Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/a346f552-39a7-32fe-b8bd-70aede6df2d7.roa
File:                     a346f552-39a7-32fe-b8bd-70aede6df2d7.roa (raw, json)
Hash identifier:          Lc37zV4WuWNWLPDSnQt781fxqTB4y7bgBsfWaCqjS+k=
Subject key identifier:   FD:D6:36:9A:4B:A7:86:D7:A6:28:7A:47:02:D2:A1:51:F1:15:11:BA
Certificate issuer:       /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial:       010D0C9F4328584787212D206489DF91B493D530
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/a346f552-39a7-32fe-b8bd-70aede6df2d7.roa
Signing time:             Sun 13 Oct 2024 13:00:42 +0000
ROA not before:           Sun 13 Oct 2024 13:00:42 +0000
ROA not after:            Sat 11 Jan 2025 14:00:42 +0000
asID:                     20253
IP address blocks:        2606:bc40:1b::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:87:21:2d:20:64:89:df:91:b4:93:d5:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
        Validity
            Not Before: Oct 13 13:00:42 2024 GMT
            Not After : Jan 11 14:00:42 2025 GMT
        Subject: CN=baf4fed8-4528-47d4-9d0a-194f502ed803
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:22:97:81:40:c5:78:73:d0:f6:bb:7b:27:ed:
                    ba:15:c3:1e:14:33:bc:b5:55:6e:a0:21:fc:0b:0d:
                    ad:f7:f8:e1:8b:a2:47:8e:af:da:3d:d5:54:8b:0d:
                    94:76:ce:4c:cd:d9:49:4c:4a:70:c8:04:70:de:07:
                    bf:88:7b:40:b4:0e:f9:ed:7b:fc:8a:ec:be:68:70:
                    75:74:df:98:d6:24:67:15:2f:92:96:64:86:a4:5a:
                    0b:ec:62:fc:55:cc:44:f1:00:6f:ab:28:4e:cb:47:
                    83:a3:db:8c:50:e7:c2:0a:3f:15:2f:6d:dd:08:70:
                    f1:c9:bc:14:d1:70:06:d1:c1:c7:2e:f1:91:1e:e8:
                    01:74:6f:d5:ed:f3:b7:5c:4a:8b:36:51:6d:df:59:
                    58:15:51:d9:1d:c1:36:8d:21:e3:cb:5c:5b:4e:b3:
                    8d:3a:ad:76:13:4d:c8:74:77:e1:df:59:a8:68:cb:
                    b1:71:00:11:44:35:1f:2c:57:ab:39:12:ab:be:df:
                    e6:59:fa:21:a8:03:20:aa:de:49:9a:dc:a1:14:9b:
                    e5:28:ab:46:da:c5:b2:fa:ca:22:82:e4:46:c3:ba:
                    2e:b7:d2:25:a7:c9:64:3f:95:05:d0:8a:18:20:1e:
                    50:df:cd:ee:82:0f:ac:43:55:2a:bf:4e:b7:3f:67:
                    03:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:D6:36:9A:4B:A7:86:D7:A6:28:7A:47:02:D2:A1:51:F1:15:11:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/a346f552-39a7-32fe-b8bd-70aede6df2d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl

            X509v3 Authority Key Identifier:
                keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:bc40:1b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:2b:ea:23:00:b0:df:02:55:e6:f1:c2:a4:02:e3:1d:75:52:
         5f:d4:d0:32:03:76:9a:13:59:5b:90:0c:0e:57:3f:8d:9c:86:
         2d:3d:c6:08:e1:61:a4:07:f5:dd:f1:88:ee:74:5d:d0:76:0e:
         30:4a:9b:8e:7a:97:d2:2f:d2:14:c9:10:f9:a1:1d:28:e5:84:
         9f:b9:cf:e2:9b:c1:e8:60:fe:af:69:05:e3:c7:83:46:33:a5:
         4e:d2:1a:a4:b4:4d:a1:ba:f9:d1:50:82:15:e6:cc:57:76:f8:
         ee:60:0a:d9:07:62:04:44:dc:81:ed:dd:36:76:1f:b4:3f:f6:
         8a:e0:a8:c2:f1:f6:17:b4:3e:21:56:fa:5a:09:6e:22:85:32:
         5b:02:66:97:b0:a7:47:c0:fc:c5:0e:c4:b1:4b:78:a4:50:b4:
         2e:8f:e4:3f:57:d2:99:78:73:20:de:a0:8e:08:21:97:d7:96:
         18:43:1e:2f:01:6b:22:d6:3f:f1:74:4f:da:7b:7e:a5:d4:81:
         0d:42:c9:0d:80:0e:53:1f:a0:86:44:18:29:e6:17:c8:e0:b8:
         68:82:fa:1a:c1:24:95:e9:f5:25:1c:6d:61:1a:19:c7:8d:55:
         97:e5:9d:d5:44:5d:dc:e1:c2:6d:d2:d2:5c:8b:1c:ce:d2:bd:
         03:0f:4f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:22:04 2024 by rpki-client on console-ams.rpki-client.org