Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ad78b405-a495-404a-a809-d632ddd6e3d6/4276b03e-d765-32bf-99d3-987d31449273.roa
File:                     4276b03e-d765-32bf-99d3-987d31449273.roa (raw, json)
Hash identifier:          BJotULhnUECnDyPdUrj6fDWfGPrRcIE7TJdx7br8+9E=
Subject key identifier:   DE:8F:65:98:56:E3:DA:4E:00:29:AE:F2:1F:6C:92:EF:B3:72:3D:36
Certificate issuer:       /CN=ad78b405-a495-404a-a809-d632ddd6e3d6
Certificate serial:       010D0C9F432858475EA613B2CD5BB8EAD5007A80
Authority key identifier: 41:15:5C:F0:5D:CC:60:53:42:CD:FE:87:88:B4:10:C2:EA:EB:5B:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ad78b405-a495-404a-a809-d632ddd6e3d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ad78b405-a495-404a-a809-d632ddd6e3d6/4276b03e-d765-32bf-99d3-987d31449273.roa
Signing time:             Sun 29 Sep 2024 01:00:32 +0000
ROA not before:           Sun 29 Sep 2024 01:00:32 +0000
ROA not after:            Sat 28 Dec 2024 02:00:32 +0000
asID:                     14618
IP address blocks:        2620:1f9:60::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ad78b405-a495-404a-a809-d632ddd6e3d6/ad78b405-a495-404a-a809-d632ddd6e3d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ad78b405-a495-404a-a809-d632ddd6e3d6/ad78b405-a495-404a-a809-d632ddd6e3d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ad78b405-a495-404a-a809-d632ddd6e3d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5e:a6:13:b2:cd:5b:b8:ea:d5:00:7a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad78b405-a495-404a-a809-d632ddd6e3d6
        Validity
            Not Before: Sep 29 01:00:32 2024 GMT
            Not After : Dec 28 02:00:32 2024 GMT
        Subject: CN=0bc5d399-0f24-405c-913a-b89855b7a8da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:28:69:ed:7f:f7:9b:9c:d9:46:39:bb:fc:02:
                    67:08:83:2f:62:b4:45:78:6f:94:3a:ad:33:51:57:
                    39:82:d6:f5:0c:14:b2:78:eb:8b:cd:4d:53:22:01:
                    5a:b5:8c:bb:7b:76:24:02:09:ef:be:12:79:7e:0b:
                    36:ea:c8:f5:f2:8a:41:89:1c:2b:db:d9:74:25:cf:
                    7a:9b:0f:cb:24:05:7a:a1:00:a9:73:90:3c:0c:cc:
                    c6:48:26:34:4e:11:19:1e:b0:48:20:18:55:ab:b1:
                    3c:23:fb:b2:d4:cc:6c:05:ab:ff:3b:3c:85:7d:f6:
                    cd:8d:f5:b1:fe:e9:50:98:19:1d:e3:f1:c2:f7:10:
                    93:c1:b2:bc:fe:2b:05:77:ad:fc:20:6f:39:89:ed:
                    cf:08:5d:ed:74:1a:6a:99:46:31:a8:47:c7:1c:c0:
                    31:67:38:4c:13:de:d9:13:f5:d9:20:78:f5:10:16:
                    87:07:d5:cd:e1:b8:50:40:fa:10:1f:4b:bb:e5:de:
                    f3:90:e6:a3:ca:7c:1a:51:75:da:c4:89:7e:b1:aa:
                    a2:3e:61:54:db:c7:24:89:db:b5:f3:41:61:f2:dc:
                    5b:5d:22:c8:9f:03:27:1b:bd:a0:a1:30:0f:e2:53:
                    80:37:a5:c7:5b:fb:ab:38:f6:db:89:34:00:37:84:
                    bf:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:8F:65:98:56:E3:DA:4E:00:29:AE:F2:1F:6C:92:EF:B3:72:3D:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ad78b405-a495-404a-a809-d632ddd6e3d6/4276b03e-d765-32bf-99d3-987d31449273.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ad78b405-a495-404a-a809-d632ddd6e3d6/ad78b405-a495-404a-a809-d632ddd6e3d6.crl

            X509v3 Authority Key Identifier:
                keyid:41:15:5C:F0:5D:CC:60:53:42:CD:FE:87:88:B4:10:C2:EA:EB:5B:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ad78b405-a495-404a-a809-d632ddd6e3d6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1f9:60::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:6e:58:f9:e3:2a:6b:39:9a:6d:69:1a:27:ac:a0:c5:2c:fc:
         e5:75:9a:02:a5:21:c4:39:ba:36:8c:68:54:2b:ee:a0:4b:f6:
         9b:01:75:98:22:33:12:34:41:93:47:3b:7f:cc:4d:64:35:a7:
         5f:2e:0b:6e:b9:aa:68:51:0f:a3:a8:a4:f2:9e:4c:8d:62:9d:
         8a:de:54:dd:6f:a4:46:c9:52:1c:09:0c:85:b5:ef:91:57:a0:
         b1:5a:00:f4:b0:9d:3b:b3:51:95:23:81:9d:6a:6d:c1:34:cd:
         93:c5:4b:b2:c5:3f:be:73:be:ef:89:3d:40:ec:34:49:b5:1c:
         01:e1:9c:6e:df:8e:ed:cd:90:8a:4a:ad:56:0a:1e:c2:f5:d2:
         40:49:9f:9c:c5:4e:0f:06:bd:35:c2:24:90:c8:61:c0:75:db:
         ff:c7:17:ae:54:65:2e:b7:21:1e:46:36:af:f9:a1:e7:99:0c:
         0f:09:2e:8c:88:f6:c5:50:8e:bc:cf:84:53:b3:db:ed:0e:9d:
         fa:33:ea:d7:d8:ad:f9:8b:95:d5:82:ee:d7:af:5b:1b:ec:0d:
         13:14:d9:43:7e:1b:7d:90:5f:fe:4c:ca:2b:1d:1e:ac:19:c7:
         f7:45:78:9d:69:14:12:a3:be:b6:69:18:5e:be:bc:72:65:45:
         55:3a:96:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 18:29:17 2024 by rpki-client on console-ams.rpki-client.org