Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/abc86be5-9cd6-4d5e-9867-b4d57b3b5c76/1596ae36-3c0f-30e4-a13e-883c51c53644.roa
File:                     1596ae36-3c0f-30e4-a13e-883c51c53644.roa (raw, json)
Hash identifier:          8hFh1nLBQzPvyCL1pJgAepC/01pinekpxgeEaEI7Prw=
Subject key identifier:   6C:DA:81:8C:88:C1:2C:4E:74:23:DC:6A:03:29:02:A2:35:94:AB:EB
Certificate issuer:       /CN=abc86be5-9cd6-4d5e-9867-b4d57b3b5c76
Certificate serial:       010D0C9F43285847600B9EB5AC8AB40AF8F89400
Authority key identifier: F9:E1:1B:A9:78:B0:19:FD:B6:8D:25:34:2D:48:D6:91:F4:BC:34:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/abc86be5-9cd6-4d5e-9867-b4d57b3b5c76.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/abc86be5-9cd6-4d5e-9867-b4d57b3b5c76/1596ae36-3c0f-30e4-a13e-883c51c53644.roa
Signing time:             Sun 29 Sep 2024 13:00:41 +0000
ROA not before:           Sun 29 Sep 2024 13:00:41 +0000
ROA not after:            Sat 28 Dec 2024 14:00:41 +0000
asID:                     15296
IP address blocks:        2620:25:6000::/48 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/abc86be5-9cd6-4d5e-9867-b4d57b3b5c76/abc86be5-9cd6-4d5e-9867-b4d57b3b5c76.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/abc86be5-9cd6-4d5e-9867-b4d57b3b5c76/abc86be5-9cd6-4d5e-9867-b4d57b3b5c76.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/abc86be5-9cd6-4d5e-9867-b4d57b3b5c76.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:60:0b:9e:b5:ac:8a:b4:0a:f8:f8:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abc86be5-9cd6-4d5e-9867-b4d57b3b5c76
        Validity
            Not Before: Sep 29 13:00:41 2024 GMT
            Not After : Dec 28 14:00:41 2024 GMT
        Subject: CN=bcddf1db-3699-4a73-b465-77c2c8a5a1c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d7:be:fc:54:a0:07:9e:78:3f:17:0c:77:73:
                    66:78:08:19:b4:d4:ab:a6:f5:21:ed:fc:eb:7d:bf:
                    d3:2e:31:71:78:3d:62:a1:a0:b9:ce:15:38:cb:b4:
                    2d:ad:6e:94:07:0c:45:7e:65:07:74:2b:28:e8:67:
                    6a:e6:24:7d:9c:f3:3a:33:98:72:9e:80:2d:f0:0e:
                    85:b5:7e:0f:18:ed:dd:7a:fb:ff:4b:d4:7d:c6:37:
                    6a:a3:55:65:f3:ec:81:56:74:ca:9c:37:5a:68:96:
                    6a:52:1b:15:77:9a:c4:e1:f3:47:f9:9e:74:76:87:
                    90:12:cb:6c:d5:ec:ef:b5:ca:14:e7:dd:56:9d:6b:
                    fb:c4:a7:37:36:0d:d5:ef:e9:7e:4c:5d:a0:ca:de:
                    90:e6:f7:c9:8c:a6:da:5b:46:b9:42:d5:4d:79:3a:
                    b0:0e:26:af:24:51:3a:6a:d9:2c:04:e7:8a:83:c4:
                    d7:1a:52:75:2d:1e:b6:d5:40:a9:e4:e4:3e:90:13:
                    12:b1:88:7f:20:71:0a:a6:1e:b8:b3:4a:d1:97:1c:
                    a9:2f:2b:a1:8a:03:b7:c0:ea:de:13:f6:f3:de:9f:
                    02:ff:61:fa:6f:1b:5f:42:ac:80:c4:54:de:85:c1:
                    cd:6a:9b:a0:0d:5d:32:90:8a:65:b5:11:78:8f:34:
                    ef:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:DA:81:8C:88:C1:2C:4E:74:23:DC:6A:03:29:02:A2:35:94:AB:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/abc86be5-9cd6-4d5e-9867-b4d57b3b5c76/1596ae36-3c0f-30e4-a13e-883c51c53644.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/abc86be5-9cd6-4d5e-9867-b4d57b3b5c76/abc86be5-9cd6-4d5e-9867-b4d57b3b5c76.crl

            X509v3 Authority Key Identifier:
                keyid:F9:E1:1B:A9:78:B0:19:FD:B6:8D:25:34:2D:48:D6:91:F4:BC:34:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/abc86be5-9cd6-4d5e-9867-b4d57b3b5c76.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:25:6000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:c8:a1:14:e3:f9:63:36:2c:16:4d:93:2c:04:72:18:1a:a3:
         10:ff:67:b7:72:a7:a9:4d:7e:b6:f4:95:d9:f3:8e:32:71:dd:
         aa:56:e0:6c:f4:fd:88:f9:4f:08:56:40:c9:43:5b:6d:3f:d2:
         93:76:df:ec:58:72:04:4f:e5:f0:29:a6:07:4e:27:77:12:b0:
         70:5a:be:a1:75:56:fa:5a:66:3e:ab:1a:b3:01:89:ca:ce:bc:
         c9:d0:2f:e1:b7:46:b8:11:3d:1b:23:5f:69:69:4f:dd:de:10:
         4d:93:17:36:b5:a5:71:64:e0:8f:ed:70:11:c9:75:1c:6a:98:
         76:f6:8a:91:c2:a8:57:ba:a9:4b:20:9b:22:6f:0a:93:24:f2:
         e5:f6:0a:c4:e3:90:b2:d2:b7:38:ef:fa:7f:25:ce:ab:38:a4:
         97:b8:ab:92:0f:19:4d:da:13:06:c9:f5:e3:40:07:8c:cd:63:
         57:74:93:91:ea:b7:9a:15:fc:e1:8f:68:37:51:c5:57:17:ea:
         43:f6:55:3e:cd:76:19:52:ef:85:e5:c5:52:4c:6e:79:cf:ea:
         48:c2:44:4e:e3:52:cb:97:2a:10:d0:fe:08:64:c0:3e:de:b3:
         25:50:e0:e3:0e:01:ee:a9:ab:6c:d0:b2:5a:70:0c:17:4d:c2:
         f9:80:9c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:45:11 2024 by rpki-client on console-ams.rpki-client.org