Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/fd8fc722-6aa9-306a-ae00-97cae3ebf37c.roa
File:                     fd8fc722-6aa9-306a-ae00-97cae3ebf37c.roa (raw, json)
Hash identifier:          /FpjwHzyY6TDn/AD2Plyywafkk/HAVD8DYq2loHKEHc=
Subject key identifier:   21:9B:3C:71:DB:50:9F:BA:9A:02:5F:B6:23:F0:FD:DA:70:DF:95:25
Certificate issuer:       /CN=d184e471-080a-4e54-bf94-60dd0c8beb48
Certificate serial:       010D0C9F43285847C4AA13A9D6981137C2BC11C0
Authority key identifier: 82:2A:C6:5F:05:77:96:D6:12:FB:24:86:E6:72:C6:12:A5:B6:41:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/fd8fc722-6aa9-306a-ae00-97cae3ebf37c.roa
Signing time:             Mon 04 Nov 2024 14:00:48 +0000
ROA not before:           Mon 04 Nov 2024 14:00:48 +0000
ROA not after:            Sun 02 Feb 2025 14:00:48 +0000
asID:                     22926
IP address blocks:        2607:f5e8::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/d184e471-080a-4e54-bf94-60dd0c8beb48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/d184e471-080a-4e54-bf94-60dd0c8beb48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c4:aa:13:a9:d6:98:11:37:c2:bc:11:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d184e471-080a-4e54-bf94-60dd0c8beb48
        Validity
            Not Before: Nov  4 14:00:48 2024 GMT
            Not After : Feb  2 14:00:48 2025 GMT
        Subject: CN=ba9ac3b7-9b31-4c6e-94ac-ea4ca8e17322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:82:fc:f4:6d:84:89:47:57:8a:77:9d:de:ea:
                    21:db:91:38:d7:9f:e8:0e:e7:2c:c7:d7:50:74:52:
                    62:5a:c0:d7:0a:5d:81:a8:54:f9:6c:51:56:8f:a1:
                    fd:15:40:35:a3:4f:af:aa:f6:03:08:7f:ce:72:59:
                    7e:14:f1:d9:e6:2c:48:cd:41:6f:db:13:16:cb:4b:
                    8f:13:90:e0:8e:7b:62:92:5a:c1:5b:95:a1:22:c0:
                    d5:a6:41:09:85:b1:3c:ee:6c:4b:77:1d:00:bb:dc:
                    0f:66:e1:1d:57:c9:86:d6:ae:7e:26:ca:f5:12:ae:
                    01:ce:f7:49:14:da:f5:d7:4b:fa:f8:6a:54:1a:67:
                    3f:c6:2a:a2:4d:95:6f:3b:80:5c:93:4c:ed:bc:90:
                    ce:68:20:d7:57:a3:54:45:c2:bb:ea:13:be:25:ad:
                    fe:85:91:97:23:8f:f0:db:13:f3:f8:29:dd:36:4e:
                    01:1c:24:92:ed:f8:99:50:72:1c:a6:b7:28:23:0c:
                    3b:00:92:4d:37:cd:9e:b2:4e:26:62:33:54:6e:79:
                    20:f9:ca:33:6a:b2:0a:3b:f1:6a:51:14:26:36:c4:
                    07:ec:a3:cb:cf:be:f6:dc:1c:5c:fe:43:f4:e4:88:
                    da:8d:60:92:b4:e3:ab:72:75:42:cb:4c:66:b3:64:
                    35:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:9B:3C:71:DB:50:9F:BA:9A:02:5F:B6:23:F0:FD:DA:70:DF:95:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/fd8fc722-6aa9-306a-ae00-97cae3ebf37c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/d184e471-080a-4e54-bf94-60dd0c8beb48.crl

            X509v3 Authority Key Identifier:
                keyid:82:2A:C6:5F:05:77:96:D6:12:FB:24:86:E6:72:C6:12:A5:B6:41:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f5e8::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:dc:e3:d8:39:82:e2:5d:c2:88:11:85:e2:c2:ea:2e:57:e3:
         78:88:05:68:a3:bb:7f:20:da:cd:92:fa:16:af:89:1d:b7:81:
         99:27:e0:eb:d0:11:ab:ad:cd:b0:26:cf:a6:97:b1:a5:17:e0:
         ac:12:cd:0e:b2:ee:4a:5a:6a:08:4d:26:4a:4b:14:4c:8c:dc:
         01:83:e1:0c:57:54:c5:17:23:99:78:fe:ca:ef:4f:dc:19:11:
         95:82:00:58:2f:d3:07:4f:74:43:81:80:c0:c0:36:de:91:3c:
         59:cc:e5:2f:66:62:78:87:82:bb:18:7b:e1:ea:89:bd:1a:08:
         dd:2e:9a:c1:5e:68:ec:31:25:57:d5:32:18:3e:fe:ef:98:e4:
         65:ee:3c:8a:7d:46:37:9c:cd:83:94:f4:71:3c:99:48:0d:48:
         88:32:fe:56:70:4a:57:f3:03:b4:9d:0f:33:2b:15:62:42:89:
         c2:8d:20:f1:f1:5a:3d:12:69:5d:06:07:09:7d:14:5b:ad:74:
         f6:0d:7f:ac:bd:7e:fe:af:ce:e1:df:33:9a:22:ba:fc:4c:71:
         f3:50:6f:ac:c4:5f:f9:79:2d:6b:ef:8f:2f:58:ea:52:94:3c:
         1f:5b:33:4a:82:5a:1f:a8:b2:fe:39:27:54:7d:5e:b7:de:d2:
         3f:ea:e8:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 23:40:27 2024 by rpki-client on console-fra.rpki-client.org