Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/1308b0ad-b25a-3e19-9f24-2ea5643086e5.roa
File:                     1308b0ad-b25a-3e19-9f24-2ea5643086e5.roa (raw, json)
Hash identifier:          p2pgJWqPKsCbaQLJk5l5FiLG9F28NMScuVO0u3EGtGs=
Subject key identifier:   08:0D:C7:79:BB:EC:04:97:21:AF:C4:3D:B9:C7:43:4E:74:6E:A8:45
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F432858478CB69AE12D5BD50335A14E00
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/1308b0ad-b25a-3e19-9f24-2ea5643086e5.roa
Signing time:             Tue 15 Oct 2024 13:00:47 +0000
ROA not before:           Tue 15 Oct 2024 13:00:47 +0000
ROA not after:            Mon 13 Jan 2025 14:00:47 +0000
asID:                     54858
IP address blocks:        2607:f060::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8c:b6:9a:e1:2d:5b:d5:03:35:a1:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Oct 15 13:00:47 2024 GMT
            Not After : Jan 13 14:00:47 2025 GMT
        Subject: CN=8521729e-8153-42fc-a972-3f7716a0a389
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b9:32:83:5e:5d:25:10:c5:fc:67:ca:4d:fb:
                    a9:3c:db:30:48:1a:e5:d6:5e:a9:2a:8e:4c:9a:58:
                    4b:73:94:d4:fe:e6:03:5a:92:eb:53:bd:19:04:73:
                    ce:cb:c0:b2:e4:2b:df:5c:70:10:f1:0f:ac:8c:e3:
                    cf:dd:d3:4a:40:8e:a7:b1:0a:b8:b4:d7:e3:6f:c0:
                    ce:fb:13:66:24:79:bd:b9:0f:c5:cd:38:2b:46:2e:
                    d9:70:09:c3:1d:ad:03:ba:08:d0:19:8b:8e:98:82:
                    b8:42:70:fd:21:01:dd:93:e0:0f:1a:59:7d:33:d8:
                    57:26:b8:15:6d:2f:f1:f6:47:76:38:3b:79:65:ce:
                    3d:d8:c0:44:04:05:11:62:ee:cb:b4:d8:69:3d:de:
                    3a:bc:7d:43:6a:7f:ba:bc:4c:ef:66:38:43:a0:70:
                    20:96:9d:cd:1b:e9:a5:e4:fd:6b:7d:e1:5e:58:98:
                    86:2a:5a:4b:5d:0f:f8:ce:9d:6a:17:e0:54:9f:83:
                    29:d8:72:7b:97:5c:dd:de:1e:74:f9:f3:63:d3:d2:
                    1d:bc:1c:99:d7:ad:b2:d0:36:74:e2:b5:33:2e:66:
                    39:76:a6:5b:30:e5:c3:67:19:05:48:28:a2:3d:98:
                    ea:bd:ed:79:84:10:08:3e:51:b3:d2:ff:d7:2f:f3:
                    b1:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:0D:C7:79:BB:EC:04:97:21:AF:C4:3D:B9:C7:43:4E:74:6E:A8:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/1308b0ad-b25a-3e19-9f24-2ea5643086e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f060::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:2a:b7:71:ea:ac:70:3c:e4:5d:9f:6f:e9:73:8d:a5:2c:8f:
         20:50:13:25:7e:1e:cc:18:fa:5f:7a:18:02:86:62:7d:b9:3d:
         3a:73:ea:8d:8d:a1:55:fa:d1:0e:9d:20:c6:aa:78:04:b9:58:
         42:fe:45:ba:81:03:c7:91:f4:b2:43:2b:7a:15:ed:ef:85:8a:
         d3:c7:f9:c0:9e:5e:d6:d4:cd:f5:17:48:65:40:0d:11:d7:dc:
         ef:f7:cd:de:0d:9a:c7:57:7b:f1:2b:9c:d0:b6:f7:14:76:9b:
         ce:3c:b5:86:05:29:68:cf:55:62:bc:1c:96:27:ce:26:f6:6a:
         4b:eb:a8:52:97:b4:5e:c8:59:99:6c:89:ac:57:d4:d5:18:22:
         75:d0:8c:8c:1d:12:e8:96:3c:ec:ae:ab:53:a8:2e:b6:55:59:
         91:7d:b3:d6:18:e7:e3:42:9f:a8:e7:a5:bb:02:d5:f2:97:31:
         b7:36:ec:db:d7:13:f2:62:2d:94:bf:39:e9:9c:c6:21:b4:af:
         02:92:6d:c8:f3:cb:96:4a:ac:b5:ff:4c:b2:0b:d3:c6:33:de:
         4f:9a:8d:66:0e:50:a7:78:99:8b:cf:d4:ad:42:c1:7f:75:48:
         fe:8a:b4:03:39:77:82:73:53:a4:9d:55:51:d7:f0:4f:85:b1:
         fa:00:93:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:24:30 2024 by rpki-client on console-fra.rpki-client.org