Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c4608cb8-a1d0-40aa-8b05-a597157bb1bf/92f50bb4-500d-3973-8016-ce46dbe2eb06.roa
File:                     92f50bb4-500d-3973-8016-ce46dbe2eb06.roa (raw, json)
Hash identifier:          qxnCrgjegzVK4f2NICUe2Nt4hcch7HzZzqDQ2tNbU5U=
Subject key identifier:   23:29:CD:A1:DF:FB:70:53:52:F9:71:4A:4A:E5:02:B1:F7:FD:68:D0
Certificate issuer:       /CN=c4608cb8-a1d0-40aa-8b05-a597157bb1bf
Certificate serial:       010D0C9F432858477C9396B656EBC7C20822C58C
Authority key identifier: 67:2A:E3:EB:9E:ED:46:3C:EE:76:FF:EE:C2:BB:86:EC:2A:A6:E2:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c4608cb8-a1d0-40aa-8b05-a597157bb1bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c4608cb8-a1d0-40aa-8b05-a597157bb1bf/92f50bb4-500d-3973-8016-ce46dbe2eb06.roa
Signing time:             Wed 09 Oct 2024 18:17:33 +0000
ROA not before:           Wed 09 Oct 2024 18:17:33 +0000
ROA not after:            Tue 07 Jan 2025 19:17:33 +0000
asID:                     54070
IP address blocks:        2620:dc:8000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c4608cb8-a1d0-40aa-8b05-a597157bb1bf/c4608cb8-a1d0-40aa-8b05-a597157bb1bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c4608cb8-a1d0-40aa-8b05-a597157bb1bf/c4608cb8-a1d0-40aa-8b05-a597157bb1bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c4608cb8-a1d0-40aa-8b05-a597157bb1bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7c:93:96:b6:56:eb:c7:c2:08:22:c5:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4608cb8-a1d0-40aa-8b05-a597157bb1bf
        Validity
            Not Before: Oct  9 18:17:33 2024 GMT
            Not After : Jan  7 19:17:33 2025 GMT
        Subject: CN=12af0f74-3d4e-46b8-8f0f-94d481e78cea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:84:1e:62:11:4c:42:1a:f7:a8:77:0a:a5:68:
                    cc:d3:9e:ce:cd:79:5b:d8:35:31:fb:5c:46:b1:9c:
                    d5:6d:41:cd:c9:d1:a3:15:08:a6:a8:fa:e6:3a:62:
                    7a:97:10:78:6c:d7:a4:9b:bc:97:e0:d3:7f:e8:9b:
                    dd:6d:cf:0e:fc:4c:2e:97:bb:30:8c:71:17:c1:e9:
                    b3:46:04:c2:88:dd:34:1a:25:48:ce:1d:c5:23:4a:
                    6a:31:8d:18:e9:1d:ee:62:a0:34:64:a2:ea:96:a5:
                    dd:89:66:b8:14:ae:ce:67:0f:31:f3:96:76:dc:43:
                    d9:65:b4:52:fa:b2:de:25:70:26:e1:5d:cf:9f:8f:
                    93:4f:0f:ea:2f:c3:92:0b:e1:fe:64:12:f9:ac:29:
                    8c:c0:56:e5:8d:de:ab:c6:ce:48:7e:81:04:62:91:
                    f1:29:0f:15:de:4c:16:17:f2:df:d5:23:19:4e:e4:
                    86:35:cc:78:a0:a9:42:44:0d:37:22:3d:db:09:e8:
                    11:3e:28:c4:31:2b:b6:ba:ed:7d:62:15:68:85:55:
                    7f:6d:fc:61:bf:dc:85:39:3b:ee:04:fe:9b:66:a3:
                    e1:61:e5:ae:22:f5:8f:62:bc:cc:60:85:ad:27:ae:
                    6c:9b:23:1d:48:a2:4e:a6:a9:4a:a6:5b:4e:84:ab:
                    26:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:29:CD:A1:DF:FB:70:53:52:F9:71:4A:4A:E5:02:B1:F7:FD:68:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c4608cb8-a1d0-40aa-8b05-a597157bb1bf/92f50bb4-500d-3973-8016-ce46dbe2eb06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c4608cb8-a1d0-40aa-8b05-a597157bb1bf/c4608cb8-a1d0-40aa-8b05-a597157bb1bf.crl

            X509v3 Authority Key Identifier:
                keyid:67:2A:E3:EB:9E:ED:46:3C:EE:76:FF:EE:C2:BB:86:EC:2A:A6:E2:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c4608cb8-a1d0-40aa-8b05-a597157bb1bf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:dc:8000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:2a:43:f2:72:73:69:1f:f2:22:3b:d9:e9:5f:a0:94:67:9e:
         d4:ba:20:08:45:88:75:b1:81:af:5f:4c:a5:04:46:3c:54:bd:
         22:07:17:ca:15:23:ef:71:ed:81:e8:52:9f:5b:d7:f2:e3:44:
         3e:2c:50:cd:32:63:a9:2e:cb:0e:20:bd:65:3a:ca:e5:0f:28:
         53:b6:21:45:d0:96:96:e3:e6:2e:ba:e8:40:de:f4:7e:3e:34:
         94:33:4a:09:bc:82:69:7c:48:e3:c3:71:a4:ea:98:e1:02:6e:
         f4:ca:64:0c:2b:41:9a:21:26:b9:fb:1a:89:b2:63:c4:34:11:
         24:47:d5:7a:3e:d2:a3:b0:31:e0:a0:b4:b0:b0:10:de:08:21:
         32:b1:2b:0f:a9:54:db:f2:0b:f7:ba:65:f0:e4:85:db:cc:88:
         ba:50:c3:7c:87:23:96:7b:55:f3:19:b0:e5:88:74:bb:fe:3f:
         b9:b2:2d:22:64:ef:0b:0a:8f:51:cc:16:66:bf:16:4f:8c:16:
         15:34:66:92:9c:8b:d1:6a:52:93:d5:54:a1:d8:18:b0:b1:0e:
         aa:bc:f7:d4:64:f9:bc:9d:77:44:80:1d:5a:bb:9d:e5:3e:a8:
         01:ba:16:fa:60:82:3f:45:1e:19:a3:97:05:6f:37:ce:43:5b:
         22:d6:7c:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:36:32 2024 by rpki-client on console-fra.rpki-client.org