Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d2bbf297-079d-4c91-9341-1297e788c325/dda0b626-a43a-3580-9250-810faca4b003.roa
File:                     dda0b626-a43a-3580-9250-810faca4b003.roa (raw, json)
Hash identifier:          FuR1t52X5Leuh6T99EtmcC0nVoeZX1UNKXLKcOWM78Y=
Subject key identifier:   94:23:07:70:E8:24:3B:EF:FB:2A:33:0D:F9:78:72:9F:4D:EB:8D:A1
Certificate issuer:       /CN=d2bbf297-079d-4c91-9341-1297e788c325
Certificate serial:       010D0C9F4328584742BB3AECD94ADEA9AE8D4580
Authority key identifier: 15:8B:E5:D1:07:F1:7F:C7:CF:6D:B1:5D:2D:49:F0:C0:2C:78:34:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d2bbf297-079d-4c91-9341-1297e788c325.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d2bbf297-079d-4c91-9341-1297e788c325/dda0b626-a43a-3580-9250-810faca4b003.roa
Signing time:             Thu 19 Sep 2024 01:00:31 +0000
ROA not before:           Thu 19 Sep 2024 01:00:31 +0000
ROA not after:            Wed 18 Dec 2024 02:00:31 +0000
asID:                     21775
IP address blocks:        2001:500:103::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d2bbf297-079d-4c91-9341-1297e788c325/d2bbf297-079d-4c91-9341-1297e788c325.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d2bbf297-079d-4c91-9341-1297e788c325/d2bbf297-079d-4c91-9341-1297e788c325.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d2bbf297-079d-4c91-9341-1297e788c325.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:42:bb:3a:ec:d9:4a:de:a9:ae:8d:45:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2bbf297-079d-4c91-9341-1297e788c325
        Validity
            Not Before: Sep 19 01:00:31 2024 GMT
            Not After : Dec 18 02:00:31 2024 GMT
        Subject: CN=71dcfcd4-3825-4085-b28b-1c0a222fba67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:a8:48:6e:1e:c5:94:51:a0:4f:99:16:9c:3a:
                    6e:dd:1d:7e:48:f7:d0:49:e1:af:b2:23:e7:7b:90:
                    13:8c:33:5e:c8:e6:f4:3a:52:a6:f2:a2:98:45:5d:
                    26:12:e6:25:86:83:ac:17:09:1f:9b:24:4a:9d:23:
                    ee:ac:1e:64:ad:ed:30:58:83:7e:53:4a:11:d6:ce:
                    9a:66:eb:3e:7c:a5:22:8d:88:35:fd:e2:76:ce:e0:
                    87:6d:a1:a8:f3:a1:67:35:96:2b:38:06:2b:5d:63:
                    03:fc:dc:0d:91:b3:38:ce:67:fa:95:76:7e:ef:68:
                    1e:33:d4:23:22:52:b1:71:eb:8e:82:b9:ee:b5:64:
                    e5:49:57:0c:9d:9c:8e:8b:f9:56:47:82:13:e8:5d:
                    82:05:14:c7:0c:d3:1a:86:92:f6:50:c5:36:9e:58:
                    44:2f:13:25:fc:24:03:31:74:ef:42:21:6f:08:5c:
                    62:6a:3c:14:c8:bf:7e:c1:da:f9:e2:2e:7f:3e:8b:
                    57:22:8b:ed:1c:2a:a2:2f:ea:45:f4:f9:c6:49:fa:
                    00:c4:7f:70:bf:d5:c3:cc:f6:eb:2c:52:0c:93:2b:
                    fb:d1:3d:cc:32:1d:06:17:e9:7a:d7:62:95:10:91:
                    41:27:b9:3f:9e:48:e0:0e:d7:26:c9:ee:ac:66:0b:
                    f4:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:23:07:70:E8:24:3B:EF:FB:2A:33:0D:F9:78:72:9F:4D:EB:8D:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d2bbf297-079d-4c91-9341-1297e788c325/dda0b626-a43a-3580-9250-810faca4b003.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d2bbf297-079d-4c91-9341-1297e788c325/d2bbf297-079d-4c91-9341-1297e788c325.crl

            X509v3 Authority Key Identifier:
                keyid:15:8B:E5:D1:07:F1:7F:C7:CF:6D:B1:5D:2D:49:F0:C0:2C:78:34:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d2bbf297-079d-4c91-9341-1297e788c325.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:103::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:23:ef:4e:fa:b8:91:14:4f:b5:e2:bb:f6:53:e4:43:70:b9:
         3b:67:41:3d:ab:1c:c7:66:b3:d4:5f:80:ff:5d:97:39:cf:06:
         a9:77:66:69:73:75:1a:81:2a:4d:7a:49:5e:cd:c5:e6:7b:b6:
         1d:0b:5a:8d:60:e3:03:7b:df:89:b4:af:21:97:39:b9:91:24:
         0c:e2:0a:6e:f3:af:c0:bb:de:e0:e6:88:82:5d:b9:ba:b2:4d:
         24:52:82:de:00:db:97:c4:62:b7:c8:30:52:f6:0d:b5:62:81:
         a9:c8:cb:74:69:00:2d:3d:0c:ad:c3:c0:19:8a:27:c2:b9:e9:
         68:6f:f5:2d:1e:ed:2c:ce:fa:92:b6:f2:c5:b8:99:89:b9:37:
         07:74:56:32:d5:5b:f8:1d:2e:b2:f9:b1:88:20:df:f7:d5:88:
         a4:36:61:53:54:f6:49:4c:ac:c6:4a:52:36:f2:ad:5e:b8:d8:
         d0:17:86:d7:5c:35:2e:8a:25:4f:4e:6e:17:53:2d:02:81:6a:
         9a:fd:9c:9f:b3:40:22:79:ab:36:6c:09:aa:2e:a1:86:b1:59:
         1d:73:1b:81:e1:d8:35:f3:50:c4:bd:e5:4d:5f:22:6f:74:7a:
         82:6e:2e:e5:eb:a6:8f:b8:ad:9e:4d:c1:bb:81:ec:2d:00:d3:
         6e:5c:23:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:49:00 2024 by rpki-client on console-ams.rpki-client.org