Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/762c45fd-61f9-43a6-8ad5-fea5ef27b187/232197a3-ae46-3995-9e63-d41aa97f6f15.roa
File:                     232197a3-ae46-3995-9e63-d41aa97f6f15.roa (raw, json)
Hash identifier:          ubrCt65EVzRlzrVv7VmbWzL3rfrEQdWM2zpNppf8a1Y=
Subject key identifier:   19:0A:30:8C:A7:0E:AD:F1:F6:1A:20:87:44:9F:A8:57:81:22:A6:A3
Certificate issuer:       /CN=762c45fd-61f9-43a6-8ad5-fea5ef27b187
Certificate serial:       010D0C9F432858474C80B6BFE52E88946D84C410
Authority key identifier: 8D:C3:30:A2:3D:E2:01:CB:19:30:E7:68:F2:13:0E:A8:3E:36:F9:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/762c45fd-61f9-43a6-8ad5-fea5ef27b187.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/762c45fd-61f9-43a6-8ad5-fea5ef27b187/232197a3-ae46-3995-9e63-d41aa97f6f15.roa
Signing time:             Sun 22 Sep 2024 13:00:40 +0000
ROA not before:           Sun 22 Sep 2024 13:00:40 +0000
ROA not after:            Sat 21 Dec 2024 14:00:40 +0000
asID:                     5065
IP address blocks:        2606:58c0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/762c45fd-61f9-43a6-8ad5-fea5ef27b187/762c45fd-61f9-43a6-8ad5-fea5ef27b187.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/762c45fd-61f9-43a6-8ad5-fea5ef27b187/762c45fd-61f9-43a6-8ad5-fea5ef27b187.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/762c45fd-61f9-43a6-8ad5-fea5ef27b187.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4c:80:b6:bf:e5:2e:88:94:6d:84:c4:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=762c45fd-61f9-43a6-8ad5-fea5ef27b187
        Validity
            Not Before: Sep 22 13:00:40 2024 GMT
            Not After : Dec 21 14:00:40 2024 GMT
        Subject: CN=0752007a-0114-4e46-8204-9a0a5d9b4d15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:2e:51:81:9a:be:d7:0c:8e:64:6a:cf:6e:e0:
                    3a:da:f2:53:b4:ae:0c:25:cb:ba:a3:74:d2:d0:17:
                    17:95:3b:0a:d8:51:aa:89:dc:1b:42:f9:1b:f2:56:
                    a4:48:97:bb:05:f5:45:14:03:d5:53:c8:71:b1:37:
                    12:11:69:e7:f0:fa:ff:51:b6:ab:80:28:e7:17:ef:
                    62:a8:87:e8:fb:66:1d:4d:2c:a3:11:9f:b3:c1:d2:
                    3e:da:a3:8f:99:ff:c9:e2:ee:75:cb:83:da:ca:8f:
                    ae:a4:61:5f:57:74:d7:39:a6:2e:65:54:4b:0b:71:
                    68:7b:06:5d:14:2f:ee:73:16:03:03:dc:9b:35:99:
                    64:a2:c9:e8:bc:22:f6:80:18:61:d7:6f:03:c3:d2:
                    45:b7:b1:2f:ad:f0:9c:6d:4b:68:dc:04:c1:03:59:
                    c8:4d:a0:13:10:e9:1a:e6:1a:41:63:9d:9d:42:33:
                    2c:10:4a:b3:76:5e:db:2c:ec:a0:07:c5:89:87:4b:
                    df:fc:7a:eb:4c:1c:70:2b:b9:61:1c:40:38:24:53:
                    02:6b:c3:3d:4b:f0:4f:2c:8b:66:07:65:88:50:b8:
                    fb:d7:0e:fd:cc:00:3e:dc:bc:12:e7:40:38:ea:bd:
                    da:19:25:ff:00:a7:32:49:7e:4a:b2:53:9e:04:62:
                    58:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:0A:30:8C:A7:0E:AD:F1:F6:1A:20:87:44:9F:A8:57:81:22:A6:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/762c45fd-61f9-43a6-8ad5-fea5ef27b187/232197a3-ae46-3995-9e63-d41aa97f6f15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/762c45fd-61f9-43a6-8ad5-fea5ef27b187/762c45fd-61f9-43a6-8ad5-fea5ef27b187.crl

            X509v3 Authority Key Identifier:
                keyid:8D:C3:30:A2:3D:E2:01:CB:19:30:E7:68:F2:13:0E:A8:3E:36:F9:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/762c45fd-61f9-43a6-8ad5-fea5ef27b187.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:58c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:3b:da:ac:40:62:c4:fe:a1:f5:52:ec:21:bb:2d:49:59:52:
         8b:29:1a:bc:a0:07:be:ca:9f:e8:25:48:74:b4:7b:36:ef:07:
         9f:dc:63:68:77:1c:fb:af:a8:92:aa:52:9a:54:40:98:16:36:
         da:fa:5b:fd:f4:63:82:d6:64:c4:45:2f:96:16:1c:ce:3e:95:
         48:8d:a1:53:d6:1c:4e:64:95:4a:32:b3:55:fc:a8:51:6a:cb:
         c0:dc:f1:fb:e3:a2:cf:1e:cf:96:3b:3d:7a:da:ec:85:3a:01:
         c9:28:9f:e9:43:76:6d:5e:0d:cb:fb:3c:1e:0a:03:97:0a:70:
         d1:87:dd:6a:a4:d6:51:3a:44:f8:e8:5f:3d:d1:0c:ca:e4:e4:
         3c:22:9f:6b:be:67:ee:d7:46:19:c5:e7:bf:77:bf:0d:39:4a:
         8b:bc:19:02:35:d1:60:23:27:d8:46:81:db:89:2d:ff:9b:73:
         4e:43:9b:ce:e9:44:9e:bd:b1:85:eb:0c:5e:0b:e7:9e:92:d6:
         76:cd:93:85:85:20:a1:12:47:90:bc:e3:f5:aa:e9:cd:93:e7:
         57:c9:ac:6c:97:78:3a:16:b5:65:b9:d7:bc:f2:79:cd:c2:ae:
         3a:f9:0c:2e:32:65:c7:19:a4:60:de:af:d4:aa:ca:a8:50:23:
         44:01:6a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:41 2024 by rpki-client on console-fra.rpki-client.org