Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/371ccf45-cbe8-46b3-8dee-e2270c15d111/e6e1a268-1e9d-3172-b41c-a34e5bd252be.roa
File:                     e6e1a268-1e9d-3172-b41c-a34e5bd252be.roa (raw, json)
Hash identifier:          ssw5MrXYzgAlqXPyw9bo4DVagGTMqWUOQbvibKgNqRY=
Subject key identifier:   96:94:98:4E:33:07:76:10:20:9B:0E:0D:DD:0D:CB:AE:B3:65:0E:DE
Certificate issuer:       /CN=371ccf45-cbe8-46b3-8dee-e2270c15d111
Certificate serial:       010D0C9F43285847967BC5700E19456A037FF680
Authority key identifier: FF:00:9B:87:BE:7C:CF:30:63:A9:E5:E3:81:C2:80:10:6F:5B:D8:EF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/371ccf45-cbe8-46b3-8dee-e2270c15d111.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/371ccf45-cbe8-46b3-8dee-e2270c15d111/e6e1a268-1e9d-3172-b41c-a34e5bd252be.roa
Signing time:             Sat 19 Oct 2024 01:00:33 +0000
ROA not before:           Sat 19 Oct 2024 01:00:33 +0000
ROA not after:            Fri 17 Jan 2025 02:00:33 +0000
asID:                     36081
IP address blocks:        2620:0:eb0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/371ccf45-cbe8-46b3-8dee-e2270c15d111/371ccf45-cbe8-46b3-8dee-e2270c15d111.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/371ccf45-cbe8-46b3-8dee-e2270c15d111/371ccf45-cbe8-46b3-8dee-e2270c15d111.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/371ccf45-cbe8-46b3-8dee-e2270c15d111.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:96:7b:c5:70:0e:19:45:6a:03:7f:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=371ccf45-cbe8-46b3-8dee-e2270c15d111
        Validity
            Not Before: Oct 19 01:00:33 2024 GMT
            Not After : Jan 17 02:00:33 2025 GMT
        Subject: CN=0a70c51c-53a7-4499-8cb4-2cddf8f27fa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:72:77:cd:23:aa:e2:ee:dc:db:47:c1:e6:1b:
                    e8:33:49:99:fb:5b:b7:6a:86:5f:f8:e5:7c:bd:37:
                    ce:17:25:af:6e:24:18:a7:7f:10:5e:16:51:53:d4:
                    52:21:ac:50:f7:88:f6:37:14:71:54:30:ef:c2:4e:
                    9b:76:f2:b6:d8:72:fa:fe:7a:d2:a1:1a:3a:be:23:
                    89:fa:f0:18:ac:9c:34:bb:4c:34:b0:e3:d0:46:07:
                    a5:d0:d9:8e:39:78:30:c5:23:e4:99:56:c6:36:bd:
                    96:7f:e5:b6:ac:17:46:8d:d3:93:2f:67:9d:46:9a:
                    b0:ec:5b:54:d9:14:5b:f8:48:fc:42:15:72:f2:fb:
                    93:ff:96:06:c0:ed:e4:0a:bd:0a:6c:e3:d2:e1:59:
                    1d:65:cb:bd:4f:e4:40:dc:b6:8c:8e:6c:f7:af:b4:
                    17:ec:eb:98:0d:c8:62:a5:48:07:ac:2c:4b:65:1c:
                    20:b0:24:95:75:30:6e:eb:27:62:43:f5:8d:43:41:
                    53:99:65:89:ef:bd:6c:26:ed:41:9b:25:22:40:b0:
                    15:54:cf:4c:11:3e:1b:26:27:76:ac:6b:86:b8:41:
                    71:c0:c4:7f:1c:9d:ca:99:32:cb:57:44:7f:bc:5b:
                    76:2f:7d:fb:2a:c6:19:c3:ea:5a:3f:a5:47:38:af:
                    c3:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:94:98:4E:33:07:76:10:20:9B:0E:0D:DD:0D:CB:AE:B3:65:0E:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/371ccf45-cbe8-46b3-8dee-e2270c15d111/e6e1a268-1e9d-3172-b41c-a34e5bd252be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/371ccf45-cbe8-46b3-8dee-e2270c15d111/371ccf45-cbe8-46b3-8dee-e2270c15d111.crl

            X509v3 Authority Key Identifier:
                keyid:FF:00:9B:87:BE:7C:CF:30:63:A9:E5:E3:81:C2:80:10:6F:5B:D8:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/371ccf45-cbe8-46b3-8dee-e2270c15d111.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:eb0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:4e:32:7e:80:27:ad:9e:2b:6b:0f:d8:31:67:f9:3a:30:fd:
         6e:8f:9c:86:83:cb:b5:88:87:29:4d:f5:22:85:0f:cf:a7:e9:
         ee:7f:53:41:10:6d:3b:71:c1:1d:3d:07:29:88:de:cc:35:89:
         62:6e:44:86:c7:8a:12:1d:c8:f9:a3:17:f5:17:bd:00:88:3a:
         af:fe:2a:98:45:69:37:8b:ba:08:bf:43:3b:1e:8b:3b:3a:28:
         43:50:71:07:d0:71:2e:ca:93:a5:e5:b5:67:7c:46:53:fa:a2:
         4a:0e:81:db:87:0f:48:86:4b:c8:d1:9a:a7:02:89:02:72:4f:
         0a:6c:ce:b5:bd:4a:13:2f:f6:01:21:df:91:bd:07:0b:cb:84:
         a4:98:69:dd:f4:67:68:05:09:dc:97:66:97:88:c0:ba:0c:47:
         5f:92:c7:37:12:69:7b:9c:37:75:31:37:e5:b6:a9:e5:88:a3:
         2e:32:27:13:04:31:3c:84:99:1b:b8:b5:84:95:86:db:4f:6b:
         6d:54:78:de:d7:6f:b0:42:2a:41:7f:d7:8d:7f:06:e3:4f:f1:
         48:65:87:91:5d:ed:60:2a:0f:fc:ba:60:c1:48:d7:26:45:04:
         8a:61:47:63:a5:94:8e:2c:ae:f5:20:ae:e3:52:1b:44:71:55:
         5d:f6:b8:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:36:36 2024 by rpki-client on console-fra.rpki-client.org