Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/8d3a2844-3c89-3bb9-9aa2-4f02daa49715.roa
File:                     8d3a2844-3c89-3bb9-9aa2-4f02daa49715.roa (raw, json)
Hash identifier:          c4gNmGUeFUXEhj8xVb/rjBU/clgq5aDXB/lfFIWHFpI=
Subject key identifier:   ED:BD:5F:B0:1D:EF:3D:36:04:D8:5E:E3:02:45:C7:DF:6E:80:57:51
Certificate issuer:       /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial:       010D0C9F4328584734C88A89C45F548877841280
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/8d3a2844-3c89-3bb9-9aa2-4f02daa49715.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     20253
IP address blocks:        2606:bc40:105::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c8:8a:89:c4:5f:54:88:77:84:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=ab34c9c8-8d86-483a-a840-74866271ed69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:7f:fc:2b:ca:dd:9c:65:b1:ce:47:7e:a1:be:
                    c6:c1:a6:67:7c:9d:45:08:70:18:6c:9d:e6:ec:fd:
                    70:9f:99:a1:82:f4:76:e1:b0:31:26:df:b4:84:59:
                    ab:79:57:b1:bb:ba:8c:fe:b2:04:51:ca:ad:31:08:
                    b7:4c:81:4b:e1:f4:e4:70:4f:9b:e8:65:39:32:bf:
                    fd:4b:75:eb:7a:2c:26:6b:46:cc:0e:7b:d4:8f:6f:
                    b9:19:2b:3a:6a:75:e0:e0:d6:7d:cf:f3:59:4a:ab:
                    69:6f:47:7a:48:fd:c0:9e:c9:98:75:45:24:85:cd:
                    34:2f:ac:79:4d:55:69:d4:e5:52:b5:2e:e8:6c:16:
                    68:c7:a3:e8:41:d6:ed:cd:d3:af:6a:2b:f6:a6:33:
                    1c:e0:d0:a7:69:9e:cf:4a:70:16:14:9c:3a:1b:36:
                    38:01:e2:5a:ff:b8:4d:00:c6:eb:6e:a2:1c:23:fd:
                    b4:ff:11:1e:42:7b:f7:32:24:85:cc:93:dc:61:a1:
                    41:84:06:32:f3:a0:53:fc:92:1f:9a:3d:ff:90:6f:
                    42:0e:d2:cc:49:6d:f7:c5:39:8e:11:67:68:d9:8d:
                    83:ab:25:56:44:b3:b1:ea:ee:6b:eb:ec:cd:d0:a6:
                    26:ad:e8:cb:4e:d8:8f:ed:66:32:dd:d6:eb:d8:af:
                    01:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:BD:5F:B0:1D:EF:3D:36:04:D8:5E:E3:02:45:C7:DF:6E:80:57:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/8d3a2844-3c89-3bb9-9aa2-4f02daa49715.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl

            X509v3 Authority Key Identifier:
                keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:bc40:105::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:73:51:6c:84:eb:e8:a0:2e:c8:bb:5f:cc:26:8d:83:c9:31:
         17:7a:f5:53:7b:d2:61:3a:77:6f:82:3b:04:31:a2:c2:3c:66:
         ca:b0:7d:f3:fd:48:42:b8:35:65:b2:2b:83:3e:b7:2b:cf:03:
         d7:b3:d9:8c:23:61:31:53:25:d3:b6:aa:73:64:33:40:14:71:
         78:ee:ea:d6:b5:9c:13:10:d1:ef:93:c1:4b:77:71:10:fa:7a:
         ae:7c:a6:f4:73:8a:45:3e:23:46:b9:13:0c:b8:9d:31:f0:f5:
         cf:bf:a4:67:3d:d6:82:63:da:41:b1:8c:54:e1:a9:78:4d:db:
         8a:81:58:a0:a8:cc:8a:df:fd:ad:35:82:47:5f:a6:2d:f3:86:
         c5:19:2b:d4:b2:8d:5d:ef:5d:45:28:b1:42:87:10:9a:00:84:
         dd:36:99:0d:ac:7a:05:c8:80:53:98:23:2d:45:64:2a:98:75:
         4b:b9:c5:7d:81:fc:11:ed:26:0d:ee:47:28:fe:e8:31:f8:82:
         5a:b4:33:e3:6d:4a:8c:5f:66:50:8d:e5:cd:32:95:32:2c:48:
         bc:a3:42:0e:e9:61:d8:7e:c8:95:d8:44:a0:98:5c:4f:32:82:
         09:ff:f2:eb:1a:41:be:b5:13:b4:b4:cd:21:30:7a:ea:54:02:
         88:28:82:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:35:26 2024 by rpki-client on console-fra.rpki-client.org