Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f09e69da-b086-3a26-b789-5a8b5ddee439.roa
File:                     f09e69da-b086-3a26-b789-5a8b5ddee439.roa (raw, json)
Hash identifier:          rXw0KBoBhuF9503FCsdFBe0iVORHjpLxZk6O9p092yU=
Subject key identifier:   C3:E1:AB:3B:26:5B:70:38:D9:87:5E:1B:0C:CA:00:84:B6:4E:AF:7D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858474F4B7E657B6D1B97D22EDB80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f09e69da-b086-3a26-b789-5a8b5ddee439.roa
Signing time:             Mon 23 Sep 2024 13:00:40 +0000
ROA not before:           Mon 23 Sep 2024 13:00:40 +0000
ROA not after:            Sun 22 Dec 2024 14:00:40 +0000
asID:                     7342
IP address blocks:        2001:502:be98::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4f:4b:7e:65:7b:6d:1b:97:d2:2e:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 23 13:00:40 2024 GMT
            Not After : Dec 22 14:00:40 2024 GMT
        Subject: CN=78f0a805-6fcd-4879-baf8-fadd513e9518
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:d5:7b:f1:48:b9:cc:24:91:be:bc:6e:70:62:
                    23:cf:3d:cd:9b:95:00:66:18:85:2c:5f:0c:a7:6d:
                    98:6a:ee:7c:a7:ec:01:8a:3b:f7:0c:70:38:a4:7c:
                    81:10:a3:60:0f:03:5e:1c:f7:35:d2:cb:08:bd:af:
                    b0:37:52:48:2b:36:01:b4:e0:51:aa:67:74:c5:d6:
                    4a:6c:f0:e7:a0:a9:fb:4e:d2:11:60:88:b9:d7:43:
                    0a:54:4e:ac:ac:23:a7:ca:10:01:57:de:c3:77:19:
                    e0:b4:7e:ba:ea:49:47:3d:bd:b9:98:e5:10:2e:d7:
                    1b:9a:a8:78:9e:f3:38:47:dc:6c:16:06:6f:d2:dd:
                    e6:d7:93:12:c1:dc:20:df:bf:e3:d9:07:59:2e:9a:
                    7e:47:17:7f:89:3d:9d:02:7b:1d:90:11:65:21:7c:
                    db:cb:da:3c:cb:e4:f4:ef:d7:18:8c:94:13:ea:0f:
                    07:2e:00:af:f1:7b:f8:f2:28:1d:63:a9:69:63:a6:
                    61:c0:1c:df:c2:0a:4b:f4:9a:32:08:01:39:00:08:
                    ad:4e:49:24:af:42:3d:bf:0b:2a:18:f2:58:67:9c:
                    45:67:68:c0:a3:6b:83:82:9a:b1:5d:3d:1c:76:7d:
                    41:b6:35:8d:da:89:fe:9d:1f:60:6d:f1:7c:d7:70:
                    1e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:E1:AB:3B:26:5B:70:38:D9:87:5E:1B:0C:CA:00:84:B6:4E:AF:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f09e69da-b086-3a26-b789-5a8b5ddee439.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:be98::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:be:1c:44:bb:04:f1:de:c5:ca:7f:ca:a2:e9:ff:39:36:a9:
         c6:2e:e7:bd:07:5c:77:8e:a0:73:e0:5f:7d:ea:00:22:72:6e:
         6d:12:9c:3a:68:9c:42:21:0e:83:ee:9d:6f:b9:cf:68:f5:5d:
         76:4f:87:ed:dd:0c:1a:05:ff:7f:2b:34:27:53:16:64:fc:2c:
         4b:90:7b:d1:90:a4:14:c8:d2:37:54:d3:24:c8:57:ec:71:b3:
         71:f5:ea:01:70:40:eb:cb:44:80:43:88:1b:31:29:0e:0d:c7:
         5f:1e:18:e5:5b:b9:d2:16:2e:04:6b:90:a6:ea:6d:7a:11:ac:
         7e:23:73:cc:cf:5c:e2:c4:4a:65:3e:87:1d:f9:96:9d:c8:d7:
         c1:34:6a:69:9b:b3:9e:f4:0f:da:c6:64:75:c1:f1:33:c1:fe:
         71:2e:5a:e3:fc:15:c7:9e:04:3c:de:cc:f6:82:d5:cf:dc:3f:
         59:db:00:40:a5:a2:99:28:7a:3f:7b:73:fc:6b:f7:1b:e9:aa:
         5c:69:0b:52:bd:38:47:62:fb:bf:a8:bc:cd:7a:40:60:1d:68:
         f2:6f:eb:47:a5:af:d1:89:2b:77:37:bd:ba:c0:ef:18:bc:6e:
         a4:83:95:f0:ae:3a:03:4d:6d:e5:cc:ba:34:18:7c:da:9f:fe:
         52:ea:3a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:52 2024 by rpki-client on console-fra.rpki-client.org