Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/1c9fd5a0-05e0-3a7b-9892-34e07addc3e1.roa
File:                     1c9fd5a0-05e0-3a7b-9892-34e07addc3e1.roa (raw, json)
Hash identifier:          dAmN4nt12H6EEeGI0sVj6DwCJoAk6Q0xoPESne5kYGM=
Subject key identifier:   FE:97:B7:DB:88:CB:F7:F2:F2:B7:28:2E:5E:D4:D1:BC:03:3F:31:4C
Certificate issuer:       /CN=0412f035-b376-4807-a8ac-e98680ab0e36
Certificate serial:       010D0C9F432858474420B8EF3E104FB0AA69A100
Authority key identifier: 89:71:A9:FF:83:E0:46:16:D8:3E:5B:E7:78:2B:13:F8:84:29:F0:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/1c9fd5a0-05e0-3a7b-9892-34e07addc3e1.roa
Signing time:             Thu 19 Sep 2024 13:00:42 +0000
ROA not before:           Thu 19 Sep 2024 13:00:42 +0000
ROA not after:            Wed 18 Dec 2024 14:00:42 +0000
asID:                     6142
IP address blocks:        2620:9:a008::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/0412f035-b376-4807-a8ac-e98680ab0e36.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/0412f035-b376-4807-a8ac-e98680ab0e36.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:44:20:b8:ef:3e:10:4f:b0:aa:69:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0412f035-b376-4807-a8ac-e98680ab0e36
        Validity
            Not Before: Sep 19 13:00:42 2024 GMT
            Not After : Dec 18 14:00:42 2024 GMT
        Subject: CN=020b603d-d09d-4249-b677-8f009692881c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ae:dd:c8:76:04:49:04:d6:b5:58:a1:2e:4f:
                    24:da:e3:f5:b4:7f:30:79:1d:15:33:24:31:96:a4:
                    60:ef:73:15:22:bb:32:6f:40:bd:b3:84:bd:60:25:
                    03:a7:ad:10:76:90:30:0a:a8:6b:e8:ca:29:ec:79:
                    0a:77:d6:f4:6f:40:45:6e:4a:26:00:2c:3a:73:44:
                    ff:09:50:e4:bf:c4:3f:50:65:62:88:ab:49:f8:8c:
                    e5:73:04:11:c6:10:b3:e7:6b:24:87:5d:73:88:90:
                    8e:0d:9f:a3:b5:2e:04:68:6a:30:03:43:51:ae:b7:
                    fd:b0:40:0f:4d:79:c3:e1:6d:b0:b1:a2:7b:29:4e:
                    a1:27:42:59:41:85:58:5e:8e:4d:9d:7b:dd:86:88:
                    96:c0:40:02:b8:e3:3e:ba:c1:b5:8c:d4:78:47:82:
                    47:c1:8b:05:b2:aa:61:65:32:b9:49:90:0e:77:be:
                    be:7e:63:e8:dd:f8:56:b5:44:8e:66:43:d2:41:99:
                    f3:6b:a6:d7:60:24:4b:94:cd:84:41:1c:d2:ec:4e:
                    19:cf:1f:66:61:b1:eb:ea:62:20:d5:de:f7:4f:93:
                    dc:67:8b:6f:56:df:eb:d3:18:2b:4c:02:67:78:78:
                    23:b4:b9:1f:ad:15:69:b5:40:61:89:ca:69:ba:c6:
                    74:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:97:B7:DB:88:CB:F7:F2:F2:B7:28:2E:5E:D4:D1:BC:03:3F:31:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/1c9fd5a0-05e0-3a7b-9892-34e07addc3e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/0412f035-b376-4807-a8ac-e98680ab0e36.crl

            X509v3 Authority Key Identifier:
                keyid:89:71:A9:FF:83:E0:46:16:D8:3E:5B:E7:78:2B:13:F8:84:29:F0:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:9:a008::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:02:bc:77:3c:21:6a:55:7d:78:eb:58:0a:ca:c2:42:10:5e:
         c7:47:43:d7:1f:8d:7a:0d:85:e3:90:23:a3:0e:96:2d:6a:86:
         93:6d:28:dc:21:f7:c6:ea:f5:92:33:93:20:ec:13:9c:b8:95:
         82:83:66:84:77:5f:57:63:32:45:42:3f:cc:4d:72:29:ca:3f:
         04:b1:d2:2a:91:78:14:fd:33:d8:86:8a:ac:7a:a0:14:6a:a5:
         ac:7f:bb:d1:ef:1a:5d:0d:38:c2:16:bc:22:13:f7:a5:dd:34:
         3d:f4:45:78:aa:01:47:d1:8f:48:a3:89:94:34:11:71:80:e9:
         1c:14:9e:7c:40:f1:ac:ee:d3:03:dd:dc:1b:c2:33:d2:6e:ed:
         68:66:d1:e3:e7:f5:22:ca:49:21:34:57:d9:27:e5:dd:f9:82:
         12:0f:21:07:e6:71:c2:cd:71:be:7a:86:99:19:6b:01:de:c3:
         c1:d9:22:cf:c7:66:86:a5:01:32:02:4d:6f:e5:67:85:c3:23:
         25:61:eb:c4:15:ac:9b:79:4e:b4:05:4e:60:22:04:9f:36:4b:
         16:12:63:40:ee:d3:12:ab:bf:a7:37:ac:a1:53:ba:32:62:e1:
         96:93:91:b0:c7:12:0c:b7:58:f4:f6:cf:f3:82:e4:7f:16:be:
         ce:e3:bc:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:56:41 2024 by rpki-client on console-ams.rpki-client.org