Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/c2afe04d-8d73-3bef-b5c4-217ac12e7b79.roa
File:                     c2afe04d-8d73-3bef-b5c4-217ac12e7b79.roa (raw, json)
Hash identifier:          xGvch1jJhk8Cbwp+LhyFH05eh1aJ+NhGYrLhakq1kvM=
Subject key identifier:   62:43:60:00:68:89:90:D9:B1:50:EA:29:8D:28:B5:A6:F1:A8:4C:00
Certificate issuer:       /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial:       010D0C9F4328584734C88D636B6F2CB8589A6840
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/c2afe04d-8d73-3bef-b5c4-217ac12e7b79.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     20253
IP address blocks:        2606:bc40:f100::/48 maxlen: 48
                          2606:bc40:f101::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c8:8d:63:6b:6f:2c:b8:58:9a:68:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=9eb902b7-fc05-4d48-9f8a-987b30cd4bb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:15:74:75:11:6c:8d:6b:fd:8e:7e:13:9e:23:
                    5c:70:71:18:b0:d6:0a:a6:01:f2:82:75:d3:7c:4a:
                    e0:99:b0:ec:de:da:29:55:c0:3d:49:45:81:a7:90:
                    6e:85:12:d8:46:41:d9:7f:68:d1:d8:78:4a:db:e6:
                    42:60:df:02:d3:ae:c9:bb:ac:b4:8c:f2:8a:2a:3b:
                    eb:44:93:ee:61:45:59:39:b7:94:a9:54:89:81:b3:
                    fd:20:71:bf:70:c0:e1:26:b5:b1:77:82:f5:a0:26:
                    c0:b8:ef:50:db:30:bc:62:c4:6b:d6:75:22:3d:14:
                    de:05:42:58:e1:9d:31:27:d9:dc:c5:46:bd:8c:1e:
                    8b:b4:d9:bb:fa:c3:cd:84:97:07:c6:53:84:a2:00:
                    09:0f:a8:6e:a0:4e:b2:9c:c2:15:29:29:88:31:2d:
                    91:94:8d:10:77:07:b1:04:ef:62:32:ad:b8:3a:9e:
                    10:66:8d:0c:1d:8a:1c:e9:b9:76:a0:e0:f0:f3:d9:
                    8b:07:c5:01:ac:af:a8:50:fd:bc:fd:9c:43:71:98:
                    f9:73:d2:ac:84:6b:5b:b9:b4:1f:c2:d3:92:f9:47:
                    f4:62:bc:2e:be:cc:fd:fc:4b:8e:f9:84:17:a3:9d:
                    17:86:88:74:47:65:49:97:fe:f4:05:1d:fe:2f:45:
                    88:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:43:60:00:68:89:90:D9:B1:50:EA:29:8D:28:B5:A6:F1:A8:4C:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/c2afe04d-8d73-3bef-b5c4-217ac12e7b79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl

            X509v3 Authority Key Identifier:
                keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:bc40:f100::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:9f:97:2c:0b:55:f5:07:39:0a:ad:e2:5b:0e:6c:08:32:08:
         bc:88:32:cb:9f:78:c8:d3:33:c8:12:31:b6:19:06:30:2c:3d:
         05:94:42:ad:c9:08:c3:6a:59:5f:8e:d6:63:24:88:01:6d:58:
         3b:70:6a:e0:45:71:6b:2b:65:30:ec:47:b6:b7:67:a3:ef:d5:
         de:5f:ff:5e:4a:75:88:10:9e:70:97:78:b8:29:03:3e:01:89:
         96:de:92:0f:53:89:81:8a:46:42:03:4e:56:a7:19:0e:48:b1:
         7e:7e:82:98:c4:2c:d8:b7:a1:a3:37:61:0a:b9:a2:b7:48:86:
         07:c9:8c:af:ca:4f:31:f5:34:a0:35:81:9f:63:f0:a0:56:19:
         a3:e5:05:f5:59:cf:a5:c2:e5:ba:b9:c6:43:aa:eb:34:75:32:
         98:82:95:57:0b:f2:5a:c0:25:8f:3b:a6:6b:e0:b1:a7:0b:1e:
         0b:32:16:db:d9:74:21:f2:be:4c:63:89:d6:02:3c:ae:7a:1e:
         31:ee:61:11:1b:7b:8c:ec:ba:fd:10:2b:45:7e:3c:b8:c3:de:
         b3:fd:8f:b0:70:de:72:6e:ff:01:9e:c3:d7:d8:bb:b2:d6:76:
         ad:c2:a0:dc:fa:07:54:25:f9:36:4a:d5:47:b8:74:8f:d1:b4:
         16:53:90:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:15:24 2024 by rpki-client on console-ams.rpki-client.org