Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/48e9f760-1601-35b1-9940-8cfc8cac9a16.roa
File:                     48e9f760-1601-35b1-9940-8cfc8cac9a16.roa (raw, json)
Hash identifier:          z/mWiAMsWUYcwTAFHu74CdhsKJCLxFUzjFwI14ls/NU=
Subject key identifier:   79:73:86:68:AA:E0:01:7F:12:69:17:58:47:D5:DE:E8:2C:46:BB:46
Certificate issuer:       /CN=252bff0e-a7f2-4d92-b2ff-24bfa21a7306
Certificate serial:       010D0C9F43285847E62A210FBF2238C7B22417A0
Authority key identifier: 13:34:1F:39:12:25:A3:62:F4:C2:CC:7C:74:9A:15:0B:B9:94:42:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/48e9f760-1601-35b1-9940-8cfc8cac9a16.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     393732
IP address blocks:        2620:11d:5002::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:21:0f:bf:22:38:c7:b2:24:17:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=252bff0e-a7f2-4d92-b2ff-24bfa21a7306
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=9c8f6b8a-a11b-462e-babf-d0cd00ecc97b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:71:8e:d0:da:7d:cd:c2:3f:74:71:fa:06:c9:
                    fb:ce:34:aa:af:47:0f:95:c6:00:04:70:07:59:38:
                    fa:c6:14:e3:bd:04:f3:27:e8:18:13:1c:77:74:64:
                    61:26:58:4d:a5:7f:82:ca:cf:b0:66:63:d0:c5:63:
                    54:ac:a0:c2:7a:60:bb:68:85:59:01:5a:71:71:0b:
                    d9:b7:c9:6c:72:f6:d3:c9:3b:39:02:c6:8b:d2:65:
                    33:2f:b9:e7:f5:ca:dd:02:13:0b:1e:8b:47:4c:28:
                    92:8d:85:31:c4:9b:57:ee:79:cf:90:5a:cd:da:1a:
                    8f:78:da:96:d8:af:fe:7a:d0:e3:7e:9d:69:91:b6:
                    66:e9:e8:59:d9:9c:ab:70:12:13:dd:0c:a4:79:d6:
                    5d:4d:4f:69:a4:cb:7a:4f:a1:e1:1b:10:89:4c:a1:
                    cf:9e:ae:ef:ce:58:59:40:f5:42:bb:ad:eb:74:78:
                    4e:4b:5e:33:95:ec:f9:5b:e1:6d:e7:53:42:ca:1e:
                    fe:19:56:c6:7f:08:21:a7:6a:22:c3:fe:8d:9c:82:
                    55:31:94:72:7b:5b:59:95:a4:d5:77:5a:59:39:a4:
                    8d:84:5f:b5:d5:ef:31:15:7f:fe:73:9a:16:14:a5:
                    b4:b9:5b:c7:17:2a:11:1b:74:37:3f:f5:56:e4:b2:
                    b3:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:73:86:68:AA:E0:01:7F:12:69:17:58:47:D5:DE:E8:2C:46:BB:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/48e9f760-1601-35b1-9940-8cfc8cac9a16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.crl

            X509v3 Authority Key Identifier:
                keyid:13:34:1F:39:12:25:A3:62:F4:C2:CC:7C:74:9A:15:0B:B9:94:42:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:11d:5002::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:2a:41:aa:6b:6c:05:1f:88:e8:b6:94:c1:f2:33:dc:87:77:
         27:bd:03:f1:df:7e:3a:e4:48:5b:5d:e7:8b:40:ff:7c:51:c8:
         ea:e5:bf:74:bc:a1:29:4f:5f:f1:12:f8:a1:e1:b5:3b:9d:b7:
         b1:75:bb:90:4a:ed:7f:0d:31:62:2c:6a:c9:a3:d7:1e:48:7c:
         a9:d6:32:59:6e:2a:84:ce:4e:d2:0e:e8:d6:65:f2:f1:be:79:
         f7:76:06:00:bc:67:53:d9:e6:40:4f:02:c7:96:3a:9e:35:10:
         ba:07:0f:d7:ba:19:77:bf:98:eb:69:0a:31:2f:1a:e8:f8:f1:
         b9:4e:57:f9:ae:b7:7b:cc:cd:8c:8d:f2:d7:57:9b:78:81:67:
         39:9f:08:aa:12:20:fa:dd:ff:d4:bb:c2:e4:4f:01:c8:69:9a:
         95:cc:b5:8c:2b:72:a1:32:66:7b:db:1c:d3:4d:72:12:20:6e:
         f3:5e:71:3d:01:5a:96:d6:be:13:38:98:9e:9b:4c:8b:cf:98:
         1c:3d:de:0c:40:79:fe:57:f1:df:d8:ab:90:a8:2f:b3:8f:2a:
         79:62:a3:50:24:23:bd:54:5b:88:1d:2b:c2:4b:59:f4:66:25:
         8e:a1:cc:6b:09:bf:d1:83:29:b9:00:b3:16:ec:ce:f6:9c:d2:
         72:87:b2:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:27:54 2024 by rpki-client on console-fra.rpki-client.org