Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ebe9c26d-adfa-43c3-aafd-d6c286065b77/912a4fa3-4f2a-367c-af73-91419fdd464c.roa
File:                     912a4fa3-4f2a-367c-af73-91419fdd464c.roa (raw, json)
Hash identifier:          3pSufWRM/ZlrNrZIP+z5BxlTUdmabBWob4NwGNDSRt4=
Subject key identifier:   5C:30:DA:58:31:08:99:55:9B:6A:EF:B1:0D:F3:E8:B9:97:89:E6:B8
Certificate issuer:       /CN=ebe9c26d-adfa-43c3-aafd-d6c286065b77
Certificate serial:       010D0C9F43285847299B254D836F5779E5C26940
Authority key identifier: 88:5F:E1:BB:17:77:66:78:98:CC:10:12:0D:0A:07:8A:C8:10:0C:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ebe9c26d-adfa-43c3-aafd-d6c286065b77.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ebe9c26d-adfa-43c3-aafd-d6c286065b77/912a4fa3-4f2a-367c-af73-91419fdd464c.roa
Signing time:             Tue 10 Sep 2024 01:00:30 +0000
ROA not before:           Tue 10 Sep 2024 01:00:30 +0000
ROA not after:            Mon 09 Dec 2024 02:00:30 +0000
asID:                     41690
IP address blocks:        2620:132:e000::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ebe9c26d-adfa-43c3-aafd-d6c286065b77/ebe9c26d-adfa-43c3-aafd-d6c286065b77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ebe9c26d-adfa-43c3-aafd-d6c286065b77/ebe9c26d-adfa-43c3-aafd-d6c286065b77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ebe9c26d-adfa-43c3-aafd-d6c286065b77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:29:9b:25:4d:83:6f:57:79:e5:c2:69:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebe9c26d-adfa-43c3-aafd-d6c286065b77
        Validity
            Not Before: Sep 10 01:00:30 2024 GMT
            Not After : Dec  9 02:00:30 2024 GMT
        Subject: CN=50d97798-5797-421a-a1e9-408b534552f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:16:9a:01:0a:e0:bf:73:f5:97:2b:58:df:d7:
                    83:0a:a8:da:c0:8e:4e:4f:ec:2c:65:b4:4a:e3:f4:
                    6c:06:0c:70:dd:95:5d:95:9f:bc:75:78:27:99:f0:
                    e1:37:91:13:3f:0d:7f:82:9e:79:c0:92:7b:dd:36:
                    5f:87:6b:7d:55:6a:64:f1:64:56:6c:55:eb:4f:c8:
                    94:8e:30:cc:e8:56:a7:81:44:48:e7:c0:aa:48:61:
                    05:31:fe:45:50:ff:87:f4:71:1c:b2:5b:46:8e:4a:
                    d3:73:29:f1:80:2e:c4:ab:e9:54:43:71:cb:54:98:
                    90:f6:e0:29:51:ad:3d:cd:16:30:a5:ba:fa:6f:57:
                    27:9f:4a:25:1e:e0:09:b6:08:fa:04:08:50:f9:a9:
                    24:e2:42:4b:62:c2:d5:c1:10:52:12:db:46:18:af:
                    a2:8b:e2:06:a9:64:d5:bd:e3:a7:21:fe:4a:57:f1:
                    bf:34:70:d6:5e:68:50:bb:51:b5:fc:fb:5a:95:89:
                    77:94:17:10:da:60:b3:e9:87:98:3d:87:a5:ce:60:
                    c0:8d:d2:db:92:32:90:09:10:f7:a5:23:25:ce:6a:
                    d5:88:a3:57:50:1d:75:f6:93:06:54:1a:79:23:37:
                    a6:fa:69:d5:06:ea:bb:b8:37:8c:9b:47:87:cc:66:
                    7c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:30:DA:58:31:08:99:55:9B:6A:EF:B1:0D:F3:E8:B9:97:89:E6:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ebe9c26d-adfa-43c3-aafd-d6c286065b77/912a4fa3-4f2a-367c-af73-91419fdd464c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ebe9c26d-adfa-43c3-aafd-d6c286065b77/ebe9c26d-adfa-43c3-aafd-d6c286065b77.crl

            X509v3 Authority Key Identifier:
                keyid:88:5F:E1:BB:17:77:66:78:98:CC:10:12:0D:0A:07:8A:C8:10:0C:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ebe9c26d-adfa-43c3-aafd-d6c286065b77.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:132:e000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:a3:19:79:56:4c:7f:5e:9d:b6:9c:ef:40:4c:2f:29:68:fe:
         9c:ee:90:d6:c7:1b:dc:46:8a:08:30:9a:8d:b7:ea:62:91:64:
         c9:20:34:e6:36:14:e6:63:d4:0a:17:ba:ef:6d:e8:d5:1e:3c:
         67:9b:f6:34:e7:69:d4:f3:fb:46:28:91:84:72:62:e2:a5:fa:
         14:a9:7b:ed:98:b6:b5:ed:fe:eb:92:b5:85:1f:74:ce:2c:82:
         fa:a1:e0:41:46:47:dc:e9:de:b7:de:74:e7:95:ff:dc:24:96:
         44:d3:35:44:62:0e:e4:e4:15:fa:81:e0:57:18:94:ef:1d:89:
         20:55:57:68:a0:6f:11:a0:60:ec:95:3e:98:64:0b:e9:0c:3d:
         e0:03:ae:71:c7:31:cd:7b:da:a3:bc:98:91:37:6a:49:a5:e1:
         b4:62:3a:31:5e:88:ca:b9:cb:2f:74:b5:02:93:a1:f5:33:ce:
         01:7e:72:44:4c:a6:82:57:57:ef:02:9e:94:9d:0d:1c:e9:37:
         81:d3:cf:c7:b2:8c:c0:4d:2a:79:21:50:67:5a:cf:f1:19:8f:
         97:50:60:1a:f2:2c:50:0b:6e:46:b4:b1:cb:73:9b:d7:93:d3:
         0d:5f:34:ca:be:ed:2c:56:43:14:1f:37:72:b8:01:10:37:3e:
         d1:e9:7d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:30:18 2024 by rpki-client on console-fra.rpki-client.org