Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2fcde55-dd78-49f8-8c66-802a68b8f6c4/9e778761-5dd5-3836-af97-180e9c9bae86.roa
File:                     9e778761-5dd5-3836-af97-180e9c9bae86.roa (raw, json)
Hash identifier:          uaINB7LgzsgcEKknUs8KjioC7dTeoZqXY1JiqviPVRw=
Subject key identifier:   E4:D8:B2:D7:C0:BD:CB:C8:F3:D0:93:E0:E3:A2:1A:B1:A0:A5:EA:AB
Certificate issuer:       /CN=f2fcde55-dd78-49f8-8c66-802a68b8f6c4
Certificate serial:       010D0C9F43285847766104692870AC734BF17380
Authority key identifier: 59:20:26:E6:D7:C6:47:62:EE:A3:1C:A3:AC:33:A5:32:CC:CD:15:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2fcde55-dd78-49f8-8c66-802a68b8f6c4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2fcde55-dd78-49f8-8c66-802a68b8f6c4/9e778761-5dd5-3836-af97-180e9c9bae86.roa
Signing time:             Mon 07 Oct 2024 13:00:40 +0000
ROA not before:           Mon 07 Oct 2024 13:00:40 +0000
ROA not after:            Sun 05 Jan 2025 14:00:40 +0000
asID:                     975
IP address blocks:        2620:11f:7006::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2fcde55-dd78-49f8-8c66-802a68b8f6c4/f2fcde55-dd78-49f8-8c66-802a68b8f6c4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2fcde55-dd78-49f8-8c66-802a68b8f6c4/f2fcde55-dd78-49f8-8c66-802a68b8f6c4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2fcde55-dd78-49f8-8c66-802a68b8f6c4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:76:61:04:69:28:70:ac:73:4b:f1:73:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2fcde55-dd78-49f8-8c66-802a68b8f6c4
        Validity
            Not Before: Oct  7 13:00:40 2024 GMT
            Not After : Jan  5 14:00:40 2025 GMT
        Subject: CN=ac74644b-10ea-4fb9-9142-336ea3440072
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:44:0a:eb:33:3f:bc:90:07:26:7a:ac:8e:f7:
                    3f:82:56:07:08:96:84:85:b7:0e:29:e9:de:3f:f1:
                    5a:63:e2:43:3d:c1:9e:2f:1f:35:e9:90:72:85:db:
                    d3:69:85:88:ab:ef:26:11:bb:ee:f0:51:9b:f9:88:
                    b5:69:fc:15:6c:93:4b:a8:40:03:e6:9c:54:52:6d:
                    bf:b4:88:5f:61:e8:e8:05:f3:33:0a:47:b6:c5:47:
                    8e:c2:2e:07:a6:4d:15:be:b4:6e:7a:16:dd:6b:73:
                    82:fb:41:93:4d:30:48:eb:ee:9a:cc:1d:0b:bc:05:
                    63:10:4c:7a:93:a9:45:5a:84:23:13:6b:d2:36:7b:
                    b9:b6:64:20:fe:17:9a:58:e8:17:3d:df:02:52:f2:
                    25:e1:be:fe:d7:b0:73:46:8d:50:4e:74:ce:ec:2a:
                    24:21:52:2f:41:b3:81:5d:0d:ee:82:2e:a1:3f:94:
                    31:a6:86:2e:80:70:d1:8c:99:51:c2:23:ac:a9:64:
                    1f:f6:95:94:6f:dd:6f:34:b4:07:e5:5b:ab:f7:12:
                    5e:5e:a6:4c:01:e6:69:f8:56:50:6a:da:8a:de:65:
                    fd:39:61:46:48:99:5a:28:38:b9:fe:d8:f0:1c:85:
                    59:bb:58:7c:11:0d:82:a0:37:f0:37:4f:43:29:0f:
                    74:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:D8:B2:D7:C0:BD:CB:C8:F3:D0:93:E0:E3:A2:1A:B1:A0:A5:EA:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2fcde55-dd78-49f8-8c66-802a68b8f6c4/9e778761-5dd5-3836-af97-180e9c9bae86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2fcde55-dd78-49f8-8c66-802a68b8f6c4/f2fcde55-dd78-49f8-8c66-802a68b8f6c4.crl

            X509v3 Authority Key Identifier:
                keyid:59:20:26:E6:D7:C6:47:62:EE:A3:1C:A3:AC:33:A5:32:CC:CD:15:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2fcde55-dd78-49f8-8c66-802a68b8f6c4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:11f:7006::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:b8:2a:b4:c1:7c:ce:e3:68:2d:0d:f3:ce:21:a8:e8:60:a4:
         4a:ef:21:06:43:b5:30:b0:c3:1d:f6:4e:25:f6:04:81:ae:53:
         90:32:48:56:be:bb:51:02:a3:f6:45:ec:f6:40:d3:95:d8:87:
         f8:1c:e5:6a:98:21:54:fa:11:d9:19:62:aa:20:ed:00:2f:8c:
         d3:6e:b7:ea:3a:1e:e1:51:89:31:0e:85:f2:f1:ea:dd:ba:82:
         26:63:48:a5:97:9a:f3:9c:6c:b0:a0:94:1f:a2:79:32:dc:9c:
         b4:62:00:9b:ca:b0:db:75:bb:47:2f:71:2f:62:c7:1c:a2:36:
         a6:ef:9b:89:93:04:af:27:33:ab:72:93:93:64:15:22:db:37:
         c1:69:b3:ee:77:6d:9b:dd:90:ff:ab:0f:bf:80:49:d6:39:e9:
         b8:92:87:ab:2b:6c:6f:aa:ea:23:11:3b:54:26:2c:b1:34:d0:
         4c:92:25:0e:83:67:ac:56:0c:a0:26:16:9e:62:98:e4:c8:86:
         bb:65:0a:f1:b8:e7:6a:84:c4:b0:d8:4b:2e:9e:a5:1f:e9:9b:
         b2:6f:6a:36:a0:e3:bb:b3:5b:43:96:a3:5c:e6:cd:cf:ac:09:
         0a:72:1e:2a:89:e6:e3:e4:a8:a7:f0:66:fc:ae:ce:9f:bb:9e:
         a0:a3:79:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:40:09 2024 by rpki-client on console-ams.rpki-client.org