9269-3c7f-af51-21be86401f66.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     2914
IP address blocks:        2001:418:3ff:8::/64 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9d:bd:62:26:98:2c:65:8f:a9:24:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=610b53b0-454e-40ba-877c-7b665187b95e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:62:23:e1:84:d7:ff:f5:8d:0f:38:75:97:7a:
                    df:89:35:fd:15:df:31:9e:68:34:31:5e:94:46:16:
                    f2:ea:30:2f:bf:50:a1:23:05:17:69:69:dd:30:6a:
                    c8:df:6e:c4:91:3b:6e:d2:7e:06:08:9b:0b:ac:21:
                    5a:bc:b2:5a:11:97:3a:65:34:e5:9b:8a:54:46:fc:
                    8e:41:f5:f0:b1:ac:f0:64:70:9d:90:1d:ee:ab:88:
                    4a:48:3c:8f:fc:3a:c1:79:b4:43:7f:10:c0:96:cb:
                    a2:70:fd:d0:5f:2b:d8:cb:4e:70:59:81:d7:f1:ce:
                    ee:af:3b:a0:65:e9:dc:0d:e9:b4:71:e0:b5:08:57:
                    50:4d:58:c3:51:e7:50:6b:64:71:3c:c8:7e:ac:94:
                    1a:6a:70:dd:83:3f:91:18:b1:a8:af:b3:cb:7a:1e:
                    74:ba:c5:13:ac:41:e1:b3:ed:79:be:55:32:33:12:
                    ed:c9:3b:b9:7a:5a:50:35:6b:31:f0:a9:51:ea:19:
                    47:ac:a3:a5:39:f5:fb:ba:1a:a5:41:85:cc:d3:ce:
                    d1:5f:ae:63:cd:2d:d2:6c:3d:d8:36:f7:ba:3d:7c:
                    df:33:8d:e1:d2:3d:dc:4b:0a:3d:20:62:47:ae:e0:
                    de:25:ca:f1:06:eb:f5:0c:fa:d2:92:0f:d4:fc:34:
                    ac:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:EB:FD:A1:A8:95:AA:77:CA:07:E9:B1:F9:C2:42:31:73:12:22:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f6285d45-9269-3c7f-af51-21be86401f66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:418:3ff:8::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:bb:98:79:7a:18:36:80:91:40:e1:34:3c:8c:fe:57:0f:f2:
         dc:98:58:98:12:31:7c:21:9f:d6:4a:c6:c6:12:62:92:75:db:
         6a:ee:5a:cf:ba:4a:a5:b6:da:5a:5a:d8:fe:12:ca:1b:a7:c4:
         d5:0f:1c:08:ae:36:7d:be:29:29:b5:a6:b3:6a:31:bf:49:79:
         e1:a4:84:cf:92:c0:64:9b:8e:cc:a5:a1:98:c9:f5:31:b0:ae:
         e5:27:4e:40:98:7a:1b:66:2b:7c:b2:0c:5b:a6:11:95:bd:bb:
         b3:6e:1f:90:a3:99:10:30:f4:a9:99:5f:ed:ec:22:39:f8:83:
         c4:5b:6d:7a:4f:9d:5b:f5:4c:59:5d:4d:e0:15:03:11:6b:50:
         51:84:04:40:ff:5c:3a:1b:45:79:b4:56:80:85:ca:9f:d8:99:
         d5:91:56:0b:84:76:3c:99:67:b4:c1:7d:21:c1:bc:c0:6e:68:
         3b:91:a0:1c:9c:9c:ef:71:4a:ab:14:9e:b8:e7:de:e6:ef:df:
         7f:a3:7c:46:3f:f0:4a:bf:2f:6e:b3:3b:9d:4d:8e:69:42:75:
         c0:9b:fe:f8:af:7b:66:34:d4:6c:63:45:f2:b4:c0:fd:b9:75:
         72:a1:4a:db:19:66:a6:bb:06:8c:cc:8f:d4:ba:d3:6d:a9:7f:
         d5:54:2f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:15:20 2024 by rpki-client on console-ams.rpki-client.org