Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/69bed0c7-0596-3a07-b7b9-ce72b1a95cef.roa
File:                     69bed0c7-0596-3a07-b7b9-ce72b1a95cef.roa (raw, json)
Hash identifier:          QnRgiie13gpP1Ezj09b0i/1hyBM5sy7HDsg23Wr89rY=
Subject key identifier:   28:BF:FA:E3:D2:F5:92:9B:87:B9:63:EC:E2:6D:C1:50:E2:C4:E2:4F
Certificate issuer:       /CN=d12ff9c7-ced8-4cc2-b3d5-adf1859a808c
Certificate serial:       010D0C9F432858474DE5FA6231A2137027302B50
Authority key identifier: 5A:CD:BF:B9:70:80:A4:AA:F3:8E:B8:58:29:11:41:07:9C:EE:FD:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/69bed0c7-0596-3a07-b7b9-ce72b1a95cef.roa
Signing time:             Mon 23 Sep 2024 01:00:31 +0000
ROA not before:           Mon 23 Sep 2024 01:00:31 +0000
ROA not after:            Sun 22 Dec 2024 02:00:31 +0000
asID:                     16509
IP address blocks:        2620:121:5070::/45 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4d:e5:fa:62:31:a2:13:70:27:30:2b:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d12ff9c7-ced8-4cc2-b3d5-adf1859a808c
        Validity
            Not Before: Sep 23 01:00:31 2024 GMT
            Not After : Dec 22 02:00:31 2024 GMT
        Subject: CN=3d3317d8-a81f-4c16-b7dc-357cb5734b17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:75:dc:35:b0:14:86:01:e9:62:4d:c1:a1:3f:
                    75:b5:e5:1c:ff:86:81:1e:75:34:4d:e6:2d:b4:3a:
                    89:bd:c0:3f:dd:b1:a2:b0:c3:c9:6d:5e:c4:1e:6f:
                    8c:4e:42:fd:5f:fb:0b:3a:ce:a2:9b:2e:a2:5e:b0:
                    8d:a0:7d:9f:4a:b1:cf:49:ee:d1:17:63:21:f8:c0:
                    db:2b:c2:3f:59:16:70:2e:cb:af:2a:4f:e6:4d:fd:
                    84:35:3f:b7:e1:d2:66:ab:97:71:80:2c:fa:a4:11:
                    17:09:b6:9b:2f:86:25:40:2c:3b:29:8f:08:b9:c3:
                    f2:69:db:93:cd:7c:64:0f:f6:92:73:84:3c:d5:84:
                    25:3c:57:9e:c9:f0:e0:8b:e9:fa:0f:19:d7:12:49:
                    c1:ad:a5:06:e5:f4:e8:71:dd:2a:5f:60:a8:02:5b:
                    eb:72:d0:31:4a:eb:5a:98:11:aa:62:08:b4:4a:ce:
                    c1:1b:8b:d1:b0:0b:f6:9c:3a:35:ec:41:d6:df:d6:
                    67:cc:8b:21:bf:f5:9f:3a:6b:d4:00:ca:c1:59:bc:
                    87:08:f8:26:9b:fb:54:4d:b2:4f:51:e7:79:7a:92:
                    6e:6b:8b:ff:12:a1:15:7b:b5:5c:ef:9f:83:ab:36:
                    bd:22:be:63:46:8b:45:bc:27:5f:00:30:d0:df:48:
                    13:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:BF:FA:E3:D2:F5:92:9B:87:B9:63:EC:E2:6D:C1:50:E2:C4:E2:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/69bed0c7-0596-3a07-b7b9-ce72b1a95cef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.crl

            X509v3 Authority Key Identifier:
                keyid:5A:CD:BF:B9:70:80:A4:AA:F3:8E:B8:58:29:11:41:07:9C:EE:FD:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:121:5070::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:3f:1c:18:0f:61:13:0a:4f:64:2f:ec:ba:6d:eb:61:57:d6:
         b2:bf:45:82:15:49:c2:6b:76:9c:02:0d:e9:d1:47:c7:63:c6:
         fd:40:41:5e:d6:14:5d:e8:64:23:05:d5:cf:38:6e:55:6a:f1:
         4d:2b:19:bb:c4:50:a8:d0:db:46:9a:9c:c6:80:22:02:df:3b:
         dc:6e:11:40:b7:d7:e2:4f:cd:cf:dc:e9:1c:7b:73:47:59:30:
         7c:96:f4:af:4c:c2:2b:72:90:6f:75:de:83:df:65:24:6c:73:
         6c:79:fc:00:46:de:d5:c7:a6:18:84:03:e9:52:30:9d:ec:f7:
         55:de:f9:6b:ac:d5:55:fe:bb:cb:35:bf:bc:ce:54:5d:4d:c9:
         0e:4a:99:cf:f1:4b:ec:94:dd:87:1a:2e:a5:26:92:3a:34:5c:
         65:cc:d8:20:0a:d8:e8:80:6b:50:57:e7:1e:94:0d:04:7f:64:
         e8:d1:ef:d1:79:2d:01:eb:c6:4b:31:c4:4d:2c:38:7d:2d:4b:
         33:b6:30:61:bd:80:39:96:bd:4e:c8:7f:fb:be:38:65:c0:93:
         5a:cf:8a:53:2a:6b:6e:83:fd:09:c9:81:af:d7:72:cb:d6:2c:
         67:f3:98:8f:b0:bb:e2:7d:d7:dd:1d:98:5e:d8:06:60:57:1f:
         86:3f:77:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:36:44 2024 by rpki-client on console-fra.rpki-client.org