Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/972083ad-5bb2-352b-aaf4-9c2f8b86edf4.roa
File:                     972083ad-5bb2-352b-aaf4-9c2f8b86edf4.roa (raw, json)
Hash identifier:          PmIrd/yK/g0PH+PDl8SY7r39p5H5PL+DHvjtwR9uvP8=
Subject key identifier:   10:C8:E4:08:08:19:FD:CB:5F:FF:E1:5D:81:46:12:55:01:DD:82:67
Certificate issuer:       /CN=3c1b9e2d-457a-403f-9256-27f272ed993d
Certificate serial:       010D0C9F43285847739660D87701D89D6608C880
Authority key identifier: EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/972083ad-5bb2-352b-aaf4-9c2f8b86edf4.roa
Signing time:             Sun 06 Oct 2024 13:00:41 +0000
ROA not before:           Sun 06 Oct 2024 13:00:41 +0000
ROA not after:            Sat 04 Jan 2025 14:00:41 +0000
asID:                     14618
IP address blocks:        2620:1f7:c020::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:73:96:60:d8:77:01:d8:9d:66:08:c8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c1b9e2d-457a-403f-9256-27f272ed993d
        Validity
            Not Before: Oct  6 13:00:41 2024 GMT
            Not After : Jan  4 14:00:41 2025 GMT
        Subject: CN=ede189a1-9606-4585-8d63-1f81b38aed5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:02:71:8f:ab:5a:8a:63:51:8c:19:f2:f3:ef:
                    aa:b5:6b:07:8c:30:f8:6b:70:cb:cd:82:6d:85:15:
                    66:96:fc:9d:a4:97:25:58:6f:e6:96:85:3c:f3:ac:
                    6a:d1:b1:0f:13:ce:48:cf:0a:fb:c1:ec:2a:18:e9:
                    21:b5:57:10:99:6f:ab:d8:da:b5:8f:d1:0d:af:76:
                    9c:66:ad:f5:3b:21:26:de:7a:19:e7:c2:c0:2d:d7:
                    2b:27:7a:6e:b8:d4:43:c3:d8:ca:22:be:b7:f9:ac:
                    fb:9b:04:52:19:96:99:55:4a:a0:78:3b:36:4d:6b:
                    d1:43:db:5b:e4:f2:60:a6:ee:cf:4f:ee:4a:3a:a9:
                    c3:8c:4c:96:11:49:bd:2d:bc:f3:92:7a:74:de:71:
                    fa:a0:60:ab:37:34:29:0c:60:13:5e:01:ec:d3:ff:
                    fc:e0:ef:d4:8d:99:0a:37:af:6a:83:7b:fe:e2:76:
                    9a:7e:bc:82:10:b7:0c:dc:30:c6:3a:6c:9d:0a:2b:
                    52:d0:eb:28:7e:a4:7a:fd:62:5a:72:52:32:38:72:
                    69:26:04:4c:2c:c2:f0:35:b6:83:73:84:3c:8c:7f:
                    83:82:ec:58:00:1b:fb:d0:24:1e:a4:63:48:de:e6:
                    4c:74:22:58:87:00:2e:fd:fe:e7:23:57:03:d0:ca:
                    4f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:C8:E4:08:08:19:FD:CB:5F:FF:E1:5D:81:46:12:55:01:DD:82:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/972083ad-5bb2-352b-aaf4-9c2f8b86edf4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl

            X509v3 Authority Key Identifier:
                keyid:EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1f7:c020::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:7a:54:e7:3f:a0:79:7a:f4:4b:48:ac:b7:e1:dc:df:ba:ba:
         91:a9:42:12:a9:a7:02:0d:af:52:95:a2:e6:40:06:c9:f2:3b:
         14:71:f0:db:1d:e6:2b:d9:7a:89:ee:be:fc:db:3a:a9:48:24:
         50:ea:51:b9:66:a6:0b:53:1a:a7:cc:67:b8:58:30:c1:e8:57:
         32:90:eb:14:7f:7c:0e:ca:5c:7b:93:6e:65:dd:99:23:0d:e0:
         bc:c5:7a:42:ea:3f:18:61:4d:36:3b:1d:aa:c0:e8:91:89:71:
         95:30:27:17:33:86:bb:26:e4:71:98:8f:f9:24:5e:c0:12:18:
         08:05:7b:c6:6c:d0:db:75:c0:08:f3:d5:b2:6d:c3:7e:96:91:
         49:74:9c:ca:14:e4:e7:7f:c6:da:e9:6f:98:6a:5c:b0:2a:9f:
         21:83:6a:7a:0e:5a:e6:f3:f9:a8:b9:c5:75:36:04:a5:a4:cf:
         66:42:72:7c:62:da:38:55:a2:d7:90:cb:dd:b6:59:05:d7:54:
         1a:95:e0:76:1b:90:4d:75:83:6d:37:20:8a:f5:0c:41:63:7f:
         c7:d1:3a:bf:c6:d2:20:a4:6f:2f:25:c9:2b:d7:33:f3:1a:00:
         59:cf:ee:7e:0c:0f:b7:7e:d6:d0:b1:64:1c:71:f4:be:3b:ac:
         21:12:35:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:37 2024 by rpki-client on console-fra.rpki-client.org