Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8715c48f-238b-4492-ab94-609edd679287/330d7a56-9d3b-325a-9408-7b85401e8917.roa
File:                     330d7a56-9d3b-325a-9408-7b85401e8917.roa (raw, json)
Hash identifier:          Jnm5+ud6nZ+EKEpfOAvgZyD74WKxXwAmZaQokxQXPG0=
Subject key identifier:   75:24:DC:0D:07:38:C5:72:F1:6D:DD:C0:31:7B:54:DD:41:83:3C:25
Certificate issuer:       /CN=8715c48f-238b-4492-ab94-609edd679287
Certificate serial:       010D0C9F432858471D0B1B2E9772808857480980
Authority key identifier: 15:6C:BC:CD:BB:DE:77:3B:E2:ED:55:0B:0F:8C:04:DD:7F:24:86:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8715c48f-238b-4492-ab94-609edd679287.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8715c48f-238b-4492-ab94-609edd679287/330d7a56-9d3b-325a-9408-7b85401e8917.roa
Signing time:             Thu 05 Sep 2024 13:00:41 +0000
ROA not before:           Thu 05 Sep 2024 13:00:41 +0000
ROA not after:            Wed 04 Dec 2024 14:00:41 +0000
asID:                     68
IP address blocks:        2620:126:4000::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8715c48f-238b-4492-ab94-609edd679287/8715c48f-238b-4492-ab94-609edd679287.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8715c48f-238b-4492-ab94-609edd679287/8715c48f-238b-4492-ab94-609edd679287.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8715c48f-238b-4492-ab94-609edd679287.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1d:0b:1b:2e:97:72:80:88:57:48:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8715c48f-238b-4492-ab94-609edd679287
        Validity
            Not Before: Sep  5 13:00:41 2024 GMT
            Not After : Dec  4 14:00:41 2024 GMT
        Subject: CN=f39d8f0a-1682-4f18-b3e6-13267d752999
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c3:47:32:b3:ba:fd:0d:eb:5d:79:0b:4f:fe:
                    84:35:e8:23:88:b0:3d:d6:04:6d:4c:46:14:37:c5:
                    08:24:83:db:62:ae:ac:22:a2:b8:18:0b:71:da:ac:
                    ee:53:bc:89:40:57:6d:ee:8d:c4:4e:bb:59:98:c7:
                    0c:22:85:96:88:a2:30:5f:f1:16:bd:c7:97:e8:88:
                    87:9f:df:26:95:30:0e:c0:db:4b:a0:58:8f:4d:92:
                    7b:ed:5a:de:41:c3:ae:54:d0:91:f8:2e:e8:17:63:
                    fd:61:40:e2:e4:61:c9:4a:45:d8:3d:61:9c:fe:d1:
                    ce:bd:da:26:66:6b:c0:be:c9:2a:27:3f:30:a4:2b:
                    73:d3:b9:4b:76:97:a2:08:bb:04:96:17:31:b9:0a:
                    fd:61:f2:8b:af:8a:80:2b:a8:4e:76:d4:be:21:c0:
                    ff:4a:80:06:16:05:11:5e:19:f5:82:fa:9a:c2:11:
                    b2:3f:ba:1f:3e:e9:ac:e2:02:0e:47:e2:77:0b:bd:
                    33:58:0d:19:7d:ee:65:3e:86:e7:76:82:53:1c:22:
                    e2:f8:79:41:bc:10:2b:1c:34:63:1a:e9:0b:9c:49:
                    56:61:5c:34:e2:27:d8:60:ab:0b:01:f4:62:bd:0b:
                    c1:4e:bc:c6:f4:2b:d7:00:fb:d9:6c:d8:af:31:5d:
                    94:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:24:DC:0D:07:38:C5:72:F1:6D:DD:C0:31:7B:54:DD:41:83:3C:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8715c48f-238b-4492-ab94-609edd679287/330d7a56-9d3b-325a-9408-7b85401e8917.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8715c48f-238b-4492-ab94-609edd679287/8715c48f-238b-4492-ab94-609edd679287.crl

            X509v3 Authority Key Identifier:
                keyid:15:6C:BC:CD:BB:DE:77:3B:E2:ED:55:0B:0F:8C:04:DD:7F:24:86:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8715c48f-238b-4492-ab94-609edd679287.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:126:4000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:32:1d:a5:d9:6e:78:0a:56:cc:ad:38:52:e0:00:30:95:31:
         03:df:bb:8b:82:ae:1b:7a:c5:2b:ee:39:7e:ec:83:8b:91:39:
         fa:d8:cb:f6:ae:7a:b9:22:6e:86:d4:2b:9c:7d:29:f8:38:4f:
         c5:93:3d:7b:a3:d3:e8:c9:29:57:95:cf:dd:b2:03:fb:e0:14:
         2c:b3:53:bc:6e:3d:6c:aa:8b:a3:d0:a1:c1:26:aa:81:06:9f:
         57:7c:23:40:0e:ef:5d:6e:a6:d3:2a:c6:8f:b1:e1:22:b8:33:
         43:1d:d3:31:16:da:a2:52:70:41:7e:21:d1:45:ba:42:59:4d:
         1f:19:d1:48:7b:4b:54:dd:eb:1f:5d:fd:36:4d:9c:9a:f1:ff:
         57:6c:fa:f6:89:fe:28:f9:ef:62:29:e6:7a:4a:fe:c0:82:57:
         bb:6a:d8:e3:a0:d2:9f:43:25:f0:02:25:9c:1d:cf:a2:26:88:
         4e:4a:43:74:41:20:fa:42:7d:5f:94:9f:fe:b0:d1:1c:03:1c:
         7b:f2:62:53:e0:fb:ee:96:1d:e1:33:72:65:06:a0:d6:7f:7d:
         cb:25:cb:f3:fe:b8:31:ab:9a:a4:84:d0:5d:9f:2a:5a:78:35:
         41:3a:42:50:ba:1a:ce:14:b8:b5:c1:cc:5c:cd:19:e2:41:b0:
         54:54:06:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:49:10 2024 by rpki-client on console-ams.rpki-client.org