Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3acd3945-13e0-3077-b836-f82b570a888f.roa
File:                     3acd3945-13e0-3077-b836-f82b570a888f.roa (raw, json)
Hash identifier:          BjIji8cAAW5/kC7GhIjUVsP0XCLcrwAPF1Mhxcqy7zo=
Subject key identifier:   7F:63:D2:DC:65:AB:D0:5B:80:14:02:F9:87:A4:26:99:99:D5:F3:CF
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858473FF09F21A8927A65B5F9BD00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3acd3945-13e0-3077-b836-f82b570a888f.roa
Signing time:             Wed 18 Sep 2024 01:00:30 +0000
ROA not before:           Wed 18 Sep 2024 01:00:30 +0000
ROA not after:            Tue 17 Dec 2024 02:00:30 +0000
asID:                     12222
IP address blocks:        2001:4878:8216::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3f:f0:9f:21:a8:92:7a:65:b5:f9:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 18 01:00:30 2024 GMT
            Not After : Dec 17 02:00:30 2024 GMT
        Subject: CN=c7632f5e-b56b-4926-966a-19f3fa9c7767
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:08:bd:9c:e8:e8:0c:28:d6:a1:d5:6f:ad:ce:
                    3f:f2:3c:22:0c:89:80:e6:ce:75:1c:6e:66:bc:8e:
                    1b:1d:f2:7f:3d:26:5d:af:ea:5a:4c:90:63:4c:a3:
                    01:f3:48:4c:99:71:07:a3:3e:ec:0e:e8:9c:e0:76:
                    f4:bd:b7:f4:07:87:25:de:c4:48:6b:66:d3:89:db:
                    65:55:f6:86:8d:3a:12:53:83:09:4e:cc:d6:5f:0a:
                    28:c1:9f:a8:9b:03:11:8a:54:df:a5:65:a7:9c:b2:
                    f5:8c:7f:ff:46:19:97:bc:9c:1d:f7:42:0b:76:a8:
                    b6:a1:c6:00:c5:44:53:65:46:f0:7b:00:d7:af:e8:
                    ba:cd:5b:ad:76:64:e1:dd:3b:aa:d6:3a:53:68:0e:
                    5b:2a:be:2f:06:fe:f8:c8:3a:12:cc:5c:bd:02:30:
                    48:85:99:b4:15:e0:26:87:87:10:ab:59:3c:b2:ed:
                    b8:7d:fa:9a:54:37:42:34:d3:9b:06:2a:c0:8a:fc:
                    94:de:5e:f8:2c:32:f6:53:c8:e0:0b:ec:77:2e:1f:
                    69:3f:40:b7:84:b5:b7:53:39:ca:ae:e6:15:67:2f:
                    0e:85:28:eb:33:63:5e:31:f3:68:e7:fe:35:8e:4a:
                    af:89:54:84:f1:86:df:9b:4b:6b:67:6e:e5:ef:84:
                    c7:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:63:D2:DC:65:AB:D0:5B:80:14:02:F9:87:A4:26:99:99:D5:F3:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3acd3945-13e0-3077-b836-f82b570a888f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:8216::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:30:a9:14:19:29:1f:2e:68:3f:23:f4:9e:96:bb:8b:7e:ec:
         c7:d5:e0:f4:96:f8:44:ca:bf:d5:58:e7:25:85:39:e8:54:47:
         7c:de:10:a6:ea:4c:46:37:1d:a6:93:a7:f1:cc:ad:df:2d:a9:
         d5:0a:35:47:b4:33:3b:78:fd:ec:6f:00:4d:72:6c:3c:37:68:
         5e:f1:22:04:7b:6c:57:64:e6:2f:d6:71:e1:a1:aa:f0:26:ea:
         70:f1:6a:72:ad:82:52:f1:c0:93:f1:39:cb:88:6e:28:0d:ad:
         19:6b:72:26:03:26:7b:37:e5:3d:7c:78:0c:85:43:de:67:3e:
         25:2c:ec:4b:ea:25:62:76:47:a7:88:3d:44:cb:86:32:cb:c0:
         72:89:ce:88:70:d0:11:64:ad:3a:96:1b:85:5b:6b:39:97:ce:
         19:10:c2:8f:6e:3e:75:46:81:33:12:6a:2a:a3:09:03:ba:37:
         85:e8:1c:bd:d0:84:55:1d:c3:24:47:41:a8:6b:c0:6b:e1:d8:
         dc:21:16:3b:ea:47:68:c3:2b:54:df:92:04:eb:f7:7d:a9:1c:
         cb:69:03:68:9e:e6:fe:61:44:90:64:6f:5d:e3:39:09:b4:94:
         29:4e:f2:0f:88:08:49:9a:a0:31:a2:ff:4c:36:d0:2b:24:2f:
         a1:17:70:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:16:42 2024 by rpki-client on console-fra.rpki-client.org