Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/bca9f8c4-4f2c-39b6-bcc2-a136b7b16fa1.roa
File:                     bca9f8c4-4f2c-39b6-bcc2-a136b7b16fa1.roa (raw, json)
Hash identifier:          VM+XS7vYylT5GfG4xgbi4oumxtJRPa9ExrtMKT02kl0=
Subject key identifier:   C9:2D:F8:6D:1F:CD:6F:6B:FE:43:11:A0:BA:40:CC:52:DF:7E:F4:26
Certificate issuer:       /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
Certificate serial:       010D0C9F432858473095DF7FBD2EAC4C15EB5100
Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/bca9f8c4-4f2c-39b6-bcc2-a136b7b16fa1.roa
Signing time:             Thu 12 Sep 2024 13:00:41 +0000
ROA not before:           Thu 12 Sep 2024 13:00:41 +0000
ROA not after:            Wed 11 Dec 2024 14:00:41 +0000
asID:                     20940
IP address blocks:        2001:5a0:4402::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:30:95:df:7f:bd:2e:ac:4c:15:eb:51:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
        Validity
            Not Before: Sep 12 13:00:41 2024 GMT
            Not After : Dec 11 14:00:41 2024 GMT
        Subject: CN=8a4dd116-1407-4e4c-ac5a-c31cb387051b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:18:20:f3:fd:23:2e:e1:0b:4a:42:9c:c8:b6:
                    6e:ee:9a:81:30:92:2c:00:b0:0c:6e:28:a8:08:5d:
                    fa:b8:2d:46:c4:e1:44:37:33:76:26:c4:d1:73:99:
                    9e:9c:bf:2c:81:45:20:de:77:f4:3f:0c:73:ad:78:
                    62:ec:86:30:1d:75:f5:4c:19:a5:17:58:31:80:1e:
                    56:18:b0:77:63:d2:77:76:e1:49:4c:fd:9a:cd:48:
                    43:1a:11:d3:fe:b9:27:d3:22:11:62:e7:81:69:c1:
                    4f:92:98:ba:46:d5:36:fd:15:e3:37:ab:88:a8:ba:
                    9a:13:31:5b:b2:53:85:ce:61:fb:c9:53:3d:00:89:
                    d0:da:94:c1:05:3d:f7:66:d9:56:29:ea:ae:5d:d0:
                    75:f4:56:b5:2b:c3:1a:db:4c:32:da:89:27:03:30:
                    49:1a:b9:d4:67:77:49:9d:6c:e4:0b:5c:9d:36:51:
                    ea:dd:53:37:2f:69:b6:24:9b:76:8f:60:54:86:8e:
                    0e:b2:8e:2b:0c:41:51:59:43:fe:27:f1:c8:14:da:
                    65:92:46:88:a0:a8:f9:dd:bf:b6:ce:c7:ae:1c:3d:
                    ed:5f:58:eb:86:e8:09:ce:b9:da:3c:ee:3d:e3:4a:
                    26:07:7b:8e:f6:74:aa:e7:64:1e:77:f5:92:80:d7:
                    bf:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:2D:F8:6D:1F:CD:6F:6B:FE:43:11:A0:BA:40:CC:52:DF:7E:F4:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/bca9f8c4-4f2c-39b6-bcc2-a136b7b16fa1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl

            X509v3 Authority Key Identifier:
                keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:5a0:4402::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:a6:8c:91:ad:0a:07:92:51:1a:ce:a7:ad:c2:81:13:82:3c:
         d5:46:c5:9f:54:a3:f3:e3:a5:2e:20:e1:9f:34:30:38:09:f4:
         c4:9b:c6:d3:d9:59:11:2a:67:e3:37:a9:9e:d4:c2:c0:5b:d2:
         1a:92:65:01:c8:f7:a8:ed:f8:2a:4c:b6:dc:20:9b:e6:3a:8f:
         7c:8c:1b:4f:95:c1:e8:d3:d9:fc:c4:d6:e2:2c:3f:29:0c:1a:
         f3:fd:8c:7e:e8:85:01:94:27:22:db:5c:2e:09:ba:a2:f3:14:
         ac:a6:d8:22:46:ba:e9:dc:a1:b1:dc:be:ee:e6:17:05:59:ce:
         8c:e2:0d:e9:53:52:4a:b3:34:69:c0:f0:51:1f:d0:dc:8e:4e:
         2c:b5:12:e0:9a:f4:b3:77:09:2d:f2:68:49:5e:90:ec:8a:60:
         c9:3c:53:68:f3:e2:7e:1b:27:d9:ee:25:20:6a:ba:8e:9f:8f:
         d7:65:75:f3:00:72:62:33:7c:0c:48:13:f1:28:c8:e6:72:2c:
         ba:84:2c:15:e2:a4:95:0f:c0:47:f3:ac:37:dc:8f:3f:ae:5b:
         6d:91:e1:c4:8b:a8:9f:31:45:c9:d5:42:3d:22:9e:45:d6:24:
         2a:c5:57:3a:18:59:56:ca:ec:5f:87:e3:88:34:f2:4f:ac:4d:
         88:d2:09:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:46:02 2024 by rpki-client on console-ams.rpki-client.org