Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17436076-857b-4889-82e9-22151c59a4b1/f385ad82-3306-3e6e-b322-cdd5f01a0d54.roa
File:                     f385ad82-3306-3e6e-b322-cdd5f01a0d54.roa (raw, json)
Hash identifier:          dHhfJd4DL/WpycPTl+1pPaSfQsTUwFtBVHmVO67AvN0=
Subject key identifier:   AF:B1:0A:12:25:14:87:2C:F6:10:12:25:A6:1F:64:EC:1C:4B:6F:3F
Certificate issuer:       /CN=17436076-857b-4889-82e9-22151c59a4b1
Certificate serial:       010D0C9F432858475EA6327A34855BBA1D0217DC
Authority key identifier: 47:0A:FA:56:B9:09:C9:A7:EE:6D:7E:FE:BA:23:0C:CB:80:18:1D:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17436076-857b-4889-82e9-22151c59a4b1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17436076-857b-4889-82e9-22151c59a4b1/f385ad82-3306-3e6e-b322-cdd5f01a0d54.roa
Signing time:             Sun 29 Sep 2024 01:00:32 +0000
ROA not before:           Sun 29 Sep 2024 01:00:32 +0000
ROA not after:            Sat 28 Dec 2024 02:00:32 +0000
asID:                     46644
IP address blocks:        2620:bf:2000::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17436076-857b-4889-82e9-22151c59a4b1/17436076-857b-4889-82e9-22151c59a4b1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17436076-857b-4889-82e9-22151c59a4b1/17436076-857b-4889-82e9-22151c59a4b1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17436076-857b-4889-82e9-22151c59a4b1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5e:a6:32:7a:34:85:5b:ba:1d:02:17:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17436076-857b-4889-82e9-22151c59a4b1
        Validity
            Not Before: Sep 29 01:00:32 2024 GMT
            Not After : Dec 28 02:00:32 2024 GMT
        Subject: CN=15f716be-a1a8-4d0f-a690-7bb1fef60b31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:68:c2:c3:87:0e:e2:ba:4d:a7:94:4e:58:ef:
                    0a:44:b2:3e:9d:2a:ec:4a:d3:43:27:5f:b7:2c:46:
                    8f:76:28:f2:1b:6b:a7:52:96:de:30:96:71:9d:e3:
                    94:de:99:0c:e7:b8:f7:eb:7e:08:7b:fa:f1:82:c9:
                    3c:44:42:c0:a4:5b:27:80:28:13:3e:35:bb:c0:c7:
                    87:9d:10:ef:a4:2f:7e:13:bd:e7:a2:22:91:6b:46:
                    fc:75:92:8f:f5:05:4b:b6:35:d3:b6:ff:b4:0c:60:
                    2e:e4:27:5c:bb:62:4e:93:32:ee:d8:97:e3:70:40:
                    b0:8a:b7:1f:1c:c0:64:0c:c1:c1:e5:ef:d5:7a:7b:
                    9a:2d:0f:6e:20:df:64:68:dd:c1:de:0a:33:2d:3c:
                    84:7e:e4:05:e6:ac:92:59:ca:1d:e7:2b:ec:4c:c8:
                    9e:e5:b6:d2:39:ad:45:04:9d:9b:54:29:c2:17:48:
                    0a:db:d5:42:01:8c:4d:83:43:fc:5a:ff:79:b6:ec:
                    9e:ad:e0:20:dc:01:2b:94:0a:13:a0:7a:47:2d:2c:
                    07:77:15:65:dd:9d:17:91:a0:a2:5a:e9:e5:1e:b2:
                    d2:d2:e8:93:d2:b2:e1:99:39:74:57:f8:98:bb:d6:
                    9a:55:99:5c:e2:0d:13:78:fd:62:c7:e4:c9:e9:9e:
                    0f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:B1:0A:12:25:14:87:2C:F6:10:12:25:A6:1F:64:EC:1C:4B:6F:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17436076-857b-4889-82e9-22151c59a4b1/f385ad82-3306-3e6e-b322-cdd5f01a0d54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17436076-857b-4889-82e9-22151c59a4b1/17436076-857b-4889-82e9-22151c59a4b1.crl

            X509v3 Authority Key Identifier:
                keyid:47:0A:FA:56:B9:09:C9:A7:EE:6D:7E:FE:BA:23:0C:CB:80:18:1D:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17436076-857b-4889-82e9-22151c59a4b1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:bf:2000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:3d:35:72:f6:5b:1f:77:7c:9d:15:a1:88:6d:3d:92:93:fd:
         11:5e:cb:fb:41:84:2e:61:3f:4f:65:57:6d:e9:8e:27:ff:76:
         bb:c0:f6:84:02:84:2f:60:11:58:91:e5:a0:36:7f:ef:ac:b1:
         56:5a:b1:d9:a4:d7:96:77:ef:9e:98:61:d3:2c:4e:e9:68:81:
         10:89:95:df:ee:81:dc:89:ce:bd:9c:6a:82:70:5b:54:de:8c:
         b1:96:86:e5:d1:5e:3a:b4:fe:90:3e:93:87:14:a8:96:d5:1a:
         ae:07:eb:28:d3:e9:81:bc:0d:92:6a:61:8f:5d:9b:2e:cd:4e:
         ec:de:1a:81:05:68:b5:8c:76:28:6a:50:af:52:37:af:dd:a3:
         24:3d:fb:bf:1e:47:3a:1a:11:63:72:bd:a4:a0:35:fc:66:5b:
         b7:13:bd:68:6a:e2:3f:16:0c:77:a3:f2:fa:03:65:f3:4e:a2:
         e4:63:1c:5c:16:b4:ea:e1:de:55:51:07:f2:34:8c:ce:fc:91:
         70:c3:66:6a:51:b5:90:6a:12:20:30:fb:5b:6a:70:82:a6:2c:
         21:6a:c2:37:76:fb:59:47:7d:3f:1a:c9:94:2b:07:5c:ab:5d:
         c5:e6:a2:d4:b5:10:88:70:44:61:3c:43:1a:e6:46:7f:cf:f9:
         0c:a0:c4:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:24:01 2024 by rpki-client on console-fra.rpki-client.org