Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/5d063f51-fd5e-310e-8a92-8ac76afc695a.roa
File:                     5d063f51-fd5e-310e-8a92-8ac76afc695a.roa (raw, json)
Hash identifier:          4IGLBPQdEmsDFC7sP5ISN7McrUgPTi6vvBcP2qohdbE=
Subject key identifier:   0E:E0:C2:F4:65:6A:ED:C8:EF:CD:14:DE:6E:BC:8B:6F:E7:A6:8E:79
Certificate issuer:       /CN=da6c7f6b-8168-4429-94d5-cfb14e57dd2e
Certificate serial:       010D0C9F432858478CB68ED0D6F83CF7C66C8100
Authority key identifier: 03:79:34:AC:2E:FC:50:D4:22:E4:D6:C3:93:5D:CE:4C:69:C4:79:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/5d063f51-fd5e-310e-8a92-8ac76afc695a.roa
Signing time:             Tue 15 Oct 2024 13:00:47 +0000
ROA not before:           Tue 15 Oct 2024 13:00:47 +0000
ROA not after:            Mon 13 Jan 2025 14:00:47 +0000
asID:                     14203
IP address blocks:        2620:103:c000::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/da6c7f6b-8168-4429-94d5-cfb14e57dd2e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/da6c7f6b-8168-4429-94d5-cfb14e57dd2e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8c:b6:8e:d0:d6:f8:3c:f7:c6:6c:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da6c7f6b-8168-4429-94d5-cfb14e57dd2e
        Validity
            Not Before: Oct 15 13:00:47 2024 GMT
            Not After : Jan 13 14:00:47 2025 GMT
        Subject: CN=448dc468-c7c8-498f-9c86-229ef56ce075
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:17:58:45:b9:3d:63:2d:9e:1d:97:14:6b:d9:
                    86:ae:2e:58:57:51:b1:ea:2d:c5:b3:4f:91:ad:a5:
                    67:0c:2c:58:f4:2b:d1:23:c0:c5:2b:ee:84:3b:54:
                    0f:07:da:b8:7c:9a:03:2e:d6:44:be:af:91:e5:1c:
                    b7:b7:d1:f5:bb:6c:a5:d4:ff:e0:a7:d2:56:96:35:
                    1f:47:77:67:82:f5:62:54:42:32:cc:a6:0e:01:d4:
                    e8:f3:3d:f6:8f:58:be:e3:94:67:da:32:02:56:39:
                    03:13:2f:02:48:a7:b6:4d:32:5d:4a:7e:24:76:1c:
                    ec:fa:d8:96:73:95:9d:e4:46:bb:67:bb:81:c9:fd:
                    e3:84:c4:e0:d2:99:9e:e8:86:16:b9:54:ee:a8:9f:
                    93:68:b2:81:81:94:9a:18:14:8f:96:3e:ae:bf:ab:
                    64:4a:30:1a:0f:f0:6e:bc:57:07:22:a4:c8:34:72:
                    10:e6:ac:a6:69:84:41:b9:f6:31:2c:a9:bb:b4:3b:
                    ed:80:28:49:1c:ee:25:9a:ff:f9:aa:84:26:4e:ea:
                    d5:f0:77:cd:d3:d5:4c:c8:7a:56:27:a7:d0:87:93:
                    47:e1:24:3b:d0:d7:f1:e8:3a:b1:52:09:e0:89:3f:
                    76:cb:e3:c4:e1:63:43:c7:63:9a:ad:78:60:84:ec:
                    00:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:E0:C2:F4:65:6A:ED:C8:EF:CD:14:DE:6E:BC:8B:6F:E7:A6:8E:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/5d063f51-fd5e-310e-8a92-8ac76afc695a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/da6c7f6b-8168-4429-94d5-cfb14e57dd2e.crl

            X509v3 Authority Key Identifier:
                keyid:03:79:34:AC:2E:FC:50:D4:22:E4:D6:C3:93:5D:CE:4C:69:C4:79:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:103:c000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:55:2a:a7:85:7c:34:52:c0:da:d3:d6:42:c3:ef:93:f0:8f:
         d8:83:d3:4e:87:9e:df:e9:ea:75:d8:b2:0e:53:b8:fc:16:61:
         9d:6f:2a:14:6a:7b:f8:89:89:45:47:1b:f7:b3:70:0e:d6:b5:
         d4:e5:43:39:fa:be:7f:f6:e8:46:1b:be:47:73:a5:82:58:15:
         e0:a2:50:f8:8b:33:13:c5:1b:44:51:57:5b:9e:25:72:10:10:
         25:f6:dd:1f:05:24:a3:2c:07:e8:57:67:29:ff:c6:75:52:65:
         6f:6b:cc:2b:3a:6e:df:cf:d7:2e:ec:a2:94:db:f6:b2:d1:bb:
         c2:90:ac:2c:e6:ec:f0:93:be:2d:cc:f9:e7:25:6c:5a:08:f1:
         bf:fe:7e:c5:67:52:cf:cc:a9:54:d2:4e:e6:5c:47:33:9c:64:
         19:59:ea:2b:f5:88:fd:4b:3c:87:e3:f1:a4:f0:03:fe:26:5a:
         9a:ec:3d:e8:7e:88:0d:40:f4:c6:b0:d8:4f:b8:dd:bd:6f:f6:
         79:db:93:be:54:4d:42:88:42:36:2d:c4:c6:ad:1c:d4:be:dc:
         88:36:9d:d6:e6:66:8d:fc:2a:72:9a:a1:28:e5:3d:e2:ed:ed:
         ff:f3:63:4d:98:9a:36:b4:17:52:ef:ca:f4:a7:25:2c:a6:e6:
         73:07:40:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:48:49 2024 by rpki-client on console-ams.rpki-client.org