Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/c7e8382c-9b60-35b0-a35c-9dc928aca465.roa
File:                     c7e8382c-9b60-35b0-a35c-9dc928aca465.roa (raw, json)
Hash identifier:          alLunNRcG1PFfXNPVn/JyM188Dqc6oDScEPVOPmRtBA=
Subject key identifier:   3D:DD:6D:11:0A:88:01:A0:45:5C:2B:DD:F0:29:D7:AA:93:D9:17:43
Certificate issuer:       /CN=4021c43f-b78a-496f-a8cc-814abc11a7e9
Certificate serial:       010D0C9F43285847D081F986F7D247948BFADD00
Authority key identifier: 19:CD:4C:5B:6C:5B:37:AB:35:E5:06:00:A3:E3:17:AE:2F:83:53:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/c7e8382c-9b60-35b0-a35c-9dc928aca465.roa
Signing time:             Fri 08 Nov 2024 19:49:58 +0000
ROA not before:           Fri 08 Nov 2024 19:49:58 +0000
ROA not after:            Thu 06 Feb 2025 19:49:58 +0000
asID:                     49
IP address blocks:        2610:20:6fcf::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4021c43f-b78a-496f-a8cc-814abc11a7e9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4021c43f-b78a-496f-a8cc-814abc11a7e9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d0:81:f9:86:f7:d2:47:94:8b:fa:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4021c43f-b78a-496f-a8cc-814abc11a7e9
        Validity
            Not Before: Nov  8 19:49:58 2024 GMT
            Not After : Feb  6 19:49:58 2025 GMT
        Subject: CN=cbcd5667-dec9-4d45-89ac-cf797b10190f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f5:04:33:de:74:77:2e:cc:cc:2d:86:80:1c:
                    1a:81:60:d4:12:c6:82:2c:6a:ab:78:46:d6:a4:79:
                    b6:b9:c2:36:11:b9:d1:95:f6:fa:72:85:c7:ed:dd:
                    5e:d5:97:6c:68:45:21:d2:fa:fc:1a:7e:3c:7d:77:
                    c7:00:f4:5b:e9:b4:0a:9d:b5:ca:56:92:fd:f4:f5:
                    d2:81:28:16:3f:ed:fc:5a:29:a8:f0:bd:6f:6a:f7:
                    44:c0:41:ac:7c:7d:d8:67:ee:0d:99:6a:73:ce:64:
                    c5:e5:86:76:b0:35:6f:f1:72:c9:c5:90:1b:66:5f:
                    2a:8d:26:af:d8:71:7d:47:47:3c:ee:c0:27:f4:a0:
                    25:42:a1:3e:b5:00:4d:93:19:91:1c:bd:36:1f:30:
                    60:87:60:77:f2:42:83:2e:db:c3:6e:2d:3c:a6:ba:
                    34:bb:2c:8c:0b:2c:b5:0b:ec:d0:cb:94:ed:6d:9b:
                    a9:c5:dd:01:15:8a:33:a7:ba:60:68:ec:c4:f9:50:
                    51:c9:b7:87:ef:ab:bf:d6:59:5a:15:72:fb:49:b9:
                    bf:de:96:28:dd:04:6b:e8:f2:33:dd:e6:ae:48:bf:
                    b3:d3:1a:d2:1a:4f:9c:12:29:45:be:55:bb:f2:cc:
                    5e:55:cf:ab:20:bb:e2:56:ca:67:dc:bc:c1:24:25:
                    71:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:DD:6D:11:0A:88:01:A0:45:5C:2B:DD:F0:29:D7:AA:93:D9:17:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/c7e8382c-9b60-35b0-a35c-9dc928aca465.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4021c43f-b78a-496f-a8cc-814abc11a7e9.crl

            X509v3 Authority Key Identifier:
                keyid:19:CD:4C:5B:6C:5B:37:AB:35:E5:06:00:A3:E3:17:AE:2F:83:53:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:20:6fcf::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:a0:24:e0:67:be:8b:95:86:df:b8:f9:65:44:98:7a:bc:24:
         28:5b:3e:8f:e3:28:ca:c5:68:75:41:0b:a9:2d:2a:03:d2:d9:
         db:03:db:22:11:8f:d3:c1:5d:76:1d:b6:4c:d8:23:a0:70:3c:
         72:d1:4f:56:d7:32:3d:6e:1d:03:84:c2:bf:da:dc:61:1b:57:
         ca:d3:85:c0:63:4b:a4:e2:72:15:03:ee:dc:d9:31:06:8f:e2:
         47:55:d1:5b:00:43:ee:24:31:ed:f8:6b:39:3f:bc:8c:5b:76:
         39:2b:50:c8:24:6c:31:d7:25:86:2d:bd:73:27:ad:61:29:fb:
         fe:c2:c4:08:11:08:fd:f6:fb:44:06:a9:eb:6f:15:18:ea:29:
         21:cf:6f:6f:ea:19:9a:fa:de:98:9d:cf:a9:9a:5e:da:3b:77:
         d5:9d:91:1a:db:21:48:cd:54:99:b5:eb:f4:bf:b2:bc:51:d9:
         7a:12:c3:aa:a1:5d:55:18:1c:c4:53:5f:d4:ad:64:ec:ed:95:
         90:a1:bb:ae:f7:10:4a:71:35:ac:da:82:94:dd:df:ce:c0:fb:
         19:53:f7:24:a4:b5:fd:8a:9c:d6:41:4c:b9:25:03:36:cb:dc:
         a4:15:7a:56:b0:d5:21:a8:7d:ba:a1:1b:4e:c1:6d:db:9e:fe:
         8b:2c:90:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:36:28 2024 by rpki-client on console-fra.rpki-client.org