Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/895fbd4b-6c03-386f-8640-06e1037201cf.roa
File:                     895fbd4b-6c03-386f-8640-06e1037201cf.roa (raw, json)
Hash identifier:          NcoJGqSHy3uQyTNc47Nv8RgnPwOMRTJmBcL/Ose5/cs=
Subject key identifier:   0F:75:2F:33:C9:C5:96:CA:2E:63:CA:70:B2:60:AF:5B:A9:5F:B7:D0
Certificate issuer:       /CN=39b6b2fc-3422-46e7-b637-7b8dcb84bff1
Certificate serial:       010D0C9F43285847AC3096FF4337F9AB2D63ACC0
Authority key identifier: F5:79:B5:2B:5C:12:7C:0B:C8:CD:00:75:42:2C:15:FC:6F:A6:37:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/895fbd4b-6c03-386f-8640-06e1037201cf.roa
Signing time:             Sat 26 Oct 2024 19:36:53 +0000
ROA not before:           Sat 26 Oct 2024 19:36:53 +0000
ROA not after:            Fri 24 Jan 2025 20:36:53 +0000
asID:                     897
IP address blocks:        2620:ab:a004::/47 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ac:30:96:ff:43:37:f9:ab:2d:63:ac:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39b6b2fc-3422-46e7-b637-7b8dcb84bff1
        Validity
            Not Before: Oct 26 19:36:53 2024 GMT
            Not After : Jan 24 20:36:53 2025 GMT
        Subject: CN=02dd1e45-1d46-4f49-aec8-c8f1ce864d79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:68:d1:55:64:8a:ab:c7:c4:86:50:f3:bd:81:
                    36:c4:a4:9c:9b:8e:74:40:e7:33:db:9d:8a:91:4d:
                    d0:7c:2f:7d:cc:aa:5b:c9:25:76:76:f6:f3:05:87:
                    18:35:ad:7c:eb:a4:b1:ec:27:1c:66:77:91:b4:8c:
                    7d:8d:da:a6:83:e3:96:c2:6e:0c:4c:bf:b5:f8:d4:
                    55:8c:f7:f2:53:45:e9:9f:a0:61:f4:c6:f2:63:2e:
                    6b:7a:c9:de:84:7d:6d:fa:ce:65:ea:3f:09:97:d8:
                    d9:64:17:c9:88:3d:74:3e:9b:c2:f2:96:29:78:6a:
                    0b:87:a8:70:47:11:22:65:b9:77:43:b2:df:6f:a7:
                    be:f6:9a:1d:cd:69:4a:88:b5:2d:59:ad:1c:e3:f1:
                    c1:b8:12:3c:4e:10:93:d5:0e:88:01:1c:d3:76:06:
                    8f:51:cc:9f:03:94:e6:9d:ef:83:ea:19:75:27:c4:
                    6b:c7:2f:dc:7d:c6:cf:59:d1:2a:63:a6:d4:22:fb:
                    8d:36:1f:81:e6:45:94:87:4d:d8:7a:50:61:e0:48:
                    a2:86:51:82:26:31:e6:16:c4:bd:d3:f5:f2:1c:a9:
                    d6:e2:52:92:a5:c4:94:34:8a:9b:3c:f5:db:ff:2b:
                    f3:72:a6:c8:cf:75:4d:f1:7a:7e:15:cf:43:25:70:
                    3c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:75:2F:33:C9:C5:96:CA:2E:63:CA:70:B2:60:AF:5B:A9:5F:B7:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/895fbd4b-6c03-386f-8640-06e1037201cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.crl

            X509v3 Authority Key Identifier:
                keyid:F5:79:B5:2B:5C:12:7C:0B:C8:CD:00:75:42:2C:15:FC:6F:A6:37:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:ab:a004::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:b7:e0:ce:40:18:16:3f:4a:39:bb:75:7b:8f:60:41:f4:91:
         ea:c6:57:a5:1b:cd:4f:64:67:e0:2f:1c:45:f6:96:2d:fb:f0:
         d7:0b:e4:62:73:34:d8:c8:78:fc:a5:5e:64:b1:00:4a:79:df:
         a9:62:aa:53:10:2b:a9:cb:3b:4e:ef:55:24:ae:29:7f:16:dd:
         be:15:8b:a8:3e:f5:45:0f:e5:dc:d6:df:45:5a:d2:95:5d:fa:
         21:e6:8a:d3:6a:30:1a:74:24:19:4a:fb:57:3b:38:a1:5f:0d:
         f2:6a:b7:6e:f7:73:e0:8f:36:16:f3:64:92:fe:58:d9:93:eb:
         3a:db:53:84:df:7f:49:0f:e4:fa:03:f4:55:95:96:56:fb:82:
         2c:1d:2e:f7:b0:0e:4a:66:0a:da:1c:6c:21:89:74:e7:34:92:
         eb:15:19:2b:09:a9:e9:e1:60:b4:c6:34:79:b6:5d:02:66:49:
         4f:dc:ec:a8:0e:d7:b7:8e:8c:93:2e:ed:d2:48:18:69:3e:60:
         e1:33:11:cc:05:68:9d:25:7f:67:37:79:80:dd:cc:36:f4:27:
         43:da:67:ab:98:2c:72:a5:06:47:29:7d:96:51:99:ed:78:3b:
         1d:b7:13:7e:3a:0a:0a:64:0c:67:c4:7f:b6:c9:d3:ee:19:f6:
         f8:a6:fc:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:30 2024 by rpki-client on console-ams.rpki-client.org