Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b06aad26-b91f-432b-94ca-bf78ffe68996/b465a98c-c874-38a4-b591-0a2be8ee676c.roa
File:                     b465a98c-c874-38a4-b591-0a2be8ee676c.roa (raw, json)
Hash identifier:          d/OPZ+5aict9qvBh4RXHtvofXhAh1rBXImlOxfZ0+3k=
Subject key identifier:   08:92:D1:CF:8E:93:A2:25:F0:92:3E:19:DB:BB:04:25:33:42:F3:D4
Certificate issuer:       /CN=b06aad26-b91f-432b-94ca-bf78ffe68996
Certificate serial:       010D0C9F43285847B3CC10E291511CBDE423E900
Authority key identifier: 42:72:EA:5B:2D:4D:E7:1D:68:27:45:FB:1B:45:B2:75:9B:E4:5C:88
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b06aad26-b91f-432b-94ca-bf78ffe68996.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b06aad26-b91f-432b-94ca-bf78ffe68996/b465a98c-c874-38a4-b591-0a2be8ee676c.roa
Signing time:             Tue 29 Oct 2024 13:00:40 +0000
ROA not before:           Tue 29 Oct 2024 13:00:40 +0000
ROA not after:            Mon 27 Jan 2025 14:00:40 +0000
asID:                     14183
IP address blocks:        2620:e8::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b06aad26-b91f-432b-94ca-bf78ffe68996/b06aad26-b91f-432b-94ca-bf78ffe68996.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b06aad26-b91f-432b-94ca-bf78ffe68996/b06aad26-b91f-432b-94ca-bf78ffe68996.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b06aad26-b91f-432b-94ca-bf78ffe68996.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b3:cc:10:e2:91:51:1c:bd:e4:23:e9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b06aad26-b91f-432b-94ca-bf78ffe68996
        Validity
            Not Before: Oct 29 13:00:40 2024 GMT
            Not After : Jan 27 14:00:40 2025 GMT
        Subject: CN=524f071a-76c8-4a57-b54a-049edf12e991
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9f:40:6b:29:ba:48:81:c0:9c:ef:87:35:ac:
                    2f:71:58:ab:53:e0:f3:00:ea:f6:fa:5d:31:5e:40:
                    59:25:be:f4:61:f9:ee:54:40:51:66:8a:bf:05:8f:
                    12:83:75:64:ef:d1:e6:0f:8b:67:3d:31:be:6c:0a:
                    9f:f0:68:66:fa:9b:eb:de:60:ae:ac:eb:23:43:6f:
                    75:f9:6b:2e:22:b1:24:28:7e:9e:ac:7c:37:30:92:
                    a5:c3:92:d0:7f:33:80:68:c0:6c:f6:c5:2b:1c:f0:
                    82:12:2e:93:5c:04:92:ec:69:72:4c:fb:43:a8:43:
                    33:cb:9a:42:7b:2d:32:80:7f:54:12:04:5c:c4:2e:
                    2a:29:50:e8:45:41:30:e8:e5:5f:62:51:e4:49:b3:
                    06:9f:9a:64:4f:79:98:21:92:ff:17:e7:6f:1e:fe:
                    ae:60:61:29:0b:8d:30:3d:6e:34:90:1f:f0:c9:a4:
                    48:22:d7:c7:57:f7:55:9d:d3:75:40:1f:fe:7e:d0:
                    c4:9c:54:37:96:b7:da:94:cb:77:45:f3:3e:70:a1:
                    e1:e6:c1:fa:f4:00:af:2d:fa:48:3a:1f:59:38:0c:
                    ce:fd:95:5e:2c:fa:a3:a8:8a:22:8a:36:08:dd:aa:
                    87:5a:39:9a:2f:09:05:d0:d5:05:ed:a0:b7:b5:3f:
                    19:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:92:D1:CF:8E:93:A2:25:F0:92:3E:19:DB:BB:04:25:33:42:F3:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b06aad26-b91f-432b-94ca-bf78ffe68996/b465a98c-c874-38a4-b591-0a2be8ee676c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b06aad26-b91f-432b-94ca-bf78ffe68996/b06aad26-b91f-432b-94ca-bf78ffe68996.crl

            X509v3 Authority Key Identifier:
                keyid:42:72:EA:5B:2D:4D:E7:1D:68:27:45:FB:1B:45:B2:75:9B:E4:5C:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b06aad26-b91f-432b-94ca-bf78ffe68996.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:e8::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:12:d0:07:6a:6d:d1:43:fe:87:bc:ae:45:1b:c7:e4:5e:8b:
         10:ee:0c:63:bf:03:db:db:74:28:b4:c7:af:9f:61:71:b5:0c:
         b6:31:f3:a0:3f:52:fa:ee:d0:99:aa:ac:c0:31:7c:ed:39:55:
         53:bf:8c:fd:91:24:a1:6c:97:b4:bf:66:2a:dd:29:9d:e2:2c:
         6e:d9:7f:93:73:af:89:d7:c9:92:1c:5c:08:25:39:23:ad:fa:
         78:e9:35:7e:01:69:a6:ad:67:09:83:d0:ba:68:04:f9:f4:c9:
         3e:e5:26:68:42:d4:aa:e5:15:3b:ce:7b:b4:c2:f0:f6:81:2a:
         92:b0:35:3e:10:6f:5d:0d:fa:72:20:8e:48:71:fc:bc:fa:fc:
         72:52:01:36:94:84:ee:4a:ee:16:ed:d6:20:d1:64:65:31:10:
         1d:d6:36:f7:e5:d6:07:c6:cc:07:3d:45:c5:67:1f:9e:e8:ed:
         ef:04:87:83:65:ed:55:b4:ed:f9:68:ca:0f:e2:e7:db:26:7b:
         db:2d:3e:ca:21:39:54:97:84:d2:cb:aa:54:a6:ae:6c:41:cc:
         2c:b2:58:66:a8:77:e3:23:d4:05:fd:e3:19:d1:cc:f0:33:17:
         47:cf:7d:5f:11:c9:4a:76:f5:9e:8c:ab:ef:c1:0b:6a:0f:2d:
         54:70:d0:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 18:54:19 2024 by rpki-client on console-fra.rpki-client.org