Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7504c4b-7514-464e-a79e-1f4b462c7e7c/623eee29-c1bb-3ce9-82ac-987b2182c917.roa
File:                     623eee29-c1bb-3ce9-82ac-987b2182c917.roa (raw, json)
Hash identifier:          J1ORVfmYPoltsGop8KG9HlgKsn+z8q/rCyBhIZRr2no=
Subject key identifier:   B8:91:65:FE:49:AF:84:56:8E:13:13:AE:BF:94:65:7F:B8:DF:FF:1B
Certificate issuer:       /CN=c7504c4b-7514-464e-a79e-1f4b462c7e7c
Certificate serial:       010D0C9F432858474F4B67B1A019C1AAB43C7200
Authority key identifier: BD:B1:CF:BB:D1:DE:D3:95:B4:EF:EB:D8:1F:97:D9:B9:D7:DF:45:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7504c4b-7514-464e-a79e-1f4b462c7e7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7504c4b-7514-464e-a79e-1f4b462c7e7c/623eee29-c1bb-3ce9-82ac-987b2182c917.roa
Signing time:             Mon 23 Sep 2024 13:00:40 +0000
ROA not before:           Mon 23 Sep 2024 13:00:40 +0000
ROA not after:            Sun 22 Dec 2024 14:00:40 +0000
asID:                     46208
IP address blocks:        2607:f5b8::/32 maxlen: 48
                          2607:f5b8::/33 maxlen: 48
                          2607:f5b8:8000::/33 maxlen: 48
                          2607:f5b8:8000::/34 maxlen: 48
                          2607:f5b8:c000::/34 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7504c4b-7514-464e-a79e-1f4b462c7e7c/c7504c4b-7514-464e-a79e-1f4b462c7e7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7504c4b-7514-464e-a79e-1f4b462c7e7c/c7504c4b-7514-464e-a79e-1f4b462c7e7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7504c4b-7514-464e-a79e-1f4b462c7e7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4f:4b:67:b1:a0:19:c1:aa:b4:3c:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7504c4b-7514-464e-a79e-1f4b462c7e7c
        Validity
            Not Before: Sep 23 13:00:40 2024 GMT
            Not After : Dec 22 14:00:40 2024 GMT
        Subject: CN=8a288ca7-124a-4efe-b32d-809d3dc90c9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:5d:e4:37:9c:40:fd:00:fb:a3:94:e4:1c:99:
                    87:e8:99:8b:70:27:31:08:1d:50:15:9f:f9:2d:ad:
                    95:2a:32:25:58:36:1f:cd:23:12:3a:32:c1:63:e2:
                    60:c0:08:05:47:6f:53:0a:c3:fb:03:1a:72:83:13:
                    7a:b1:c3:b0:9a:21:5a:cd:b2:a0:77:db:65:ef:2c:
                    52:8c:e3:65:c8:22:13:cf:5b:ef:a4:65:1e:60:5a:
                    7d:3b:df:85:f9:02:c9:8a:c5:80:4e:3e:76:02:61:
                    29:9a:29:28:6e:fc:77:c5:2a:7e:50:da:d3:e2:87:
                    e4:9e:82:53:32:c5:85:a3:b2:91:c8:f7:e2:e1:2f:
                    65:c7:01:c3:30:ab:a3:ec:68:73:21:84:90:4b:47:
                    20:c7:6a:fe:f3:cc:54:72:1f:68:36:be:24:da:9f:
                    ee:bd:33:39:90:ff:c8:11:b6:f1:88:1c:16:af:6a:
                    d7:c4:22:21:f0:6d:5a:08:34:c4:29:38:a9:1f:2c:
                    b3:fd:0f:69:ae:56:b7:ea:0b:e9:6d:08:e1:67:92:
                    62:64:18:5e:64:0c:04:bd:ce:a3:dc:d4:69:1b:57:
                    64:96:3d:7c:1f:d4:a1:5c:2f:18:e0:96:56:2b:f3:
                    9f:b5:11:ff:7f:fd:9f:89:99:23:6b:ac:93:1d:98:
                    1a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:91:65:FE:49:AF:84:56:8E:13:13:AE:BF:94:65:7F:B8:DF:FF:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7504c4b-7514-464e-a79e-1f4b462c7e7c/623eee29-c1bb-3ce9-82ac-987b2182c917.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7504c4b-7514-464e-a79e-1f4b462c7e7c/c7504c4b-7514-464e-a79e-1f4b462c7e7c.crl

            X509v3 Authority Key Identifier:
                keyid:BD:B1:CF:BB:D1:DE:D3:95:B4:EF:EB:D8:1F:97:D9:B9:D7:DF:45:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7504c4b-7514-464e-a79e-1f4b462c7e7c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f5b8::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:e8:15:46:a1:8e:fa:22:4b:fd:0b:d3:07:bf:ab:e5:f1:29:
         4d:97:fb:1a:15:54:d8:33:b2:28:48:5c:4d:f9:cb:bd:b1:34:
         d0:74:9c:ee:ac:0e:18:63:84:c2:cb:a7:d2:fe:42:c2:9b:8c:
         40:ba:30:16:0a:2a:3e:d9:0b:87:69:aa:2e:8a:8d:fc:0f:9a:
         4b:d3:9e:42:ed:cf:52:25:0c:40:91:9c:c4:44:7b:d2:0d:99:
         b1:e4:75:6e:21:23:75:65:c7:9e:e8:09:40:66:50:7d:46:cb:
         ae:9a:77:3b:22:0f:93:70:b4:08:ea:13:4d:8a:9d:12:cd:44:
         81:b8:50:01:03:79:f2:30:29:23:88:13:1a:d3:64:a8:40:fe:
         dd:ec:4b:95:e8:8f:08:37:c9:b1:cc:a0:91:c8:02:28:73:78:
         9e:94:d4:54:6a:ed:3b:b3:e9:56:3a:fa:91:72:f2:df:bc:75:
         57:76:14:e1:ab:0e:cb:c6:e8:0a:59:75:c6:9d:58:c4:11:0d:
         42:3e:1e:09:cf:a0:b4:ab:af:98:23:4e:3b:fd:c4:11:3f:d4:
         35:31:9d:eb:98:1d:cd:2e:46:37:98:a3:55:45:65:94:e1:fd:
         03:de:bf:78:76:1b:99:a9:33:31:ad:54:35:3a:72:f7:07:a3:
         ff:b9:2c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:59 2024 by rpki-client on console-ams.rpki-client.org