Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/9eaca58c-b8fa-31e6-a0dd-7837998d58c3.roa
File:                     9eaca58c-b8fa-31e6-a0dd-7837998d58c3.roa (raw, json)
Hash identifier:          ZdIubKRN0zesDwGCkZRv1tKSbLvPtMhENKhIZMNCZs0=
Subject key identifier:   62:B3:1F:A9:D6:C3:6C:E3:74:85:94:84:AB:37:C4:A3:6D:D5:64:FC
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F432858478CB6A6A3FAA824FD869004A0
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/9eaca58c-b8fa-31e6-a0dd-7837998d58c3.roa
Signing time:             Tue 15 Oct 2024 13:00:47 +0000
ROA not before:           Tue 15 Oct 2024 13:00:47 +0000
ROA not after:            Mon 13 Jan 2025 14:00:47 +0000
asID:                     11404
IP address blocks:        2001:1868::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8c:b6:a6:a3:fa:a8:24:fd:86:90:04:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Oct 15 13:00:47 2024 GMT
            Not After : Jan 13 14:00:47 2025 GMT
        Subject: CN=d8031a18-0abd-4f40-add3-d7ba254277fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:8a:31:5f:8e:29:ca:9c:66:8c:1c:35:cd:0a:
                    a6:32:6a:5b:40:21:16:67:1f:bb:09:49:b5:fe:c4:
                    42:46:1f:69:9d:11:2f:99:c4:62:a8:be:03:fd:b7:
                    54:b8:d9:a2:42:cc:a1:b5:e1:45:b7:7a:82:1a:ea:
                    6f:3d:a9:9a:02:9f:99:71:5b:ca:86:47:c4:83:b6:
                    77:f1:8f:05:eb:1c:1b:83:5c:de:53:2b:1c:9f:18:
                    50:ad:04:df:2b:81:00:c2:c4:78:79:fb:4d:26:9e:
                    5d:0d:56:01:5c:ee:11:6d:5d:92:67:62:c6:f7:70:
                    42:46:cc:75:f5:4a:90:5d:0c:99:f9:e2:8c:6d:24:
                    c8:39:f2:19:a3:cf:c6:88:b6:3a:f1:52:2f:cb:cb:
                    a7:98:31:b7:de:fe:5d:d1:26:95:4f:b9:6d:d5:d2:
                    0b:57:d4:33:17:70:ac:b7:de:aa:bf:de:f5:56:9c:
                    79:21:b0:ca:c9:6b:86:bd:c1:00:aa:36:d1:1a:c2:
                    ec:52:c1:7d:02:03:2e:3c:23:09:55:bb:b5:70:ce:
                    f4:68:94:73:7d:28:88:f3:03:13:6c:9c:5b:f4:bd:
                    5b:ee:25:8f:49:3b:93:52:cd:7d:34:db:47:3e:16:
                    6d:60:4c:e8:3b:9d:16:6e:8c:3b:76:55:4b:d1:93:
                    7e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:B3:1F:A9:D6:C3:6C:E3:74:85:94:84:AB:37:C4:A3:6D:D5:64:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/9eaca58c-b8fa-31e6-a0dd-7837998d58c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1868::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:2d:21:13:c8:03:77:9d:4d:c7:dc:41:9c:64:53:11:83:24:
         3c:e3:6f:4d:9b:2d:70:77:bf:b3:31:dd:4c:c2:94:02:b3:c5:
         80:77:63:04:f5:85:5d:12:2c:88:aa:49:dc:b3:59:64:35:0a:
         a7:85:42:33:3d:78:c1:8f:f7:8d:f4:53:b7:8b:f8:14:a0:1b:
         8d:1d:98:ff:c2:bd:50:07:ee:3f:1e:67:fc:46:40:dc:98:a9:
         46:f5:e6:18:61:00:f5:d4:4a:1d:74:90:28:33:91:e8:21:97:
         3c:fe:cd:1a:cc:01:68:09:25:f4:48:78:fb:81:ae:ac:ec:7d:
         0a:5f:81:2d:c7:68:aa:83:1f:c0:3f:e6:52:9e:bc:7d:69:46:
         b6:66:35:78:ba:b2:a6:8e:93:7b:a7:fa:8b:96:3f:cb:b2:3f:
         5a:07:1b:00:9c:d5:20:19:51:cb:82:d8:c6:25:84:d2:08:98:
         ba:b0:33:a2:d2:bd:ce:80:7e:c7:89:29:b2:02:e2:68:23:02:
         f7:54:d6:ad:76:b2:4e:cc:a6:72:57:88:ef:6e:b9:b3:7f:9a:
         6f:dc:34:81:64:86:82:30:31:d8:fb:f2:8f:47:38:c1:46:ef:
         0d:3a:0e:36:3b:fd:ed:c4:da:28:b6:fe:f8:6b:0e:00:94:5a:
         f9:9f:82:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:59:06 2024 by rpki-client on console-fra.rpki-client.org