Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/d0f32018-fa4b-36d9-9478-1ff3592ac07b.roa
File:                     d0f32018-fa4b-36d9-9478-1ff3592ac07b.roa (raw, json)
Hash identifier:          GV7I095bNt3Sy6coEx+RL4vHhp9G8LV9ZX+rGHlGthw=
Subject key identifier:   F3:9B:6E:83:BD:7D:CE:D5:BE:F6:B3:79:B4:0D:EC:96:45:A2:41:73
Certificate issuer:       /CN=ebb739b8-a0ed-4449-8c62-99ff6b94b1c3
Certificate serial:       010D0C9F4328584726D089192E5F9B95CAC4DC00
Authority key identifier: EE:FE:6D:FB:B0:55:03:BC:DA:B3:01:9A:91:11:03:C2:E7:54:DB:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/d0f32018-fa4b-36d9-9478-1ff3592ac07b.roa
Signing time:             Mon 09 Sep 2024 01:00:31 +0000
ROA not before:           Mon 09 Sep 2024 01:00:31 +0000
ROA not after:            Sun 08 Dec 2024 02:00:31 +0000
asID:                     19528
IP address blocks:        2605:15c0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:26:d0:89:19:2e:5f:9b:95:ca:c4:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebb739b8-a0ed-4449-8c62-99ff6b94b1c3
        Validity
            Not Before: Sep  9 01:00:31 2024 GMT
            Not After : Dec  8 02:00:31 2024 GMT
        Subject: CN=609d5d3c-f1f7-45b3-9b0d-7d087703ca36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:84:ec:f9:88:01:a2:fd:ef:57:51:c5:14:0b:
                    b4:b3:13:85:ad:77:06:12:cb:fc:b3:cc:03:7e:0f:
                    ce:1f:7d:e9:88:d0:d5:44:12:cf:d2:9c:81:48:a5:
                    26:54:77:b8:6d:4d:a0:7d:d9:61:09:ea:51:24:fd:
                    28:f6:fe:bc:29:7a:9a:67:8c:c1:1f:41:01:12:34:
                    b2:b6:7d:67:65:c8:9b:65:79:45:15:9d:6b:64:d4:
                    8c:b2:39:85:1c:5d:32:77:0f:3e:0d:de:28:03:84:
                    01:f2:fc:a7:96:e4:15:d6:7c:15:7a:8e:13:d6:2b:
                    1c:c4:5b:66:ff:2a:6d:5e:5e:d9:db:82:b7:2c:2a:
                    17:c2:88:f7:4d:2e:3a:39:f6:fb:4b:a3:5f:bc:d7:
                    6f:b7:e3:34:4b:e5:57:5e:e0:86:99:6b:52:1d:43:
                    fb:b2:39:af:f4:46:bd:9b:60:fe:58:66:06:b1:60:
                    ae:6f:81:db:4b:d8:b0:3c:54:59:eb:f8:81:66:83:
                    1a:6b:81:b7:2e:0e:e0:c2:4e:84:cd:bd:cd:d0:53:
                    a0:5c:86:69:e1:ff:57:36:ca:e3:95:8d:51:f4:ec:
                    c9:18:8e:37:59:79:4e:bd:43:fa:0a:7a:26:0f:1a:
                    4a:17:90:2c:77:2b:6f:9d:74:05:68:32:03:63:f3:
                    f5:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:9B:6E:83:BD:7D:CE:D5:BE:F6:B3:79:B4:0D:EC:96:45:A2:41:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/d0f32018-fa4b-36d9-9478-1ff3592ac07b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.crl

            X509v3 Authority Key Identifier:
                keyid:EE:FE:6D:FB:B0:55:03:BC:DA:B3:01:9A:91:11:03:C2:E7:54:DB:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:15c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:50:b1:4d:74:32:52:34:4f:35:9f:d4:98:9d:f5:9a:bb:3d:
         8e:8c:7f:35:64:c6:1f:44:08:cc:52:75:d8:ac:5e:04:d0:7a:
         ba:81:7c:94:78:60:9b:4b:58:26:03:92:7d:aa:03:bf:10:7a:
         28:45:00:d6:e9:5d:f3:43:50:41:91:3e:21:0a:f1:fe:42:35:
         1a:3c:a9:90:5d:1e:65:20:b3:fc:6e:3c:87:25:96:7e:53:ee:
         a7:03:35:3a:03:a6:32:6d:c2:e8:c5:0d:a6:a0:5c:12:60:79:
         62:36:00:24:c4:82:da:f9:1d:13:49:ec:e3:1e:0e:88:01:f8:
         5f:8d:55:b9:7c:99:2b:49:77:87:55:18:16:69:99:fc:fb:a0:
         e7:af:2b:8c:4e:16:bc:24:4d:89:67:5c:92:6c:75:ec:0e:45:
         07:3c:52:ee:06:a2:55:40:c7:6b:e6:ed:42:fa:2e:97:8f:f0:
         b4:1d:92:2f:5d:27:26:be:71:84:19:b2:c4:38:ca:c3:dc:ca:
         d3:b9:be:12:44:50:51:4b:d8:67:3e:97:24:2a:cb:fd:d0:be:
         2a:cc:66:c1:10:7a:4f:90:1d:8c:03:2a:ff:58:53:70:95:d5:
         a1:54:6c:b7:f6:12:f4:e5:3e:ae:f4:f2:42:9a:27:0d:6a:74:
         c0:52:f4:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:39:26 2024 by rpki-client on console-ams.rpki-client.org