Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5bd8a989-3eef-391f-8f8f-4689d322f774.roa
File:                     5bd8a989-3eef-391f-8f8f-4689d322f774.roa (raw, json)
Hash identifier:          9MpYdy8lbqR9Ws59wZIky+x7oovzhro+ucBlJ5PkgwQ=
Subject key identifier:   FE:48:91:F5:89:E7:B9:60:7B:FC:DE:BA:40:BF:C2:1A:59:68:46:71
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285847EFEF8E150BBDAE3995BA8480
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5bd8a989-3eef-391f-8f8f-4689d322f774.roa
Signing time:             Wed 20 Nov 2024 02:00:39 +0000
ROA not before:           Wed 20 Nov 2024 02:00:39 +0000
ROA not after:            Tue 18 Feb 2025 02:00:39 +0000
asID:                     0
IP address blocks:        2606:4700:7000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ef:ef:8e:15:0b:bd:ae:39:95:ba:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 20 02:00:39 2024 GMT
            Not After : Feb 18 02:00:39 2025 GMT
        Subject: CN=68b3d6da-01c8-4937-a42e-758776f7ad55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e6:02:af:14:ed:d7:27:04:39:a3:36:59:72:
                    ca:83:28:13:53:59:94:4e:cc:19:13:2a:d7:6b:18:
                    06:dc:e1:af:11:37:c0:04:eb:c6:2c:bc:ad:da:4c:
                    2c:ac:17:da:c4:50:f8:40:6e:71:71:ba:92:d7:7f:
                    1b:d4:b7:a7:bd:3c:29:74:5f:5c:23:ff:2e:5e:09:
                    9f:37:c0:b8:ec:2b:52:da:a4:c0:98:a2:03:09:64:
                    16:58:8b:a7:ce:9f:3b:02:3a:45:ee:6e:ac:92:46:
                    cc:4f:ba:25:73:7b:74:f8:56:d8:85:e9:23:dd:99:
                    e9:5a:1c:24:22:67:4d:1a:92:3a:a2:8e:f3:66:b9:
                    7d:92:66:b3:53:d9:13:85:ae:d2:81:a4:62:0a:7d:
                    fd:df:ba:b0:3b:26:da:df:b3:8e:8e:7e:c0:4b:13:
                    12:23:c4:4f:31:c5:ab:e3:ea:15:84:df:3b:70:78:
                    44:ba:6e:0a:e3:ca:bf:ba:46:52:8c:cb:8a:b5:51:
                    bc:20:45:93:ab:d9:a0:3e:9e:eb:de:a0:76:8a:e0:
                    bc:4e:1c:3a:9b:48:4c:cd:82:e2:38:9d:4d:fb:91:
                    58:9c:90:81:ec:b3:8e:de:59:91:39:57:b9:44:1e:
                    91:cb:52:bf:d0:e6:ae:52:2e:a2:d5:91:bf:54:b3:
                    2a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:48:91:F5:89:E7:B9:60:7B:FC:DE:BA:40:BF:C2:1A:59:68:46:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5bd8a989-3eef-391f-8f8f-4689d322f774.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4700:7000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:2f:75:50:5d:e9:b7:08:6c:56:e6:a1:af:2b:0e:49:87:32:
         86:ee:08:31:88:70:c0:6d:0f:2a:ee:63:2d:cb:42:be:e1:bb:
         d5:31:69:72:5e:98:3d:cb:8c:00:4a:60:b0:32:da:a8:e1:ec:
         62:b1:68:0e:9b:ca:07:35:71:7e:db:a1:22:40:ad:09:9a:ae:
         5c:20:06:dc:b6:6d:e2:35:d1:51:36:e4:be:ee:09:19:3f:36:
         a7:a8:41:76:80:38:29:dc:02:89:05:cb:c8:d4:80:99:0c:8b:
         9a:0f:e9:61:75:a0:04:ff:fe:ce:0b:34:ff:da:c6:da:eb:9b:
         4e:ef:0f:ff:4d:bb:28:09:f4:43:d3:a1:db:56:4c:6b:40:3f:
         2a:24:53:e6:70:b4:38:14:76:9f:35:3d:31:8b:8f:fe:3c:dc:
         6c:c9:5d:74:24:ee:61:aa:f4:cf:bf:1e:84:5f:aa:a2:24:83:
         3c:ed:0f:a5:ce:39:68:c8:94:e4:58:16:9d:a7:e4:17:c0:ed:
         2a:13:da:91:d2:c5:c0:ae:a6:cb:74:55:08:ea:d8:6e:88:23:
         b8:4d:29:cb:2a:3b:bd:4b:c9:79:54:6a:1b:c9:d5:e0:d8:21:
         ff:63:c5:fb:8a:1a:30:a6:6c:93:e1:5a:be:90:bb:b6:72:b9:
         ef:81:ce:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:56:56 2024 by rpki-client on console-ams.rpki-client.org