Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/689d0932-9e89-3a1e-87c9-e79053ebc7ab.roa
File:                     689d0932-9e89-3a1e-87c9-e79053ebc7ab.roa (raw, json)
Hash identifier:          2KTpL6Cs3M+awhoyNplcyfleIHXZgay3d//WHnVPObY=
Subject key identifier:   4B:F5:EC:FC:FF:C7:E2:AB:A3:35:63:3C:94:DA:0A:12:3B:85:5D:D8
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F43285847B53153ABFD3C79438B003C38
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/689d0932-9e89-3a1e-87c9-e79053ebc7ab.roa
Signing time:             Wed 30 Oct 2024 01:00:32 +0000
ROA not before:           Wed 30 Oct 2024 01:00:32 +0000
ROA not after:            Tue 28 Jan 2025 02:00:32 +0000
asID:                     62896
IP address blocks:        2001:48f8:f300::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b5:31:53:ab:fd:3c:79:43:8b:00:3c:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: Oct 30 01:00:32 2024 GMT
            Not After : Jan 28 02:00:32 2025 GMT
        Subject: CN=3c746123-f707-4520-ba12-269d34dd5614
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e5:27:65:57:14:dc:63:54:64:c6:ee:e2:ab:
                    0b:20:05:d4:59:a9:1e:6e:ba:e1:3c:df:34:8e:1c:
                    c2:8b:96:56:b9:6b:82:53:3b:3f:33:bc:b9:a3:d6:
                    86:0d:69:e9:1d:fb:92:55:83:18:d0:41:ae:aa:94:
                    27:0b:e3:5c:1a:81:fc:d4:f9:f6:40:8b:59:1d:54:
                    69:a3:61:c8:40:87:b1:e4:37:ba:16:48:69:44:12:
                    f0:6f:f3:04:30:29:7c:51:81:12:60:d9:5b:a5:60:
                    08:a9:3a:75:a6:51:23:e9:1c:16:76:67:7a:ea:9e:
                    05:0c:14:bd:91:a6:a9:a1:13:98:d0:06:8b:a5:ce:
                    38:aa:29:30:1b:48:7d:f4:cf:15:a2:0f:9b:1c:01:
                    14:4a:26:39:61:55:b7:ea:32:94:73:b2:54:12:df:
                    a9:8a:72:e3:3f:9d:d3:a4:76:25:6b:b7:8e:64:96:
                    ab:ea:bc:9e:2c:da:58:2d:4e:b1:98:a5:e6:13:0d:
                    60:ed:7e:13:c9:a2:63:b9:d0:48:8d:35:cd:2e:f5:
                    b8:2c:6d:26:9c:f5:b4:d9:46:39:ac:e5:2d:04:10:
                    1a:45:b1:7c:26:2d:b1:4f:92:20:67:1b:1c:04:b1:
                    79:d3:51:ed:65:12:96:c9:85:23:e1:17:14:d6:5c:
                    5b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:F5:EC:FC:FF:C7:E2:AB:A3:35:63:3C:94:DA:0A:12:3B:85:5D:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/689d0932-9e89-3a1e-87c9-e79053ebc7ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:48f8:f300::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:c8:dc:de:f0:ca:72:e3:5a:4e:8c:23:3d:51:62:76:22:4e:
         ad:93:0d:87:9f:07:70:b5:c7:0d:4e:36:2e:04:07:80:f2:21:
         57:23:79:60:4e:8b:6b:63:2c:f8:e2:6c:3c:70:91:35:a8:e1:
         8b:72:09:90:37:ad:43:7c:98:e3:cb:8c:8a:d8:8a:85:89:9e:
         7a:07:26:23:d6:5d:d4:28:5e:7c:a0:72:76:11:b6:80:41:dd:
         61:93:cd:cf:1c:5a:8d:0e:9d:5e:db:08:38:b5:6e:2d:04:1b:
         77:94:50:00:c3:d6:08:37:40:cd:93:9e:9c:96:d1:44:3a:5d:
         e9:58:39:70:73:73:98:bf:00:4c:d8:40:28:38:5f:ea:df:4a:
         80:35:bc:49:38:79:4c:a0:ea:0f:dd:42:9e:97:84:69:75:ca:
         3d:d3:f8:24:e4:8b:0c:f4:05:98:60:95:77:92:71:a3:45:9c:
         01:46:9d:ec:46:d1:e2:10:9d:3a:52:5e:c0:69:a2:49:08:d0:
         23:69:41:63:cb:ff:c6:ed:33:13:de:5a:4a:42:f8:29:ed:38:
         87:ac:ed:4e:4e:bf:68:9f:a7:b4:2d:4d:22:0a:80:a6:88:46:
         0a:11:bd:82:26:a6:f4:88:0a:f5:fc:b2:8f:74:0e:6f:74:aa:
         18:f9:4a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:23:03 2024 by rpki-client on console-fra.rpki-client.org