Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/1b1238eb-e2b9-3136-b32f-5b31006cc966.roa
File:                     1b1238eb-e2b9-3136-b32f-5b31006cc966.roa (raw, json)
Hash identifier:          5556dpFOiXO2K5aHXsb28fYGbHMEw5K9F2J1silQif0=
Subject key identifier:   D0:18:4E:9A:48:95:48:13:2D:48:D3:7C:8E:1F:70:52:8B:60:FD:12
Certificate issuer:       /CN=39b6b2fc-3422-46e7-b637-7b8dcb84bff1
Certificate serial:       010D0C9F43285847C7748FC7377AFF6E70E88400
Authority key identifier: F5:79:B5:2B:5C:12:7C:0B:C8:CD:00:75:42:2C:15:FC:6F:A6:37:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/1b1238eb-e2b9-3136-b32f-5b31006cc966.roa
Signing time:             Tue 05 Nov 2024 14:00:38 +0000
ROA not before:           Tue 05 Nov 2024 14:00:38 +0000
ROA not after:            Mon 03 Feb 2025 14:00:38 +0000
asID:                     897
IP address blocks:        2620:ab:a000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c7:74:8f:c7:37:7a:ff:6e:70:e8:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39b6b2fc-3422-46e7-b637-7b8dcb84bff1
        Validity
            Not Before: Nov  5 14:00:38 2024 GMT
            Not After : Feb  3 14:00:38 2025 GMT
        Subject: CN=bef12b80-6d04-4343-bf63-9024022ace5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:9d:d5:ab:db:5e:21:42:4f:b0:cb:b6:13:c8:
                    60:50:6c:60:ca:a2:34:30:6e:8b:3f:6d:95:6b:c2:
                    7e:c8:c0:a7:9c:72:b3:4c:3c:45:8d:d0:a1:8c:a9:
                    f1:3c:99:27:bc:c7:b0:d0:64:4d:f7:a4:14:3a:ba:
                    db:6d:e8:49:58:37:e1:20:c0:a3:c7:2f:aa:7d:18:
                    b5:7c:8e:6c:8f:53:f5:21:2d:92:31:60:98:02:8e:
                    8e:08:5e:57:ba:0d:67:25:37:a8:1c:d9:42:56:b9:
                    fe:56:85:3d:c9:e1:58:3f:0f:68:15:5d:e2:b1:23:
                    e3:91:ee:b8:c8:b8:db:76:3b:6f:86:6d:66:16:42:
                    3b:d0:0d:24:61:81:ca:f8:d6:0e:5b:fd:d0:f9:3e:
                    9d:80:50:3c:b9:06:7f:06:c6:d7:3d:ae:b5:34:01:
                    5c:6c:e9:a7:ab:dc:67:97:86:94:63:69:4c:64:6d:
                    30:d8:2d:c0:71:1a:80:66:84:56:b1:2b:a6:65:dd:
                    b9:e0:25:00:2f:ef:cd:f2:51:09:9d:6e:25:fc:04:
                    63:14:c0:df:fd:f6:9b:30:73:a6:00:7f:bc:d0:9c:
                    71:1d:ee:c2:23:c8:e4:5b:2f:82:05:33:6b:bf:00:
                    3b:d9:17:58:f1:6f:cd:d4:d4:a2:41:02:86:9e:16:
                    db:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:18:4E:9A:48:95:48:13:2D:48:D3:7C:8E:1F:70:52:8B:60:FD:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/1b1238eb-e2b9-3136-b32f-5b31006cc966.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.crl

            X509v3 Authority Key Identifier:
                keyid:F5:79:B5:2B:5C:12:7C:0B:C8:CD:00:75:42:2C:15:FC:6F:A6:37:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:ab:a000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:be:9a:59:59:05:80:10:64:b0:26:07:b3:89:e4:e1:f4:fc:
         bb:18:df:75:a1:15:ba:97:c4:de:c2:38:f4:4a:1b:3b:58:b5:
         3b:b2:c2:4d:d0:a8:4e:09:5f:81:46:3e:6b:45:46:62:ab:3d:
         76:c3:41:c4:6c:cf:1e:3d:fd:f4:6d:df:38:14:e1:46:de:06:
         cb:da:9e:84:bd:43:6c:3e:7c:77:bf:dd:c7:b6:55:4c:3d:a0:
         8b:e5:0d:8b:b5:c6:12:ef:4d:3c:f0:97:c9:0e:40:c9:ee:a5:
         26:62:13:39:26:f4:68:14:ec:7e:aa:a1:79:e3:0f:77:c8:44:
         50:31:02:1c:4a:10:f2:d8:e8:1e:3f:32:7a:7d:f8:95:99:f2:
         18:12:a6:a6:18:9b:6a:97:fa:99:42:a5:5e:7a:d7:90:86:cf:
         e5:44:da:c1:25:cd:37:b0:59:0c:5f:f2:be:9c:24:b5:d4:41:
         95:e2:c6:68:63:12:27:35:2c:65:6a:ff:04:2a:18:a2:b4:88:
         b7:35:fb:1e:f7:60:da:ee:8b:84:bc:0a:e4:93:4f:2c:82:82:
         8a:ba:42:02:f8:ea:10:a5:b4:c4:34:7b:f1:6f:ee:c3:26:92:
         18:1b:07:63:ab:31:ed:ac:57:b0:25:dc:c5:05:b3:5f:b2:45:
         b1:b4:7a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:19:06 2024 by rpki-client on console-ams.rpki-client.org