Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2fcde55-dd78-49f8-8c66-802a68b8f6c4/9505f0a3-0703-386f-b4ed-699788414aa7.roa
File:                     9505f0a3-0703-386f-b4ed-699788414aa7.roa (raw, json)
Hash identifier:          vFKXQc+7xjnfQDtGFy+CQ9CUdabmBg7wpBjR+hWCANo=
Subject key identifier:   31:94:B5:10:37:24:37:D5:EE:F8:05:33:05:CA:09:81:C7:B5:D3:AB
Certificate issuer:       /CN=f2fcde55-dd78-49f8-8c66-802a68b8f6c4
Certificate serial:       010D0C9F4328584765A0F589AFFAE5A71EE4FC00
Authority key identifier: 59:20:26:E6:D7:C6:47:62:EE:A3:1C:A3:AC:33:A5:32:CC:CD:15:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2fcde55-dd78-49f8-8c66-802a68b8f6c4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2fcde55-dd78-49f8-8c66-802a68b8f6c4/9505f0a3-0703-386f-b4ed-699788414aa7.roa
Signing time:             Tue 01 Oct 2024 13:00:42 +0000
ROA not before:           Tue 01 Oct 2024 13:00:42 +0000
ROA not after:            Mon 30 Dec 2024 14:00:42 +0000
asID:                     13737
IP address blocks:        2620:11f:7009::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2fcde55-dd78-49f8-8c66-802a68b8f6c4/f2fcde55-dd78-49f8-8c66-802a68b8f6c4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2fcde55-dd78-49f8-8c66-802a68b8f6c4/f2fcde55-dd78-49f8-8c66-802a68b8f6c4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2fcde55-dd78-49f8-8c66-802a68b8f6c4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:65:a0:f5:89:af:fa:e5:a7:1e:e4:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2fcde55-dd78-49f8-8c66-802a68b8f6c4
        Validity
            Not Before: Oct  1 13:00:42 2024 GMT
            Not After : Dec 30 14:00:42 2024 GMT
        Subject: CN=e22452aa-56cf-4594-b87e-4db309943aea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ad:3c:f3:5d:38:84:1d:5c:38:91:b5:ae:95:
                    0b:fb:97:b4:5e:dd:38:23:d7:49:76:09:e9:d1:c4:
                    18:af:53:8a:34:20:96:35:30:55:0a:48:11:fe:0a:
                    bf:84:e0:71:16:b4:92:20:03:29:43:12:70:eb:df:
                    3e:f8:fe:e4:9b:4d:24:37:f3:c5:ce:40:05:e7:50:
                    a5:3b:b4:e7:dc:2d:93:37:8b:b5:cd:a4:0f:a9:8f:
                    e6:42:2e:29:69:ef:cc:50:eb:7f:51:3a:fd:ab:37:
                    63:4c:68:6b:8f:e6:e2:7f:32:bf:71:33:a2:39:7d:
                    c1:59:8f:8f:dc:58:f2:38:26:44:4a:be:aa:51:96:
                    79:67:7a:12:01:8b:ad:9c:8e:71:e4:0b:10:ce:96:
                    22:e9:86:3c:1f:15:74:a7:c2:47:27:9a:52:49:33:
                    f7:a7:74:0c:de:b0:03:5d:1f:9e:84:e8:6c:50:01:
                    d4:91:72:95:63:a7:45:94:85:fd:6c:98:be:48:36:
                    14:62:56:a5:f2:0e:73:f1:10:6b:5e:e6:c7:79:19:
                    98:eb:8a:ed:aa:01:8c:84:e8:2d:24:98:f3:07:e0:
                    1e:6b:18:40:bd:3d:28:d9:c1:1f:31:fa:7c:64:c4:
                    00:e3:96:63:97:71:2c:07:3d:13:96:2a:4f:9f:ce:
                    a4:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:94:B5:10:37:24:37:D5:EE:F8:05:33:05:CA:09:81:C7:B5:D3:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2fcde55-dd78-49f8-8c66-802a68b8f6c4/9505f0a3-0703-386f-b4ed-699788414aa7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2fcde55-dd78-49f8-8c66-802a68b8f6c4/f2fcde55-dd78-49f8-8c66-802a68b8f6c4.crl

            X509v3 Authority Key Identifier:
                keyid:59:20:26:E6:D7:C6:47:62:EE:A3:1C:A3:AC:33:A5:32:CC:CD:15:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2fcde55-dd78-49f8-8c66-802a68b8f6c4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:11f:7009::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:db:76:ab:ad:b2:84:8e:12:0d:06:8f:84:ae:3c:b9:54:03:
         f0:43:d6:d8:a5:b5:6a:2f:89:0e:34:c1:b4:20:dc:80:a7:e3:
         70:e1:70:24:86:71:0f:0b:f1:1b:72:10:cf:6b:62:da:4b:4c:
         a5:45:17:fd:c7:d3:22:0f:19:f0:51:d8:a7:6c:39:1e:24:d9:
         69:42:68:f0:bd:e4:f6:5a:92:ff:f6:68:6c:9b:81:63:49:46:
         11:19:2b:47:7e:2a:72:44:ca:af:d5:bc:6d:43:ac:44:01:97:
         3d:ff:38:c6:61:e3:47:ef:9f:c3:45:96:4b:d1:0d:9b:3e:8b:
         8a:d3:15:30:2f:8d:62:15:33:ee:17:4a:47:fc:0d:02:10:28:
         f2:2e:26:40:f6:3b:cc:4b:cd:35:4e:67:94:0b:b4:8a:16:f9:
         60:6a:6a:a1:dc:a7:05:2d:3b:7d:ea:11:8f:89:d2:7d:f5:31:
         93:78:6e:13:79:16:1b:ab:79:93:43:b4:e7:27:0f:85:65:29:
         87:6a:5f:83:39:25:92:3b:cf:24:f3:79:18:99:1f:9e:2e:e6:
         de:70:56:2f:e0:bb:e4:36:7f:11:2f:76:25:62:02:b9:54:ac:
         ce:5d:73:36:d4:d1:d7:d8:02:0f:f6:9f:fe:4b:d6:cf:ef:6b:
         5b:d1:a8:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:25:18 2024 by rpki-client on console-fra.rpki-client.org