Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/81d46b5b-d2f2-3815-a978-df7f903ce947.roa
File:                     81d46b5b-d2f2-3815-a978-df7f903ce947.roa (raw, json)
Hash identifier:          wVjzO7GuT3Nlo4TAULfL7eijLEB0NMHnsQOjLsc8hzQ=
Subject key identifier:   A2:06:6B:8E:13:15:56:C5:8E:AB:58:7E:72:DB:86:F3:21:43:9B:E8
Certificate issuer:       /CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
Certificate serial:       010D0C9F43285847B9760EE8D646D41434E32F80
Authority key identifier: 05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/81d46b5b-d2f2-3815-a978-df7f903ce947.roa
Signing time:             Thu 31 Oct 2024 13:42:22 +0000
ROA not before:           Thu 31 Oct 2024 13:42:22 +0000
ROA not after:            Wed 29 Jan 2025 14:42:22 +0000
asID:                     54994
IP address blocks:        2607:b300:fd0c::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b9:76:0e:e8:d6:46:d4:14:34:e3:2f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
        Validity
            Not Before: Oct 31 13:42:22 2024 GMT
            Not After : Jan 29 14:42:22 2025 GMT
        Subject: CN=fd73e64e-e012-4b4b-96a4-6914c6f45176
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:aa:af:be:75:58:b7:f7:ff:51:3c:59:e6:54:
                    8e:94:11:c0:8a:0b:5a:e6:91:04:ca:39:3a:c0:22:
                    33:9e:dd:b9:fd:2f:1d:5f:a9:aa:ce:8b:94:af:8a:
                    07:99:68:47:7f:53:7c:73:f4:9b:24:24:de:1c:e4:
                    48:69:af:5e:70:e5:01:a3:72:db:10:18:ca:f9:7f:
                    cb:8a:0c:00:39:9c:6a:f6:ff:c5:4e:a8:a4:ec:25:
                    c1:53:0b:87:36:41:3c:01:99:bf:d8:f2:94:85:04:
                    e2:f8:43:bd:5f:c3:8c:9f:f2:58:e0:c4:87:9e:3d:
                    cd:2d:c6:cf:97:6f:b1:f2:04:69:28:7f:65:9f:86:
                    c5:60:69:bf:0c:fc:fd:bd:35:f1:f9:4a:be:bc:3e:
                    75:97:db:fb:fc:a7:e5:b4:61:dc:bb:9f:26:a7:02:
                    2b:d1:17:de:34:75:b3:a8:08:4e:ea:a7:d9:b1:cd:
                    ab:bc:b4:45:42:c4:b2:2f:76:d9:58:19:b4:ed:5e:
                    ba:ec:48:07:1d:cb:d0:52:59:71:73:79:cc:c4:01:
                    f8:7b:81:95:a7:22:19:ce:73:75:c6:fe:2e:13:5e:
                    a8:8c:4c:5c:13:d2:01:94:18:de:45:46:57:38:3c:
                    5f:72:23:c0:3f:25:c3:8f:57:3b:cd:ce:82:aa:2d:
                    fd:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:06:6B:8E:13:15:56:C5:8E:AB:58:7E:72:DB:86:F3:21:43:9B:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/81d46b5b-d2f2-3815-a978-df7f903ce947.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl

            X509v3 Authority Key Identifier:
                keyid:05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:b300:fd0c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:26:c6:30:2f:86:4e:62:c7:c7:9f:03:16:ee:d1:e7:bb:dc:
         12:4b:54:80:11:5a:d1:a8:78:a2:8f:fc:30:98:9a:65:4e:46:
         30:d6:f7:35:0f:11:2b:16:76:f8:02:e8:3e:7a:57:51:7b:8a:
         47:2f:f9:97:5c:db:86:79:75:f6:ff:ae:61:23:95:14:23:65:
         46:15:a6:8c:4f:d3:ab:c5:29:8f:01:bd:87:b4:c9:21:1f:09:
         ce:6c:69:95:b1:4c:35:01:65:69:27:9d:06:03:ed:5c:e7:73:
         73:04:ed:a9:f6:60:2d:36:87:ad:00:cf:8a:6e:63:87:e0:be:
         06:03:0d:8a:66:f6:39:5a:e2:5f:9d:c2:50:1b:f0:39:2d:bc:
         cb:44:d7:1d:cd:f9:e5:2d:d3:af:f6:6f:0f:7b:ed:12:83:4b:
         6f:1c:79:84:08:1e:6c:b9:c4:ea:a9:88:77:f4:01:c3:c4:b8:
         4c:49:12:d4:bb:4e:03:68:b1:59:00:9b:fa:d8:64:35:26:c0:
         53:9a:0b:aa:26:78:90:86:b2:62:73:12:31:7c:12:31:05:1d:
         a8:db:1e:50:3a:90:08:d4:fd:35:1c:49:fe:cf:9b:b7:3c:1a:
         d7:42:ef:fc:81:d3:08:d2:f9:a9:4e:35:8a:8c:99:de:7f:cd:
         01:8d:a5:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:44:05 2024 by rpki-client on console-ams.rpki-client.org