Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/00815a99-a458-3091-a374-a6e5d843be86.roa
File:                     00815a99-a458-3091-a374-a6e5d843be86.roa (raw, json)
Hash identifier:          k1YdEOLGY/VR3R/fY1bs+SBD0mSe2s8EjrsPLv9ucek=
Subject key identifier:   6D:00:B4:6A:F5:23:77:AE:B7:3D:89:AB:0E:ED:4B:B5:39:D0:0E:29
Certificate issuer:       /CN=4021c43f-b78a-496f-a8cc-814abc11a7e9
Certificate serial:       010D0C9F43285847D02C3198B8C8D3A471F0C440
Authority key identifier: 19:CD:4C:5B:6C:5B:37:AB:35:E5:06:00:A3:E3:17:AE:2F:83:53:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/00815a99-a458-3091-a374-a6e5d843be86.roa
Signing time:             Fri 08 Nov 2024 16:57:08 +0000
ROA not before:           Fri 08 Nov 2024 16:57:08 +0000
ROA not after:            Thu 06 Feb 2025 16:57:08 +0000
asID:                     49
IP address blocks:        2610:20:6f97::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4021c43f-b78a-496f-a8cc-814abc11a7e9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4021c43f-b78a-496f-a8cc-814abc11a7e9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d0:2c:31:98:b8:c8:d3:a4:71:f0:c4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4021c43f-b78a-496f-a8cc-814abc11a7e9
        Validity
            Not Before: Nov  8 16:57:08 2024 GMT
            Not After : Feb  6 16:57:08 2025 GMT
        Subject: CN=c6a0b9c9-478a-4396-b487-a58f9a359b37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:3d:df:54:ae:ac:79:6d:89:ef:b8:b7:eb:e2:
                    af:0c:d7:cb:2b:af:56:b6:b2:bc:56:67:da:a4:25:
                    86:b2:d7:b6:65:40:97:6c:ab:12:22:d7:47:6e:88:
                    25:9b:48:10:cc:a7:d2:65:b1:30:4f:5c:2a:90:36:
                    46:af:f8:5b:a1:9a:88:40:66:e6:2d:3a:bc:94:c3:
                    90:b4:a9:32:59:0a:d6:18:31:a4:66:f0:25:d7:da:
                    21:9b:90:b1:36:aa:52:8c:e3:7d:f2:6c:6e:5f:a8:
                    43:99:c0:29:7f:3a:33:fe:c1:58:54:23:09:5d:37:
                    26:8d:58:75:26:5c:cc:bc:a3:01:2b:ce:43:89:de:
                    27:4e:78:6d:bb:05:80:7d:d1:80:9e:20:40:c1:fd:
                    66:09:d9:51:4a:31:75:b4:39:be:c2:9c:2f:7b:d7:
                    ae:9e:35:7a:d5:d5:7e:52:aa:14:d5:2c:7d:0c:b2:
                    b3:98:f1:1a:fd:7c:64:61:f3:3b:d7:7f:de:4d:d0:
                    e7:8c:2b:53:18:80:b5:94:3c:51:3f:b9:d4:4c:f8:
                    41:dc:5a:9d:fe:32:e9:8c:fc:dc:03:b6:b2:89:41:
                    34:60:c8:70:1e:41:63:3c:be:8f:e7:89:d1:b4:d8:
                    e7:17:db:01:0a:7d:f3:3c:70:05:28:45:9d:80:4d:
                    16:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:00:B4:6A:F5:23:77:AE:B7:3D:89:AB:0E:ED:4B:B5:39:D0:0E:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/00815a99-a458-3091-a374-a6e5d843be86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4021c43f-b78a-496f-a8cc-814abc11a7e9.crl

            X509v3 Authority Key Identifier:
                keyid:19:CD:4C:5B:6C:5B:37:AB:35:E5:06:00:A3:E3:17:AE:2F:83:53:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:20:6f97::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:36:98:3f:93:5b:d0:9a:81:5d:af:1f:7f:a9:2f:dd:3e:92:
         08:98:57:2a:59:f3:cc:51:8a:1d:62:87:09:8a:4d:75:1b:23:
         43:be:e5:99:c1:00:a9:98:2a:c7:92:dd:cc:59:30:cd:15:a7:
         76:32:68:69:83:c9:c8:fb:76:28:b1:81:a5:e5:61:0d:f6:c6:
         b9:ea:12:7e:05:61:6a:c3:60:e1:7b:6b:67:32:0c:b8:22:57:
         14:e6:ba:7e:41:c1:e7:32:fb:aa:35:76:d7:92:72:c1:45:51:
         d5:9c:72:3e:1b:e1:3c:47:65:e6:c9:45:55:21:17:c8:ac:f6:
         2f:f3:a9:f5:de:86:b3:f8:9e:eb:0d:8e:4e:f4:7a:42:98:58:
         9d:32:ca:aa:53:5f:ab:d7:0f:ce:2d:01:fc:76:cf:bc:ea:9f:
         64:e4:bc:6e:ea:82:7f:49:29:d1:55:3d:13:d8:72:5a:59:9e:
         7d:e6:be:7f:d4:75:2e:f9:39:8a:05:4c:12:41:8b:19:3d:62:
         a2:fa:e8:21:d4:df:a9:d5:03:f3:4d:dc:e4:24:b0:bc:ff:2f:
         5d:d3:d8:80:43:c7:19:98:33:87:04:da:75:f7:6d:80:1c:d3:
         af:60:04:c0:0b:02:27:99:33:fc:c2:ca:8d:fb:87:70:24:65:
         fe:cc:b8:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:36:28 2024 by rpki-client on console-fra.rpki-client.org