Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9531f556-030e-49b4-a31b-60b469425432/05c6d20e-a2be-3e86-aac7-d24c2a55e38d.roa
File:                     05c6d20e-a2be-3e86-aac7-d24c2a55e38d.roa (raw, json)
Hash identifier:          cUxqL7jJZHXCHuf1o+XT31x5/IarI49M5HUsfFGVumw=
Subject key identifier:   81:FC:34:82:9E:54:0C:C9:DE:53:DF:76:25:E1:C4:1C:35:7C:CB:9B
Certificate issuer:       /CN=9531f556-030e-49b4-a31b-60b469425432
Certificate serial:       010D0C9F432858474420B883E6FFC33962B86500
Authority key identifier: 4E:A2:50:27:DE:23:09:65:81:B1:7D:37:DE:80:5E:05:7C:08:BC:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9531f556-030e-49b4-a31b-60b469425432.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9531f556-030e-49b4-a31b-60b469425432/05c6d20e-a2be-3e86-aac7-d24c2a55e38d.roa
Signing time:             Thu 19 Sep 2024 13:00:42 +0000
ROA not before:           Thu 19 Sep 2024 13:00:42 +0000
ROA not after:            Wed 18 Dec 2024 14:00:42 +0000
asID:                     8075
IP address blocks:        2620:bc:2000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9531f556-030e-49b4-a31b-60b469425432/9531f556-030e-49b4-a31b-60b469425432.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9531f556-030e-49b4-a31b-60b469425432/9531f556-030e-49b4-a31b-60b469425432.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9531f556-030e-49b4-a31b-60b469425432.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:44:20:b8:83:e6:ff:c3:39:62:b8:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9531f556-030e-49b4-a31b-60b469425432
        Validity
            Not Before: Sep 19 13:00:42 2024 GMT
            Not After : Dec 18 14:00:42 2024 GMT
        Subject: CN=5ebe7019-dfe4-4e2c-acba-bf621224e9d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:61:10:1a:dd:32:c1:aa:3a:89:af:1d:90:4c:
                    34:07:3d:36:d9:f2:a9:3b:ba:5a:03:b4:50:75:38:
                    11:3e:ac:66:3a:d0:de:14:60:a2:f9:f0:4d:0e:3f:
                    be:ac:f6:c2:21:24:23:01:f9:ef:f6:d1:ba:0b:e5:
                    ba:94:ac:89:15:d3:28:e2:99:9c:04:47:db:c0:47:
                    e0:6f:3e:72:b8:7e:5f:4d:c6:e0:53:66:ad:63:05:
                    38:89:dd:60:b0:6a:db:8d:65:ba:bc:3f:5d:ec:61:
                    ad:c3:b8:f3:dc:85:10:f8:ea:f4:cd:5d:52:36:55:
                    5e:02:74:92:c7:38:36:fd:7c:bf:e7:0e:ff:84:a3:
                    3b:02:78:c6:61:92:e4:76:8b:11:b8:f1:1d:59:4e:
                    12:e7:e9:4d:3c:07:ea:d7:a6:06:ef:c7:a2:70:ba:
                    4d:56:67:b7:e7:79:48:4a:fb:9f:8b:78:2a:7b:c1:
                    9c:b8:2d:90:8a:10:dd:36:fe:21:02:76:ef:26:9f:
                    6b:bc:db:97:48:bd:ec:c9:73:fb:f7:0e:3a:23:96:
                    29:96:1c:ca:79:a2:59:c7:eb:ee:f2:25:63:43:d6:
                    52:be:0b:8b:42:e8:55:c9:1f:6a:35:b2:59:db:9c:
                    8f:bc:70:df:ef:af:8a:cb:db:0e:f2:2e:d5:d8:1f:
                    de:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:FC:34:82:9E:54:0C:C9:DE:53:DF:76:25:E1:C4:1C:35:7C:CB:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9531f556-030e-49b4-a31b-60b469425432/05c6d20e-a2be-3e86-aac7-d24c2a55e38d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9531f556-030e-49b4-a31b-60b469425432/9531f556-030e-49b4-a31b-60b469425432.crl

            X509v3 Authority Key Identifier:
                keyid:4E:A2:50:27:DE:23:09:65:81:B1:7D:37:DE:80:5E:05:7C:08:BC:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9531f556-030e-49b4-a31b-60b469425432.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:bc:2000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:10:29:2d:5e:db:73:7e:42:6a:16:e6:f6:e2:f8:72:d9:cf:
         56:91:31:08:87:46:65:30:62:36:85:fe:0b:5f:80:02:ce:e2:
         aa:ae:e2:a7:4c:70:9e:e2:90:63:d1:01:97:45:ce:83:d2:e2:
         dd:ce:07:8c:e6:92:95:fc:65:6c:65:80:3e:6b:0d:64:22:bc:
         ea:af:ce:2f:a4:59:19:c0:9a:1a:93:81:21:33:6e:62:bd:d0:
         40:a7:f6:9f:4b:af:bf:eb:2f:9d:9a:7b:0e:50:24:0d:fd:79:
         1e:f1:ec:b1:d3:aa:1a:c9:c7:c5:59:b9:06:d9:8e:8f:b8:fb:
         e3:cf:f0:86:71:b3:c7:40:30:f6:7b:a7:85:03:2e:9e:e8:9f:
         b8:b2:7b:3c:b8:22:00:6a:0f:9d:ab:4f:af:7d:57:f2:73:90:
         fb:9f:1e:ae:f2:38:a3:8e:13:56:5a:2d:af:92:ec:4e:88:46:
         30:28:1f:c6:ba:76:88:dd:8b:9b:39:3b:11:64:62:7e:12:e4:
         e5:f4:e7:98:22:9c:ef:7d:3d:91:98:d1:aa:d9:40:63:48:bf:
         80:3f:97:6a:04:46:96:8b:77:0a:bf:40:1b:f4:e3:41:b0:9d:
         e9:0c:55:8d:56:62:62:d8:38:24:de:5f:c4:f7:de:26:cd:96:
         68:9e:32:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 19:48:10 2024 by rpki-client on console-fra.rpki-client.org