Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdcd237b-8c52-4d20-808c-c916ddbd962f/43d67fc8-2e35-348a-af72-a429da333501.roa
File:                     43d67fc8-2e35-348a-af72-a429da333501.roa (raw, json)
Hash identifier:          mRXgs7KEIvZ4tGcpm8TYXsHzO1S4SvngG/BvW3700CI=
Subject key identifier:   38:6E:6E:C7:58:97:43:EA:80:20:D6:55:66:4D:80:FA:74:89:0A:B1
Certificate issuer:       /CN=cdcd237b-8c52-4d20-808c-c916ddbd962f
Certificate serial:       010D0C9F43285847BD915C32A58A28E138ECC460
Authority key identifier: 49:56:C4:C7:34:EE:62:CF:ED:7F:76:92:74:A9:78:8A:BC:8E:9F:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdcd237b-8c52-4d20-808c-c916ddbd962f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdcd237b-8c52-4d20-808c-c916ddbd962f/43d67fc8-2e35-348a-af72-a429da333501.roa
Signing time:             Sat 02 Nov 2024 01:00:31 +0000
ROA not before:           Sat 02 Nov 2024 01:00:31 +0000
ROA not after:            Fri 31 Jan 2025 02:00:31 +0000
asID:                     16509
IP address blocks:        2620:c3:6000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdcd237b-8c52-4d20-808c-c916ddbd962f/cdcd237b-8c52-4d20-808c-c916ddbd962f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdcd237b-8c52-4d20-808c-c916ddbd962f/cdcd237b-8c52-4d20-808c-c916ddbd962f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdcd237b-8c52-4d20-808c-c916ddbd962f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:bd:91:5c:32:a5:8a:28:e1:38:ec:c4:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdcd237b-8c52-4d20-808c-c916ddbd962f
        Validity
            Not Before: Nov  2 01:00:31 2024 GMT
            Not After : Jan 31 02:00:31 2025 GMT
        Subject: CN=2932c6d1-e01b-4da3-a37a-7f635bd7a123
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:99:9e:ad:bb:1b:e5:1e:f3:35:5c:e3:fc:94:
                    fe:88:b6:c3:ce:82:01:b1:14:8b:5f:58:a7:f0:13:
                    92:a8:92:2f:88:d6:89:48:03:0d:15:e8:2e:d9:f0:
                    45:a2:4c:4b:63:d4:77:06:33:7f:83:4a:25:fa:ca:
                    d5:7f:9b:d2:a2:fb:29:2f:34:86:1b:78:cc:92:a9:
                    1c:84:5e:3a:71:82:00:1e:a8:e3:c8:b8:6a:33:9d:
                    9f:98:94:fc:a6:19:9e:4d:83:c3:73:0d:8a:9e:dd:
                    0d:c1:a0:a1:f6:36:0c:86:7a:f4:35:f3:41:3d:de:
                    86:39:f4:c7:8c:f8:ef:f6:eb:00:6c:08:53:d3:62:
                    2d:a6:cd:8f:9e:5a:d3:fe:cb:56:1f:ff:3d:fa:ac:
                    ba:4b:e9:9d:20:84:e3:20:15:44:c1:45:c7:dd:d8:
                    dd:07:ba:4c:42:13:ac:3a:e3:3f:dd:3a:59:27:a0:
                    50:96:70:75:bf:3f:a1:1c:34:d4:ee:c8:a9:4d:63:
                    11:2e:0c:a5:3b:d2:2f:0e:16:82:1a:c8:cb:de:9d:
                    82:6a:e0:d0:f5:fa:e3:f2:3a:2c:ce:df:d2:09:01:
                    e8:f3:5d:91:3d:82:b4:e4:2b:1b:de:01:f8:55:7b:
                    96:62:38:f7:4c:e0:04:cd:e4:33:72:e0:f8:b8:0e:
                    7f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:6E:6E:C7:58:97:43:EA:80:20:D6:55:66:4D:80:FA:74:89:0A:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdcd237b-8c52-4d20-808c-c916ddbd962f/43d67fc8-2e35-348a-af72-a429da333501.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdcd237b-8c52-4d20-808c-c916ddbd962f/cdcd237b-8c52-4d20-808c-c916ddbd962f.crl

            X509v3 Authority Key Identifier:
                keyid:49:56:C4:C7:34:EE:62:CF:ED:7F:76:92:74:A9:78:8A:BC:8E:9F:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdcd237b-8c52-4d20-808c-c916ddbd962f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:c3:6000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:53:ba:d5:5d:44:f8:5c:94:8e:7a:ea:70:82:ea:6b:56:8e:
         c6:ba:10:cc:0c:67:7e:ca:4c:0f:9e:53:fa:f7:11:58:78:5c:
         0a:88:f7:a9:b0:7c:20:4c:d7:9e:1c:da:c7:f0:07:bf:bf:8f:
         70:1d:b2:c3:f5:38:af:3b:8c:91:fe:21:72:71:ce:68:55:27:
         1b:9a:38:37:86:f1:c6:9f:2a:5d:14:84:76:59:44:a7:2a:ba:
         ff:9a:04:4d:05:5f:c7:d1:c6:ff:db:7c:91:b9:f5:a8:21:9d:
         2d:54:c6:da:40:35:f8:b2:2e:f6:7f:9d:0d:16:e4:a6:d9:a7:
         ad:9f:cd:da:fc:26:e2:17:9d:0b:5b:ee:a5:c5:01:10:21:38:
         5c:54:c6:f3:d2:db:8b:f6:50:32:b2:19:64:d7:aa:bf:aa:a4:
         b1:b4:34:81:5c:d8:63:db:b7:be:07:3d:e1:0d:a3:a1:2e:1a:
         b7:40:7e:67:15:bc:75:cc:2d:1f:71:91:89:f9:00:a3:73:2d:
         da:2d:3a:1e:e4:88:65:f2:9c:47:8b:9c:10:f8:26:96:95:73:
         4f:68:bc:f5:d9:cd:3e:a8:92:4e:dd:33:4d:8e:6e:9d:b1:d7:
         7b:74:82:57:95:3b:e0:7a:26:55:8c:d4:70:45:13:5c:c4:b8:
         7b:ef:43:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:35:31 2024 by rpki-client on console-fra.rpki-client.org