Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667/2f1104db-d2a0-3d23-acdd-d1a6a1088b0a.roa
File:                     2f1104db-d2a0-3d23-acdd-d1a6a1088b0a.roa (raw, json)
Hash identifier:          oXlvpiKheYehkV++qdJB7BaJPmv4A787Ie+NkJZOb3Q=
Subject key identifier:   C3:68:BC:0C:25:28:72:94:C6:C6:6E:67:D7:93:CF:94:28:C6:AF:EB
Certificate issuer:       /CN=138beb7a-6a99-47ad-a8e7-50bb4d24b667
Certificate serial:       010D0C9F43285847EE8A3023AA3FF6B748E23900
Authority key identifier: FE:59:F2:8E:AB:34:7A:8A:A7:D7:6F:39:AF:D3:9A:32:46:FB:97:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667/2f1104db-d2a0-3d23-acdd-d1a6a1088b0a.roa
Signing time:             Tue 19 Nov 2024 14:00:39 +0000
ROA not before:           Tue 19 Nov 2024 14:00:39 +0000
ROA not after:            Mon 17 Feb 2025 14:00:39 +0000
asID:                     397702
IP address blocks:        2607:46c0:dead::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667/138beb7a-6a99-47ad-a8e7-50bb4d24b667.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667/138beb7a-6a99-47ad-a8e7-50bb4d24b667.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ee:8a:30:23:aa:3f:f6:b7:48:e2:39:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=138beb7a-6a99-47ad-a8e7-50bb4d24b667
        Validity
            Not Before: Nov 19 14:00:39 2024 GMT
            Not After : Feb 17 14:00:39 2025 GMT
        Subject: CN=ccd2e77a-3451-4b9e-8925-124b652cdafc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:27:34:3a:bb:3f:02:ee:77:39:b3:96:6a:00:
                    b3:e7:87:ae:23:6a:ee:94:f4:a2:57:d8:df:91:f0:
                    8d:ae:e3:3a:78:c5:6b:8d:d0:c3:1c:af:c1:52:a7:
                    ab:a8:ce:19:7a:1e:e3:44:a5:1c:37:e0:9d:54:f2:
                    94:2a:79:39:38:b0:88:ed:95:33:74:6f:54:7c:e0:
                    3e:43:6b:24:78:0d:8e:4f:76:13:9c:ca:54:73:2c:
                    e5:12:31:da:3c:39:7c:a0:3f:c4:f3:b9:1f:1c:4b:
                    5f:79:46:42:55:96:e7:58:65:75:66:39:30:4e:78:
                    4d:c8:50:24:1a:04:92:e2:88:f4:64:f6:43:98:fd:
                    37:bf:ce:74:f7:2b:f9:fb:e4:17:87:d7:ba:0d:95:
                    cb:17:64:f1:5c:6a:ef:fb:47:57:ba:06:0c:ee:4b:
                    6f:79:8e:3d:d2:08:98:44:05:e4:e4:a9:ee:82:ba:
                    5f:91:12:26:3c:17:7b:e1:62:f2:03:f1:70:ab:0d:
                    0a:95:ca:06:05:98:39:04:f3:e8:55:ee:ab:2f:16:
                    e2:05:58:48:62:b9:75:a1:4c:e8:d5:5f:09:bc:58:
                    47:8d:3a:59:af:9b:73:6b:c2:5a:4f:28:c7:49:4e:
                    4b:08:b7:be:03:d6:d5:6f:c7:b5:06:24:7f:27:05:
                    cd:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:68:BC:0C:25:28:72:94:C6:C6:6E:67:D7:93:CF:94:28:C6:AF:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667/2f1104db-d2a0-3d23-acdd-d1a6a1088b0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667/138beb7a-6a99-47ad-a8e7-50bb4d24b667.crl

            X509v3 Authority Key Identifier:
                keyid:FE:59:F2:8E:AB:34:7A:8A:A7:D7:6F:39:AF:D3:9A:32:46:FB:97:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:46c0:dead::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:6c:ed:0e:02:f1:40:42:06:1e:bf:88:99:34:4f:c3:d1:cd:
         e2:10:94:6c:81:01:71:93:03:a9:04:92:d0:25:54:67:4f:7d:
         3f:09:ca:fd:9d:bd:7d:3c:45:0e:1d:0f:d1:1b:74:ef:98:74:
         a9:a7:1d:5d:75:97:06:89:d5:e9:53:2e:4f:ca:1d:f6:83:63:
         e0:d9:4a:d3:f4:47:7f:8c:cf:2a:a8:d3:0b:24:fc:c1:8b:91:
         d9:c9:58:5a:2f:53:58:39:22:bd:05:1d:8b:06:9b:4f:1a:7b:
         31:fd:88:c4:5d:3b:fa:ea:08:9d:22:93:48:0d:33:c8:bf:26:
         c3:7b:ab:cb:69:f2:f4:5d:b7:3f:6b:72:1e:6a:31:0e:c2:49:
         6d:bd:89:56:50:89:c1:af:80:11:4c:53:2b:a7:0e:1b:9f:8f:
         1f:bd:83:eb:1f:b2:a4:a9:c3:95:db:33:7e:1e:e3:96:e6:93:
         db:19:5a:59:02:18:ac:36:32:5b:e5:77:2b:d7:c2:4a:3e:37:
         eb:7a:9a:af:42:59:fe:db:59:e9:c9:0e:89:a2:fb:7e:72:35:
         19:f7:28:e5:c3:31:9b:61:a8:fc:7c:c6:34:fe:fa:df:15:e9:
         ca:e9:2d:fa:88:8d:1b:a7:72:24:bb:80:e9:0b:88:8c:ed:6d:
         a4:8e:d8:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:55:53 2024 by rpki-client on console-ams.rpki-client.org