Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/b66e3bc8-0233-351b-be9f-dad47d29f8aa.roa
File:                     b66e3bc8-0233-351b-be9f-dad47d29f8aa.roa (raw, json)
Hash identifier:          DWxUn2JUZYglOsCDzPAh0c7HKLqEC8ihnPqrSvG+8/I=
Subject key identifier:   09:01:4C:62:F8:44:7F:E0:79:BF:2B:F6:A6:96:E8:5C:E8:2F:98:A7
Certificate issuer:       /CN=0d86638a-2e12-4aa4-bdcd-22665b26e57c
Certificate serial:       010D0C9F43285847299B1B462482BDB48A18C800
Authority key identifier: 58:46:71:B4:EB:9B:8E:63:06:78:A4:72:C1:68:25:40:B3:3F:13:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/b66e3bc8-0233-351b-be9f-dad47d29f8aa.roa
Signing time:             Tue 10 Sep 2024 01:00:30 +0000
ROA not before:           Tue 10 Sep 2024 01:00:30 +0000
ROA not after:            Mon 09 Dec 2024 02:00:30 +0000
asID:                     2906
IP address blocks:        2620:10c:7000::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:29:9b:1b:46:24:82:bd:b4:8a:18:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d86638a-2e12-4aa4-bdcd-22665b26e57c
        Validity
            Not Before: Sep 10 01:00:30 2024 GMT
            Not After : Dec  9 02:00:30 2024 GMT
        Subject: CN=cf02d402-ed6e-4970-80ad-46e06fd2a4e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:2c:ea:06:df:ba:f5:1a:32:78:dd:08:81:9d:
                    af:cf:c8:25:26:ec:22:b8:5b:be:14:00:89:ad:88:
                    3d:52:08:a6:49:48:78:75:21:bd:88:e2:83:6b:49:
                    66:02:28:ee:e4:6f:97:eb:d4:6b:5b:cd:5b:51:ed:
                    75:d5:dc:dd:26:4e:7c:2b:b5:fa:60:82:db:41:1a:
                    ef:f4:0c:54:2e:25:3e:05:6a:b0:1d:bc:19:32:44:
                    3c:84:b0:c0:10:17:17:15:8e:cc:bc:11:3f:23:78:
                    42:d9:de:3b:9d:9b:96:5f:75:0e:77:af:0e:2f:65:
                    b6:c8:7b:39:e9:92:cd:f0:d1:7b:02:86:62:38:ff:
                    ec:30:4a:1c:e1:35:aa:d4:f4:ff:3e:fa:10:96:da:
                    c3:a8:28:7a:dc:b1:9c:c1:ce:6a:f6:ad:88:55:35:
                    d9:42:ab:16:6a:02:0b:33:8d:c3:f4:43:bd:ee:c3:
                    cc:67:fc:9f:98:71:66:df:c3:bf:cf:04:ca:2e:e9:
                    91:d1:fc:43:b6:52:24:12:3a:74:2b:73:95:bf:96:
                    79:00:51:8d:7c:b7:96:d7:15:e9:c2:a8:7c:b1:a3:
                    0c:1a:c7:df:93:10:8b:e8:85:e9:47:71:7f:bb:cf:
                    d1:78:f5:cd:9f:eb:e9:ce:f7:9e:d4:50:1e:db:8f:
                    14:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:01:4C:62:F8:44:7F:E0:79:BF:2B:F6:A6:96:E8:5C:E8:2F:98:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/b66e3bc8-0233-351b-be9f-dad47d29f8aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.crl

            X509v3 Authority Key Identifier:
                keyid:58:46:71:B4:EB:9B:8E:63:06:78:A4:72:C1:68:25:40:B3:3F:13:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:10c:7000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:51:0c:ab:00:13:74:54:de:53:b9:bb:41:95:81:4f:cc:4b:
         e9:db:be:1a:b4:5f:fa:8d:1c:cc:af:4c:d8:0b:86:8f:58:d1:
         f5:8d:b1:c9:9c:3e:cc:a8:2c:50:64:af:41:9b:24:02:37:be:
         9f:51:87:a6:1f:8c:43:3c:f6:76:1a:16:c2:d9:0a:52:58:60:
         56:4c:e2:9c:d3:ad:56:eb:f1:bf:64:52:c5:31:38:2b:f8:2c:
         11:0d:95:c7:f7:cb:69:04:76:1f:8e:e1:f4:dc:39:79:b9:61:
         f1:bc:15:77:11:9d:36:f4:27:a0:9e:b5:93:43:38:52:09:fa:
         a4:fd:34:31:95:65:7f:b7:c7:ba:23:e0:1f:68:b3:fd:52:11:
         86:14:d2:62:77:d5:81:62:6f:f8:b8:a9:3f:4e:da:9c:66:cb:
         84:4f:5d:8b:ca:67:27:7f:c6:dd:02:ef:f0:d1:97:75:3f:dd:
         85:5e:66:58:55:b0:90:22:f9:9c:ca:ed:6e:22:d6:96:66:dc:
         de:7b:3c:bf:a3:64:b9:e9:e6:9d:59:bf:b1:07:a0:7d:76:14:
         33:b9:c7:bb:0d:d8:f3:52:a0:d2:dd:5a:36:3e:0a:eb:f4:78:
         70:49:9d:a1:c6:38:de:5e:52:de:77:c5:5f:2b:bb:aa:aa:a1:
         c2:23:aa:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:38:45 2024 by rpki-client on console-ams.rpki-client.org