Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/dca4f651-cfff-3cac-8e9e-569b7ca4bc7e.roa
File:                     dca4f651-cfff-3cac-8e9e-569b7ca4bc7e.roa (raw, json)
Hash identifier:          Qd25SpAcVcKDosbw3k5BSjAZxtFPtKfPZwyAvL1UwtE=
Subject key identifier:   A6:52:90:2E:94:7E:A4:CC:A9:1C:16:46:70:DD:B2:72:05:BD:11:4D
Certificate issuer:       /CN=c4182a0d-d744-441b-a850-e3f85aa3aafb
Certificate serial:       010D0C9F43285847C4AA18AE10EB48F3CC427EA0
Authority key identifier: 2B:B1:91:D5:B4:CC:C3:BC:8A:7D:2F:CB:18:C8:09:FC:E6:99:C0:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/dca4f651-cfff-3cac-8e9e-569b7ca4bc7e.roa
Signing time:             Mon 04 Nov 2024 14:00:48 +0000
ROA not before:           Mon 04 Nov 2024 14:00:48 +0000
ROA not after:            Sun 02 Feb 2025 14:00:48 +0000
asID:                     16509
IP address blocks:        2620:135:7018::/56 maxlen: 56

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/c4182a0d-d744-441b-a850-e3f85aa3aafb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/c4182a0d-d744-441b-a850-e3f85aa3aafb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c4:aa:18:ae:10:eb:48:f3:cc:42:7e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4182a0d-d744-441b-a850-e3f85aa3aafb
        Validity
            Not Before: Nov  4 14:00:48 2024 GMT
            Not After : Feb  2 14:00:48 2025 GMT
        Subject: CN=98db485f-bf58-4b1c-beec-56baaa153f50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:6e:63:36:1c:1c:c5:99:b0:d3:5e:77:b2:1e:
                    51:21:e0:28:4c:cd:3d:6f:c4:f2:e8:55:38:fb:b1:
                    84:79:7b:67:87:a3:20:7b:4f:ce:fc:08:84:c8:6c:
                    b5:6d:e8:4d:9e:f3:7b:a3:ff:68:6c:40:e3:f6:d7:
                    07:e8:22:f4:63:10:0b:8d:d2:88:ba:1a:f1:38:b7:
                    3a:54:94:df:04:7a:e0:04:1e:aa:9e:6c:76:27:4e:
                    61:01:38:40:d5:55:87:7b:b1:e6:43:5a:ed:3c:e1:
                    cd:85:ba:5b:4e:98:f0:e9:b1:c6:fe:ad:b5:42:6d:
                    65:71:18:3c:89:9b:98:67:28:16:f2:20:eb:5e:f3:
                    a5:45:58:fd:b5:5f:c7:d7:35:4e:dd:45:84:45:1a:
                    89:c6:14:0f:67:99:e9:8f:f7:71:37:d6:af:d6:3b:
                    a2:98:38:77:10:60:f7:6e:e3:cb:55:9e:c2:e2:79:
                    6b:7b:ad:3a:c4:73:f9:2a:d2:49:40:7d:19:99:2c:
                    6d:d1:86:47:23:a3:25:88:da:9e:e7:11:1b:74:d8:
                    dd:62:39:b7:99:45:d6:0c:ab:69:8b:e0:2a:f3:da:
                    42:26:91:1e:ce:70:ee:fc:26:c9:7b:a2:2b:0b:1d:
                    5e:f6:5c:eb:b0:5c:2a:fe:e2:d7:c1:f9:69:74:2d:
                    fb:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:52:90:2E:94:7E:A4:CC:A9:1C:16:46:70:DD:B2:72:05:BD:11:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/dca4f651-cfff-3cac-8e9e-569b7ca4bc7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/c4182a0d-d744-441b-a850-e3f85aa3aafb.crl

            X509v3 Authority Key Identifier:
                keyid:2B:B1:91:D5:B4:CC:C3:BC:8A:7D:2F:CB:18:C8:09:FC:E6:99:C0:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:135:7018::/56

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:db:b7:ef:77:a3:d3:0f:88:13:95:9d:c3:54:cc:29:12:11:
         06:35:27:02:b1:24:f9:4c:a9:4a:ad:4c:58:12:3f:f8:77:29:
         c9:3b:a1:b8:2c:49:59:f7:11:68:2f:67:8c:60:89:e0:4f:54:
         2c:f8:eb:0a:06:ad:ae:75:1d:73:76:88:df:78:be:1b:2f:68:
         47:9e:b0:a9:e1:fd:82:c8:7a:8e:4c:18:85:8a:32:e0:11:c1:
         84:17:02:06:b9:8c:5c:78:62:04:44:d5:da:33:73:ff:d1:a1:
         a0:30:c0:06:8f:7e:c3:82:b1:f4:3d:fb:65:bd:b9:67:d6:7d:
         8c:0d:60:bf:e6:50:fa:e7:1d:df:1a:ce:7d:e3:61:2f:24:7e:
         52:c8:b2:ff:44:7e:58:03:d9:b5:58:5e:5c:af:3e:f5:c2:ec:
         07:4d:7c:e1:4d:ba:ed:7a:56:b6:cc:bb:be:e7:32:6c:d5:50:
         05:d5:79:32:c9:c5:f5:4a:7c:e5:92:37:71:e7:96:70:2d:f1:
         82:87:92:8b:05:0f:3a:cd:56:04:67:58:7e:36:31:0e:fd:f8:
         6a:53:f9:3a:a5:b1:a7:de:88:70:e2:f9:32:74:84:ca:7a:39:
         e0:98:35:36:43:4c:29:22:31:fb:0c:32:fd:02:fd:d8:d9:6f:
         52:0e:c9:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:25:10 2024 by rpki-client on console-fra.rpki-client.org