Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/f5e9cfdc-fdaf-32b7-a0b3-ca092b5648d6.roa
File:                     f5e9cfdc-fdaf-32b7-a0b3-ca092b5648d6.roa (raw, json)
Hash identifier:          hhPTjZ5LqQI+6R1hKkqtk6Mko5fYr311Zkgro0wT+SQ=
Subject key identifier:   8C:B0:D3:EC:EE:88:C3:CD:10:9A:EF:55:04:4E:C6:06:FF:39:D9:CE
Certificate issuer:       /CN=0e08deb7-db4d-4298-bfe7-8df00db48dc3
Certificate serial:       010D0C9F43285847E35F76470CD81B322F504E00
Authority key identifier: 75:29:E0:2C:22:9F:1A:8D:00:71:EC:92:B2:35:02:2E:62:59:30:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/f5e9cfdc-fdaf-32b7-a0b3-ca092b5648d6.roa
Signing time:             Fri 15 Nov 2024 14:00:39 +0000
ROA not before:           Fri 15 Nov 2024 14:00:39 +0000
ROA not after:            Thu 13 Feb 2025 14:00:39 +0000
asID:                     16509
IP address blocks:        2620:197:f00::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/0e08deb7-db4d-4298-bfe7-8df00db48dc3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/0e08deb7-db4d-4298-bfe7-8df00db48dc3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e3:5f:76:47:0c:d8:1b:32:2f:50:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e08deb7-db4d-4298-bfe7-8df00db48dc3
        Validity
            Not Before: Nov 15 14:00:39 2024 GMT
            Not After : Feb 13 14:00:39 2025 GMT
        Subject: CN=605accf7-b020-4f9f-a8a4-6a50ad193265
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:05:99:b2:d5:81:ad:03:42:33:e4:ab:40:52:
                    6e:42:2e:fa:89:68:ff:f1:0c:f6:c0:e1:aa:93:3b:
                    9d:43:d4:4e:bb:c1:a6:dd:69:78:8f:f1:fe:33:19:
                    19:66:e7:65:bb:3e:00:6e:bb:60:ac:6e:4a:52:b6:
                    c2:f0:31:12:8a:9d:cf:c5:63:47:43:1b:3b:1e:e9:
                    4a:6c:63:f2:47:1d:f1:d7:73:1c:ba:7b:b7:8b:c2:
                    91:cd:52:64:50:2f:3b:40:fe:38:4e:22:a8:e4:3a:
                    80:78:49:1a:bb:fb:33:d0:ee:36:e1:ad:95:97:b7:
                    67:96:87:1c:1f:ff:99:e3:b9:80:f8:5b:4a:c0:b2:
                    44:85:2f:b0:9f:1c:e6:c5:b2:3d:0e:2c:d6:cb:f4:
                    fe:03:95:7a:be:06:9b:2c:0e:1a:45:0a:19:c6:8b:
                    ca:9c:c3:27:54:07:9e:16:09:99:c9:0b:5f:c2:74:
                    b1:bc:84:22:8e:a9:d8:36:fc:6f:b4:5c:26:0d:e8:
                    27:52:c1:ea:54:52:d8:61:b8:5b:d1:7c:c9:d7:3a:
                    e8:69:46:4e:cc:37:53:75:9a:5c:bd:89:ee:8d:74:
                    c6:1b:06:0d:b8:9b:7b:b3:4e:14:8e:32:0e:81:e2:
                    c7:c4:32:f0:d2:70:69:50:fb:76:ac:de:28:9a:c6:
                    35:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:B0:D3:EC:EE:88:C3:CD:10:9A:EF:55:04:4E:C6:06:FF:39:D9:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/f5e9cfdc-fdaf-32b7-a0b3-ca092b5648d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/0e08deb7-db4d-4298-bfe7-8df00db48dc3.crl

            X509v3 Authority Key Identifier:
                keyid:75:29:E0:2C:22:9F:1A:8D:00:71:EC:92:B2:35:02:2E:62:59:30:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:197:f00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:18:d2:6f:75:88:33:1e:f0:d4:c2:d9:75:c8:56:41:6a:95:
         52:8a:1c:ba:8e:3d:e1:83:7e:13:41:35:97:a7:52:51:38:29:
         aa:bc:6c:d1:3e:3a:bc:30:16:4f:6e:95:cd:df:62:be:5b:0b:
         90:e7:dc:07:5e:85:8f:f1:63:a9:09:24:85:ab:2c:1a:b6:74:
         68:f0:a6:5c:84:b2:b2:0b:50:2c:09:7a:ab:03:27:bd:2d:4f:
         f7:ce:3b:75:a7:d2:96:da:20:65:ff:38:29:df:0d:79:13:7e:
         53:ce:cf:00:1a:0f:f7:74:6b:d5:b2:74:bc:90:a4:00:59:da:
         77:8a:35:bf:e1:8c:c8:2c:b1:d0:a8:ab:ac:8b:5d:34:2d:3d:
         cd:77:3f:27:0f:30:a3:b4:d9:6f:d5:62:a2:21:50:2a:7e:cc:
         59:58:48:65:60:8b:1f:0a:d7:7b:f2:cd:1e:df:a0:98:fe:1d:
         96:ea:11:6b:aa:6b:f6:b4:c6:f8:1f:4e:7c:ab:ec:63:d0:96:
         bb:b8:20:11:b1:15:98:e4:43:05:76:f1:22:13:ef:64:c1:03:
         81:62:2c:82:a1:60:79:75:12:c9:67:18:8e:b7:d4:94:c9:9f:
         2c:e3:96:a8:d1:91:3b:eb:4b:d4:b5:bd:7c:e0:f2:f7:0e:30:
         1a:43:29:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:38:05 2024 by rpki-client on console-ams.rpki-client.org