Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8db76551-ea70-34d6-913a-7a852e11ca93.roa
File:                     8db76551-ea70-34d6-913a-7a852e11ca93.roa (raw, json)
Hash identifier:          5V7vVrgbeiDMsOPKsfNCdJHFQxG2CgAT8VSNiTIHX8Y=
Subject key identifier:   EC:7C:04:E8:30:CC:21:D9:8F:E9:5D:1A:3D:A8:B4:A3:14:4B:85:2F
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285847527C23A8366C390C264DB900
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8db76551-ea70-34d6-913a-7a852e11ca93.roa
Signing time:             Tue 24 Sep 2024 16:26:22 +0000
ROA not before:           Tue 24 Sep 2024 16:26:22 +0000
ROA not after:            Mon 23 Dec 2024 17:26:22 +0000
asID:                     12008
IP address blocks:        2001:502:f3ff::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:52:7c:23:a8:36:6c:39:0c:26:4d:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 24 16:26:22 2024 GMT
            Not After : Dec 23 17:26:22 2024 GMT
        Subject: CN=6201c18c-a348-49b3-8807-80b87d0da4bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f8:19:30:d8:74:45:3f:36:08:67:fb:7a:94:
                    26:04:f2:42:76:88:71:42:41:8a:90:a1:f0:a0:a5:
                    01:ce:b2:32:02:60:0f:d4:dd:37:dd:ce:5d:9d:c5:
                    c2:14:6f:1e:07:10:2c:fb:b9:96:bf:2c:12:88:d5:
                    dc:6f:e5:19:c2:dd:0d:2b:e1:6a:50:f7:c1:f6:86:
                    63:28:55:c5:19:88:6f:ba:c1:7d:17:4d:ee:e7:4e:
                    4c:f0:7f:f9:ff:50:c7:14:9c:56:08:7c:8f:0c:2e:
                    1a:5c:f7:37:b6:83:01:37:f9:8f:b6:59:7c:72:16:
                    55:aa:de:98:cb:9f:b8:af:ca:23:0f:a6:73:a3:52:
                    b2:2a:5d:a3:65:8a:60:f5:06:af:7f:5b:0f:ee:99:
                    54:fd:ab:21:3f:61:6d:03:6e:3c:04:6c:48:f5:53:
                    a3:62:40:f2:58:2f:2e:8d:82:bc:19:56:af:c4:7b:
                    98:b8:c8:01:0d:05:b2:d0:9a:99:59:67:cd:8e:4d:
                    b1:75:bc:65:8f:43:b1:8f:60:28:c0:04:4f:af:5d:
                    44:9f:f6:2a:eb:1e:76:e3:9b:93:c0:36:8f:05:c3:
                    a6:0d:3e:19:eb:00:96:01:77:da:be:8b:b7:f8:38:
                    99:9e:34:05:2a:95:a3:53:1b:68:79:a4:14:15:11:
                    fb:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:7C:04:E8:30:CC:21:D9:8F:E9:5D:1A:3D:A8:B4:A3:14:4B:85:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8db76551-ea70-34d6-913a-7a852e11ca93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:f3ff::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:12:34:66:f0:57:ca:16:3d:df:f6:1b:f4:27:bf:b0:eb:7e:
         26:f6:73:c7:54:7b:8c:df:5b:7f:7e:44:0b:d0:75:59:6d:25:
         bc:67:01:4c:d6:fb:b9:96:92:3f:20:32:82:b3:1b:f1:df:f0:
         66:7c:14:ff:9b:27:e5:c7:28:8a:bb:07:d9:64:fb:ae:ae:40:
         19:c4:28:3b:28:45:6b:de:4e:d9:08:98:d0:10:bd:db:f1:d8:
         40:6c:33:5b:79:ea:1d:86:7e:6c:79:7a:cf:cd:4d:c4:90:70:
         50:3c:6b:e5:71:7b:a9:76:0b:9f:4d:07:cd:70:ed:11:99:0c:
         88:cf:62:57:2d:c2:2f:18:55:73:cd:53:e1:89:48:ef:2b:50:
         e8:b6:fc:24:83:4e:c5:ae:10:30:9e:8c:b6:85:fb:e5:24:79:
         11:a5:92:c4:d7:8c:58:84:9d:cb:76:08:45:e2:95:74:bf:0d:
         11:49:8d:0e:33:8d:4f:e0:b3:fe:3a:65:78:28:6e:12:1a:84:
         32:cf:0e:2f:01:96:4a:cd:cf:99:f4:be:03:f8:bb:0d:eb:0e:
         01:77:88:4a:36:01:84:a0:08:35:ef:1b:3f:9c:f0:9e:a8:5e:
         fe:0c:63:08:a3:ce:73:07:ac:fc:dc:a1:72:5e:98:29:a8:4e:
         55:12:a0:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 07:02:09 2024 by rpki-client on console-fra.rpki-client.org