Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/0725437c-bed3-3c6c-bc1b-065eec9cead5.roa
File:                     0725437c-bed3-3c6c-bc1b-065eec9cead5.roa (raw, json)
Hash identifier:          5kQrLJ4qjDRp5dQgk+Jcbgtdbsv/wTBBFL3hU24P4sM=
Subject key identifier:   21:E5:0A:1C:BF:38:E7:DA:61:B3:A7:C5:2D:E8:A5:18:33:2F:8D:71
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F432858475BDB8017E7F766C078D51580
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/0725437c-bed3-3c6c-bc1b-065eec9cead5.roa
Signing time:             Sat 28 Sep 2024 01:00:31 +0000
ROA not before:           Sat 28 Sep 2024 01:00:31 +0000
ROA not after:            Fri 27 Dec 2024 02:00:31 +0000
asID:                     15290
IP address blocks:        2001:4c8:108d::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5b:db:80:17:e7:f7:66:c0:78:d5:15:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Sep 28 01:00:31 2024 GMT
            Not After : Dec 27 02:00:31 2024 GMT
        Subject: CN=d6e66acf-b079-4211-9fa3-32a12b477eae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:94:b6:7d:ff:2d:24:df:14:6e:cc:12:be:05:
                    93:9f:21:bd:e1:50:7b:df:5c:7f:88:16:6e:85:26:
                    23:18:50:c9:8c:84:7f:8a:ad:e1:83:70:df:70:6f:
                    c5:39:5f:4f:79:71:72:4a:2d:b2:df:3b:f2:a1:0d:
                    ce:78:b1:0f:02:45:cf:b5:2b:6a:04:fd:af:5f:7f:
                    0f:4b:34:e9:f8:83:1f:ee:f0:e7:a2:c2:d2:04:c3:
                    89:c6:cc:56:45:54:2c:d4:d4:ec:67:6d:3c:3b:98:
                    9e:69:73:44:94:80:2c:4b:b6:12:7b:f2:62:01:3f:
                    f5:dd:1a:a9:84:17:7e:ee:84:fd:a9:1a:9f:88:86:
                    ae:b1:5e:f1:b5:e5:59:f0:8a:a6:6f:54:18:8e:bb:
                    d2:e7:04:d3:b7:54:d8:bf:fa:4b:cc:2f:43:73:c6:
                    b3:d9:3a:9e:76:2d:2b:3c:c0:8b:c6:b9:8d:bc:18:
                    10:3d:22:5b:56:35:40:6c:5c:e7:55:59:37:7c:40:
                    4a:ef:74:bc:81:df:b6:ff:1a:ad:f0:28:83:1d:c6:
                    3d:a7:c2:3e:b7:cf:b0:01:16:89:1c:07:34:01:4e:
                    d4:f5:06:21:e4:e3:1f:42:a3:ae:c8:00:78:d1:68:
                    e9:26:f2:74:8a:2c:d2:2a:66:22:10:46:b9:a6:e1:
                    36:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:E5:0A:1C:BF:38:E7:DA:61:B3:A7:C5:2D:E8:A5:18:33:2F:8D:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/0725437c-bed3-3c6c-bc1b-065eec9cead5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4c8:108d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:28:94:3a:92:cc:05:5e:ba:96:16:0f:e9:59:36:8d:c4:a0:
         a2:c6:81:70:12:0c:bc:0a:a5:da:1a:0e:47:15:9c:43:fb:c5:
         9f:a1:9a:7f:14:a8:02:63:f9:57:24:7c:62:a5:83:5d:8e:8c:
         5d:ac:e8:61:62:cb:28:95:8e:71:f2:89:8d:7a:61:dd:a1:4c:
         e9:3f:12:35:73:74:fa:0b:a9:6e:5f:80:78:b1:a1:93:34:fb:
         38:c7:c2:74:e2:28:55:94:e8:6b:67:15:e7:7c:62:3d:3b:f0:
         a7:a2:b8:17:19:13:54:3d:45:8b:f7:f6:5c:f1:c9:b6:4b:33:
         c3:8e:17:58:ac:63:3a:9a:40:77:ed:58:62:8a:8e:86:82:15:
         b2:bd:8b:3c:35:17:e7:eb:a0:e4:88:c6:d7:d1:03:04:23:ec:
         cf:e6:7f:c0:a8:15:66:72:8e:25:ac:ac:36:38:56:a1:5e:b1:
         1f:5f:12:8d:2e:a5:cd:73:ef:a7:c4:dd:49:e3:c1:f8:e8:78:
         8b:86:73:03:c1:95:b0:25:dd:c6:76:82:81:fb:d5:f7:26:fe:
         11:58:5b:fd:13:69:dd:23:86:73:c8:bb:92:c5:b9:cc:21:5f:
         67:94:56:0e:f1:d4:a6:dc:02:ea:4b:2c:72:ea:bf:60:f6:1d:
         d8:59:8e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:15:31 2024 by rpki-client on console-ams.rpki-client.org