Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab971181-47ed-4815-8f1e-60d429db1463/0ff5f3f0-6352-3d8b-9647-68b2771a594e.roa
File:                     0ff5f3f0-6352-3d8b-9647-68b2771a594e.roa (raw, json)
Hash identifier:          W7AROF6WzPnH14GbXngh/7aa0D/L1gINykbh0mmdb/I=
Subject key identifier:   DF:37:CB:80:A5:99:B6:D6:6E:FC:1F:FF:96:5E:3C:F3:81:58:FA:FE
Certificate issuer:       /CN=ab971181-47ed-4815-8f1e-60d429db1463
Certificate serial:       010D0C9F432858477230E11304C897E3F51FD600
Authority key identifier: A6:76:E4:29:E8:D6:DD:1E:FF:07:14:C6:8D:35:29:7C:BB:AF:58:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab971181-47ed-4815-8f1e-60d429db1463.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab971181-47ed-4815-8f1e-60d429db1463/0ff5f3f0-6352-3d8b-9647-68b2771a594e.roa
Signing time:             Sun 06 Oct 2024 01:00:31 +0000
ROA not before:           Sun 06 Oct 2024 01:00:31 +0000
ROA not after:            Sat 04 Jan 2025 02:00:31 +0000
asID:                     7105
IP address blocks:        2620:2::/48 maxlen: 48
                          2620:15a::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab971181-47ed-4815-8f1e-60d429db1463/ab971181-47ed-4815-8f1e-60d429db1463.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab971181-47ed-4815-8f1e-60d429db1463/ab971181-47ed-4815-8f1e-60d429db1463.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab971181-47ed-4815-8f1e-60d429db1463.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:72:30:e1:13:04:c8:97:e3:f5:1f:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab971181-47ed-4815-8f1e-60d429db1463
        Validity
            Not Before: Oct  6 01:00:31 2024 GMT
            Not After : Jan  4 02:00:31 2025 GMT
        Subject: CN=50353e79-a7f5-4607-a3d4-f3dea7924fbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:00:da:00:66:f3:fb:69:f8:b7:9f:e3:62:ae:
                    d4:51:13:3f:f2:2e:ce:1d:06:fe:a8:5e:0e:43:83:
                    df:d2:0f:32:fa:7c:9d:f1:25:21:36:ce:27:6f:66:
                    70:8a:b3:54:a6:bd:c0:e6:35:c0:b7:24:90:3a:f4:
                    97:9a:c6:89:0b:10:03:b6:61:b3:ca:22:14:eb:13:
                    c8:83:6e:b3:5d:6f:a4:a0:60:f9:28:01:22:2e:ce:
                    e6:15:a9:e5:cd:03:ce:de:cc:84:d9:54:29:50:49:
                    53:d6:47:e1:f1:c5:aa:7c:41:5c:ae:88:93:86:16:
                    82:32:0d:77:54:5a:b7:8d:ff:c3:3d:eb:c0:88:83:
                    f4:5e:52:22:83:22:3c:0b:75:5d:56:4e:85:85:5f:
                    5b:40:01:52:f1:df:7a:c9:a0:3f:56:38:eb:8f:fe:
                    30:ba:f8:e1:33:bd:93:97:69:bc:59:3b:69:c5:9f:
                    c4:62:7e:f4:11:95:f4:bb:c3:66:76:d5:46:ec:79:
                    8f:24:c2:01:f2:2f:f2:4c:1e:18:b7:18:d8:a0:41:
                    8b:27:57:1d:8a:ed:8e:4f:98:6d:72:83:32:c1:0a:
                    f8:c1:da:8c:97:1f:12:e0:1c:73:2e:8b:2d:bc:c1:
                    2a:b3:c0:d9:13:8f:13:78:be:a5:b8:fe:1d:01:28:
                    c3:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:37:CB:80:A5:99:B6:D6:6E:FC:1F:FF:96:5E:3C:F3:81:58:FA:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab971181-47ed-4815-8f1e-60d429db1463/0ff5f3f0-6352-3d8b-9647-68b2771a594e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab971181-47ed-4815-8f1e-60d429db1463/ab971181-47ed-4815-8f1e-60d429db1463.crl

            X509v3 Authority Key Identifier:
                keyid:A6:76:E4:29:E8:D6:DD:1E:FF:07:14:C6:8D:35:29:7C:BB:AF:58:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab971181-47ed-4815-8f1e-60d429db1463.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:2::/48
                  2620:15a::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:11:9e:3c:9b:18:03:10:90:94:59:3f:33:fe:25:bb:8c:76:
         64:5b:d1:8a:33:d4:09:93:73:13:00:55:b2:e3:b5:7c:4e:30:
         26:30:24:b1:22:07:8d:62:f2:6e:f3:1b:13:8f:cb:13:cd:31:
         fb:90:3d:6c:ee:34:34:fd:b4:4c:16:01:bb:be:12:96:13:f3:
         bc:f5:d7:88:b8:0d:92:45:95:cc:db:c3:2b:31:20:d3:bf:0e:
         ef:ba:af:0c:06:d0:c3:2a:52:67:e2:71:a0:93:70:90:14:06:
         69:d7:7f:c4:9a:5b:ed:8e:28:6a:c0:c6:3c:7c:d6:97:c3:44:
         2e:30:d2:b9:0e:32:0c:0f:42:fa:0d:76:6f:7d:01:fa:79:51:
         e3:ce:60:9a:ea:f7:2b:d8:a0:6e:6b:71:75:a5:87:5a:b4:0d:
         74:0a:c3:50:92:47:f8:10:4d:be:db:70:84:41:42:d5:bb:07:
         8e:ff:00:72:61:c3:d6:ed:7e:3b:d2:0b:d5:7a:4d:d3:06:d2:
         1f:2d:1c:63:0e:50:55:b0:32:3b:ae:fa:13:16:dd:6e:67:9e:
         89:91:f0:70:9e:c3:96:a4:87:a3:a8:0f:10:a9:c2:5d:f7:4c:
         49:80:83:50:17:58:48:a6:5a:f2:65:9d:fb:cc:49:a6:45:5e:
         18:71:08:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:19:22 2024 by rpki-client on console-ams.rpki-client.org