Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/1bc0b1e6-ba1d-3c24-b678-c29bf30220e3.roa
File:                     1bc0b1e6-ba1d-3c24-b678-c29bf30220e3.roa (raw, json)
Hash identifier:          3nI7/Zm4w9sTb9/DtT+AsQMf7Bu97ejJZ14X7FRTltM=
Subject key identifier:   8D:F4:9A:84:9C:F0:3A:D8:01:8A:76:C7:79:22:C4:E7:54:8A:F8:F4
Certificate issuer:       /CN=0c82e125-4df5-4912-a714-101a1caa5b99
Certificate serial:       010D0C9F43285847F84F7657B2F56DE5DC81EB80
Authority key identifier: C8:3C:B8:82:00:3B:32:08:ED:C5:10:F7:50:10:E0:68:D4:96:44:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/1bc0b1e6-ba1d-3c24-b678-c29bf30220e3.roa
Signing time:             Sat 23 Nov 2024 02:00:28 +0000
ROA not before:           Sat 23 Nov 2024 02:00:28 +0000
ROA not after:            Fri 21 Feb 2025 02:00:28 +0000
asID:                     54054
IP address blocks:        2620:8c:4000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/0c82e125-4df5-4912-a714-101a1caa5b99.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/0c82e125-4df5-4912-a714-101a1caa5b99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f8:4f:76:57:b2:f5:6d:e5:dc:81:eb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c82e125-4df5-4912-a714-101a1caa5b99
        Validity
            Not Before: Nov 23 02:00:28 2024 GMT
            Not After : Feb 21 02:00:28 2025 GMT
        Subject: CN=f5384f7f-5116-420c-a2a4-da7924e5bb4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:cb:87:85:80:a5:2e:a9:bf:48:c1:19:fe:46:
                    85:2d:a5:97:9e:b5:75:a4:57:45:e3:bb:b8:83:ba:
                    49:9f:21:29:0a:bc:bc:ea:88:05:e1:c3:2a:ae:76:
                    8f:9b:5b:7f:c1:e4:46:83:d7:12:e5:4c:3f:94:6e:
                    cf:e1:d4:8c:2b:d5:67:51:6f:a9:25:0e:3b:b0:98:
                    43:ef:3c:bf:d3:dc:a7:3e:f6:6d:33:c8:89:1e:cb:
                    bf:6f:01:6d:20:d5:df:67:58:61:98:0c:07:30:1f:
                    3e:e8:fc:f0:32:0d:d1:17:76:a8:c5:13:06:a5:84:
                    18:2d:2c:9f:86:49:7e:11:a9:18:68:94:57:40:7a:
                    89:21:aa:9b:3f:32:97:16:7d:75:61:b6:a7:c8:ec:
                    25:38:48:74:3e:93:0e:9c:53:d9:da:ac:00:1b:09:
                    c8:91:74:4e:ae:d1:a7:e8:55:42:d6:b5:ac:54:41:
                    1a:82:63:ce:e0:56:bd:b3:13:b4:dd:a1:79:96:57:
                    e0:ce:e8:35:12:a4:8c:58:29:36:14:67:a1:c9:b7:
                    19:4c:8e:58:a9:e4:63:f4:e7:3d:5c:e7:6e:0d:ba:
                    87:bf:89:74:b5:ef:39:50:d7:2c:4d:4b:83:fd:9a:
                    3f:d8:6e:59:0e:d8:96:22:dc:ca:f7:c4:2d:ff:00:
                    dd:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:F4:9A:84:9C:F0:3A:D8:01:8A:76:C7:79:22:C4:E7:54:8A:F8:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/1bc0b1e6-ba1d-3c24-b678-c29bf30220e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/0c82e125-4df5-4912-a714-101a1caa5b99.crl

            X509v3 Authority Key Identifier:
                keyid:C8:3C:B8:82:00:3B:32:08:ED:C5:10:F7:50:10:E0:68:D4:96:44:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:8c:4000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:38:00:3d:75:22:6c:3a:dc:c7:7a:32:c3:de:02:72:14:c4:
         4f:87:6b:8d:60:e0:19:92:f5:1e:10:d5:26:7f:f8:03:7f:3a:
         09:9a:10:89:48:41:e9:9a:65:3c:b1:20:2a:a1:02:7c:05:06:
         3a:77:cd:1f:da:c5:8b:04:71:7e:b0:ba:49:2d:27:59:ca:e7:
         f9:4f:cc:67:bd:dd:64:d9:be:a6:4e:9f:2f:7a:c4:68:f6:64:
         30:bf:e0:3f:a4:a3:3a:31:fe:7b:bd:59:0d:d8:e6:98:1b:db:
         21:cf:47:64:69:f3:e6:90:18:37:57:56:cb:e4:2e:7b:94:39:
         fa:3b:2c:ed:82:14:0d:e3:8a:c8:34:64:99:63:24:93:a3:41:
         3d:b8:6b:6b:df:db:25:59:b8:8b:21:be:ac:bb:33:37:19:08:
         9a:c2:0d:fc:02:ec:57:46:a1:10:3b:a0:e2:54:6c:2c:20:18:
         2a:31:d3:98:54:6d:1c:33:2b:73:5b:83:3f:68:53:15:88:c8:
         11:6e:b4:21:4f:4b:7b:80:74:a2:59:c9:5f:25:f2:ae:e2:dc:
         1a:09:8e:de:f1:9e:c2:67:bc:86:97:a5:fd:69:35:e7:cf:73:
         fa:4f:b7:ad:48:85:21:41:f3:cb:6f:43:15:64:fc:af:a5:31:
         da:d0:e3:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:05:09 2024 by rpki-client on console-ams.rpki-client.org