Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998/c006e98f-3ece-3757-bd45-4b1d0796733d.roa
File:                     c006e98f-3ece-3757-bd45-4b1d0796733d.roa (raw, json)
Hash identifier:          8C49dlq7BgYHa8b1G4/RuiQABqWW6yFGClbeSwRFamk=
Subject key identifier:   E0:9B:B9:92:D4:EE:8F:41:B9:07:D9:8A:F6:04:92:B6:E1:E1:B6:39
Certificate issuer:       /CN=c0ae1cff-309c-40d1-9760-3a89a481e998
Certificate serial:       010D0C9F432858472C65CC950935AD9444728BE0
Authority key identifier: 3D:5C:C9:D2:DF:E0:F1:12:4E:09:59:BF:BE:75:A7:C9:39:BB:13:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998/c006e98f-3ece-3757-bd45-4b1d0796733d.roa
Signing time:             Wed 11 Sep 2024 01:00:31 +0000
ROA not before:           Wed 11 Sep 2024 01:00:31 +0000
ROA not after:            Tue 10 Dec 2024 02:00:31 +0000
asID:                     14907
IP address blocks:        2620:0:860::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998/c0ae1cff-309c-40d1-9760-3a89a481e998.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998/c0ae1cff-309c-40d1-9760-3a89a481e998.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2c:65:cc:95:09:35:ad:94:44:72:8b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0ae1cff-309c-40d1-9760-3a89a481e998
        Validity
            Not Before: Sep 11 01:00:31 2024 GMT
            Not After : Dec 10 02:00:31 2024 GMT
        Subject: CN=be356762-1fb9-4c52-8a01-9a9087bda21b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a1:39:af:03:9b:b5:54:41:de:c3:cc:07:15:
                    e6:f0:50:a5:41:5c:d3:48:d9:a9:9a:ee:8c:d4:21:
                    87:b7:be:af:7a:dc:0e:47:35:66:04:4c:a8:3e:f1:
                    62:99:30:d0:cd:7b:15:f4:cf:fb:46:42:9b:fc:48:
                    e0:84:98:09:e7:c9:ab:51:b7:ac:f6:94:d8:1e:3f:
                    a6:4c:74:2d:79:bf:30:58:1a:d8:82:42:84:4d:9a:
                    15:15:34:63:fb:c2:55:d7:56:9b:ce:93:4b:9e:2b:
                    4f:92:5f:95:21:1e:99:50:1c:b2:16:9c:12:41:ba:
                    27:bf:62:55:55:e4:5d:cc:cf:04:91:88:52:47:c3:
                    9b:3a:9f:25:5a:1e:a8:b2:9a:45:eb:a9:b1:3e:2e:
                    37:ba:a6:bb:a1:a1:a7:ff:5b:62:00:5d:80:f2:04:
                    61:84:21:86:57:29:47:ee:de:ce:4a:7d:96:d8:4b:
                    b3:0c:d1:5b:1b:d2:00:1e:a9:e4:9d:23:b9:24:8a:
                    ec:a6:15:78:9a:36:fe:2e:6f:e1:f1:59:a2:2a:96:
                    cf:25:59:6e:54:48:53:18:96:69:24:cb:9b:17:41:
                    05:8c:82:70:68:03:ab:ed:06:42:7d:f4:b0:a9:15:
                    c1:e1:42:e4:ba:b8:bf:59:bc:f9:39:4b:e3:8f:03:
                    5b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:9B:B9:92:D4:EE:8F:41:B9:07:D9:8A:F6:04:92:B6:E1:E1:B6:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998/c006e98f-3ece-3757-bd45-4b1d0796733d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998/c0ae1cff-309c-40d1-9760-3a89a481e998.crl

            X509v3 Authority Key Identifier:
                keyid:3D:5C:C9:D2:DF:E0:F1:12:4E:09:59:BF:BE:75:A7:C9:39:BB:13:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:860::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:6b:3c:a7:34:94:5a:a6:2a:05:44:5d:57:5b:d9:1e:58:45:
         01:47:a4:34:b8:5c:30:33:99:74:a2:f1:9d:a7:00:46:a1:42:
         bd:71:c7:39:b9:40:ab:45:01:0e:93:bc:32:73:95:46:16:b2:
         28:7d:0f:79:d3:e1:4d:42:da:17:42:a7:bf:30:6f:b9:0d:a4:
         65:71:af:94:03:39:e3:09:cd:c0:ac:7a:fc:c3:71:3c:31:cd:
         d7:73:66:9d:00:39:9e:cf:7a:9a:02:36:4f:cd:27:14:9c:49:
         aa:91:c0:c4:2a:5e:c6:22:8b:93:aa:20:54:86:0f:30:73:bd:
         ae:46:d7:5c:43:32:e0:90:ea:10:d5:75:19:cd:2d:6d:ad:f2:
         07:61:09:73:d7:92:43:df:2b:4d:c7:66:63:9e:3d:90:13:b9:
         51:28:96:41:2e:af:eb:97:fd:68:3b:0f:d0:1f:ff:bf:29:a6:
         6e:25:58:ab:c2:5b:e9:6b:b3:7e:e9:d1:9c:20:3b:f7:fc:9e:
         59:da:27:35:cc:e4:35:50:e9:15:e2:95:f7:8b:47:67:a4:15:
         4e:2d:f6:3f:07:96:57:e2:b5:7d:ac:b5:f2:bf:6a:c6:29:16:
         57:ff:7b:a7:e8:f0:de:1d:71:0a:95:d6:12:20:6c:9e:b0:fc:
         e9:f2:93:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:57:11 2024 by rpki-client on console-ams.rpki-client.org