Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/de150f3e-630a-34f4-a9f4-8aae30296160.roa
File:                     de150f3e-630a-34f4-a9f4-8aae30296160.roa (raw, json)
Hash identifier:          cWE//2v3oRRz/cKegP37G0PrwenBKgRnnSLRt+L/Ufk=
Subject key identifier:   87:14:61:64:BE:BC:AD:87:87:AB:38:CD:17:B8:B5:F4:14:81:03:3F
Certificate issuer:       /CN=0e08deb7-db4d-4298-bfe7-8df00db48dc3
Certificate serial:       010D0C9F43285847AE36C5847572BFC28A457C00
Authority key identifier: 75:29:E0:2C:22:9F:1A:8D:00:71:EC:92:B2:35:02:2E:62:59:30:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/de150f3e-630a-34f4-a9f4-8aae30296160.roa
Signing time:             Sun 27 Oct 2024 13:00:41 +0000
ROA not before:           Sun 27 Oct 2024 13:00:41 +0000
ROA not after:            Sat 25 Jan 2025 14:00:41 +0000
asID:                     14618
IP address blocks:        2620:197:de0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/0e08deb7-db4d-4298-bfe7-8df00db48dc3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/0e08deb7-db4d-4298-bfe7-8df00db48dc3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ae:36:c5:84:75:72:bf:c2:8a:45:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e08deb7-db4d-4298-bfe7-8df00db48dc3
        Validity
            Not Before: Oct 27 13:00:41 2024 GMT
            Not After : Jan 25 14:00:41 2025 GMT
        Subject: CN=756d31c8-b82c-4611-aae0-3404f2f1dd15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:5a:63:88:9f:df:4f:da:09:76:8a:e4:e1:a8:
                    e8:8d:c0:b1:f0:1b:54:ec:64:3e:6a:61:56:4b:17:
                    13:d7:39:2b:19:87:00:12:e1:2b:2f:ce:4b:36:58:
                    18:25:40:ad:38:d8:bc:c7:1a:dc:c9:f1:61:35:0f:
                    a1:61:0c:40:f6:90:66:e6:05:02:1d:d2:11:8b:e2:
                    d6:fd:06:55:fe:cb:98:2c:41:09:15:1c:b1:89:d5:
                    2e:44:7e:41:b5:b4:ba:7c:b5:82:f1:7a:ff:0e:6f:
                    09:c9:70:bc:01:2c:f1:c3:98:1a:bb:9e:ec:7c:b5:
                    49:e3:25:a2:32:68:13:9f:e4:8d:ec:5b:e3:75:12:
                    fc:72:be:a8:b1:78:47:11:4c:07:af:03:c5:b9:c6:
                    cf:f4:56:35:15:67:ac:aa:39:ed:3e:cd:67:fe:d3:
                    e6:e4:0c:28:48:2b:c7:d7:e4:02:6c:9a:b4:1a:5b:
                    01:64:10:7d:b7:ee:03:cd:fe:48:d0:2b:b0:6a:fb:
                    f4:a1:ac:dc:49:27:6b:a6:e8:7c:06:f5:a1:ce:12:
                    ae:75:c4:68:ec:ec:92:47:96:83:d9:52:60:0d:5b:
                    d8:11:d5:4f:e8:a2:88:65:d8:fc:32:88:5d:d0:56:
                    72:59:4c:70:60:9e:a6:54:25:08:03:88:34:ca:54:
                    0c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:14:61:64:BE:BC:AD:87:87:AB:38:CD:17:B8:B5:F4:14:81:03:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/de150f3e-630a-34f4-a9f4-8aae30296160.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/0e08deb7-db4d-4298-bfe7-8df00db48dc3.crl

            X509v3 Authority Key Identifier:
                keyid:75:29:E0:2C:22:9F:1A:8D:00:71:EC:92:B2:35:02:2E:62:59:30:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:197:de0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:2d:67:56:86:5d:8b:77:69:72:16:df:cc:b6:0b:38:24:11:
         ae:1f:a9:15:7c:3a:47:82:f1:30:fb:cf:fe:11:a0:61:f7:32:
         a8:01:04:7b:7f:06:77:1c:b1:64:3f:08:66:d3:25:65:9b:65:
         91:cc:90:fc:02:1c:b5:81:d5:11:8b:8f:8d:f9:cc:7c:cb:d9:
         47:9c:c7:9f:57:2d:15:16:b0:5b:c6:3b:22:55:0c:99:8d:fb:
         0b:59:ef:a7:52:38:be:b8:eb:4a:c1:85:c2:67:aa:d7:64:3a:
         57:c0:dc:6b:ac:7a:14:ea:52:63:fa:d8:7a:24:77:71:13:10:
         86:59:b3:39:f7:7d:50:0f:97:16:b7:c1:e5:f5:3a:24:c1:1a:
         62:9e:49:28:11:37:15:97:29:6e:dd:06:79:fe:52:ea:9c:7a:
         64:40:91:0d:25:5c:3f:e0:9e:36:e7:bc:36:7f:0d:71:df:a6:
         3e:e8:f8:6a:9b:37:7f:2c:c4:d6:d1:38:ee:69:64:03:1b:f7:
         e7:28:51:ee:80:4a:9b:16:b8:1c:dc:96:b8:55:3d:48:f3:e8:
         c4:39:9e:79:79:76:86:c6:ea:a9:1f:cb:29:4e:6c:8f:74:7e:
         1c:66:9d:e2:ca:2f:23:1c:e2:94:7d:b4:3e:16:71:2e:b2:16:
         ef:16:c2:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:37:04 2024 by rpki-client on console-fra.rpki-client.org