Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/a7013767-de4a-3bb7-8745-c92717794f3e.roa
File:                     a7013767-de4a-3bb7-8745-c92717794f3e.roa (raw, json)
Hash identifier:          Czfm6KMbZiTrJyQ7axzpFRw1ctswtxAYeD3LGdWqvCc=
Subject key identifier:   2E:4D:01:86:1E:5C:2C:0E:3E:52:C8:4D:08:C8:04:BE:D7:28:6F:BD
Certificate issuer:       /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial:       010D0C9F4328584734C88A9EEA3D317CE5D64F80
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/a7013767-de4a-3bb7-8745-c92717794f3e.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     20253
IP address blocks:        2606:bc40:f1d::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c8:8a:9e:ea:3d:31:7c:e5:d6:4f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=82b6e994-f07f-4b45-a19e-a9ea26b49414
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:84:68:31:b5:68:df:6f:1d:bc:0f:14:77:b5:
                    99:18:40:4b:8e:44:43:ba:7e:7a:e9:cd:91:95:6a:
                    d0:34:a4:e6:32:3a:e5:11:c6:26:b4:af:4a:30:3f:
                    46:34:92:58:7f:94:ac:f0:49:c4:e7:a0:25:b7:84:
                    16:08:12:6a:ba:9f:a6:16:e0:b3:04:e2:01:4c:e3:
                    07:a4:1f:b6:a1:a3:64:4a:51:c9:e1:31:98:8f:13:
                    bf:aa:55:7d:9d:3e:35:d5:73:f2:18:0b:1b:a7:79:
                    e9:2e:31:bf:3f:5f:c0:6a:5d:0a:60:64:de:0a:c8:
                    93:cf:bd:0c:ea:d6:61:5f:3e:08:36:73:5e:45:b6:
                    5b:5f:d6:d9:21:4f:0a:17:4e:5d:5c:f5:24:7d:19:
                    a2:38:e3:cc:cc:5d:7b:a0:ea:fd:ba:62:94:6d:88:
                    cf:3f:96:82:22:86:8b:8e:0a:7e:06:78:29:d1:b3:
                    d9:83:25:7e:f2:89:08:f4:54:2b:6e:5b:78:bb:76:
                    3d:3d:e3:cb:4f:a0:87:28:2f:bb:c2:44:e5:e8:33:
                    2c:08:f9:f5:d6:f8:40:33:d4:c5:16:d8:ec:2b:84:
                    bf:6f:6e:93:13:60:cd:b1:fd:4b:a5:de:6b:4b:48:
                    a5:c8:14:ae:bc:a8:a4:a6:f2:5c:22:94:cb:12:3f:
                    78:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:4D:01:86:1E:5C:2C:0E:3E:52:C8:4D:08:C8:04:BE:D7:28:6F:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/a7013767-de4a-3bb7-8745-c92717794f3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl

            X509v3 Authority Key Identifier:
                keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:bc40:f1d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:d6:d1:ab:2f:f8:79:88:41:f2:2c:49:57:26:d4:a0:88:a4:
         cc:44:8a:a4:83:f5:e5:70:c4:eb:9a:91:3a:81:46:69:a6:79:
         4e:a5:e1:82:6b:ad:b6:42:d7:01:0d:d8:4c:a1:44:08:b9:45:
         82:3f:b9:bd:17:8f:72:eb:20:31:e7:d4:a3:90:39:c0:e2:56:
         2f:3f:fc:b2:73:fa:41:07:38:04:8b:1b:dd:cb:e3:d6:12:3c:
         4a:9e:a3:0b:b7:9f:9a:b5:83:33:64:bb:84:09:75:19:f3:d2:
         ab:3c:fa:09:4a:69:30:72:42:07:df:5b:08:df:8b:8f:36:53:
         12:7e:44:33:c4:e2:08:19:92:a1:b7:f5:04:0a:11:3c:20:d0:
         21:46:88:19:7d:f6:d4:d3:e0:00:df:0e:f9:d5:1a:43:8c:14:
         70:f4:67:2a:2c:24:f3:3e:70:94:3f:d6:a4:cc:0f:52:ad:b8:
         fb:0a:72:4d:70:88:aa:43:8d:82:fc:1e:70:7b:13:d3:ee:f9:
         f2:07:b6:26:8a:09:8a:17:2b:1c:87:cf:6d:5b:4c:e0:ab:6e:
         c0:f4:0a:09:61:85:87:8a:09:fe:0c:c6:24:53:fb:13:b9:a7:
         0e:f7:5c:68:88:c5:d6:8d:3b:23:6d:97:80:77:35:dc:3e:40:
         4c:c7:b2:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 16:03:40 2024 by rpki-client on console-ams.rpki-client.org