Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/2b5f910b-7d7d-3334-9361-98cb0de97f81.roa
File:                     2b5f910b-7d7d-3334-9361-98cb0de97f81.roa (raw, json)
Hash identifier:          a8joG5fy6ZWfghR22f7rRCjkCc8AztQx96bhSjTp9iw=
Subject key identifier:   58:93:7E:0B:BB:4A:EC:6E:50:CE:E8:B2:9A:00:1E:BD:70:B2:92:13
Certificate issuer:       /CN=4b81c928-08cc-4234-b15c-0f1a197c6e00
Certificate serial:       010D0C9F43285847AE36C221A17AA70910747B80
Authority key identifier: 1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/2b5f910b-7d7d-3334-9361-98cb0de97f81.roa
Signing time:             Sun 27 Oct 2024 13:00:41 +0000
ROA not before:           Sun 27 Oct 2024 13:00:41 +0000
ROA not after:            Sat 25 Jan 2025 14:00:41 +0000
asID:                     26967
IP address blocks:        2620:125:b00f::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ae:36:c2:21:a1:7a:a7:09:10:74:7b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b81c928-08cc-4234-b15c-0f1a197c6e00
        Validity
            Not Before: Oct 27 13:00:41 2024 GMT
            Not After : Jan 25 14:00:41 2025 GMT
        Subject: CN=84df4802-b98b-4dce-8294-5f7c0cb43cde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4f:4e:a1:65:58:bd:11:2a:09:3e:d3:22:03:
                    3b:ff:bb:af:af:d1:28:24:dd:f8:b1:93:5d:94:1b:
                    31:c9:b4:7d:d2:33:fc:d0:bb:14:63:9a:af:7a:26:
                    1e:95:bf:83:4c:4c:51:e2:ee:8f:86:a4:7d:83:3e:
                    6a:4e:62:68:73:22:c0:e1:52:6c:28:eb:24:b5:15:
                    ae:6b:2c:94:5d:d7:64:84:cd:2e:39:cc:20:99:b4:
                    8d:58:e4:b7:62:d3:57:53:0b:f4:47:23:fa:0d:82:
                    5e:f2:4c:95:5a:8f:d7:2c:cb:78:f9:38:b7:91:94:
                    10:f8:e9:41:70:c8:ba:99:b4:88:ef:43:32:5d:e1:
                    d9:c7:60:5b:87:98:6e:94:6c:56:ca:f3:1a:50:e0:
                    b4:67:13:88:4c:53:68:97:99:2f:04:6a:52:34:7a:
                    ed:de:31:46:96:75:c7:a5:2b:3c:1d:d2:b5:40:8f:
                    e9:1d:6d:1f:9a:5d:49:ce:51:04:67:a0:62:4f:20:
                    f5:25:f3:d5:62:0e:04:d6:06:2c:bb:7d:28:f9:d3:
                    46:ab:a3:c8:81:4a:c6:28:49:fa:54:73:89:23:3d:
                    67:04:61:59:65:4b:0c:18:d5:8e:ab:ed:f9:ff:39:
                    ca:72:4b:df:32:97:02:08:5d:bb:65:3b:d9:41:0f:
                    ea:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:93:7E:0B:BB:4A:EC:6E:50:CE:E8:B2:9A:00:1E:BD:70:B2:92:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/2b5f910b-7d7d-3334-9361-98cb0de97f81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl

            X509v3 Authority Key Identifier:
                keyid:1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:125:b00f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:a8:4c:2d:f7:ba:2a:da:af:78:25:69:40:27:db:f9:60:68:
         01:c8:88:20:96:df:36:13:51:c5:94:df:60:82:44:dd:cc:d3:
         4b:21:12:00:61:eb:9f:af:80:60:f7:49:4c:a5:36:12:dc:c3:
         2d:aa:78:88:ac:80:d4:ed:ca:22:c1:bc:13:ca:f7:35:43:a8:
         ab:80:6f:ed:44:ac:49:a6:f1:01:38:b8:7f:ca:c8:41:5a:8e:
         c8:72:66:ff:df:27:7d:97:1a:fb:c6:87:cd:90:01:cd:df:60:
         2d:46:d4:18:b3:be:e5:6a:08:af:19:d5:6d:80:34:23:b8:97:
         98:68:06:48:d2:21:c9:00:e2:ba:f7:7a:2e:38:2d:1b:c8:ed:
         21:1c:b5:9a:c1:b2:c1:15:48:a9:ee:2b:3d:24:75:f2:00:d4:
         07:60:02:39:4d:0a:47:52:46:55:7d:c7:cb:7e:9a:3b:48:6f:
         50:3d:8b:3a:58:c9:66:4e:b4:c4:c3:3a:35:81:2b:8b:1a:9e:
         3a:ee:ff:f1:f2:ea:71:2f:16:ea:98:59:04:c8:43:e5:80:ab:
         a5:0e:8d:74:37:a1:03:89:15:9e:04:22:fd:74:0a:64:44:c1:
         71:5f:15:51:62:ad:78:c0:1b:d8:98:ed:fc:c3:5b:8b:7d:27:
         d4:fb:f0:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:37:05 2024 by rpki-client on console-ams.rpki-client.org