Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4c629b68-13e5-34f7-92f7-4e43fd2b0cb9.roa
File:                     4c629b68-13e5-34f7-92f7-4e43fd2b0cb9.roa (raw, json)
Hash identifier:          iZA6gL5Dxob7J6703XRxf8uQmkmxP/zUdWgLmtVEcnY=
Subject key identifier:   26:64:89:71:1A:33:3C:C1:8E:2B:D2:F7:D2:72:E6:36:AA:7D:31:EC
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858473D25E83FE7197FC1788B3540
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4c629b68-13e5-34f7-92f7-4e43fd2b0cb9.roa
Signing time:             Tue 17 Sep 2024 01:00:31 +0000
ROA not before:           Tue 17 Sep 2024 01:00:31 +0000
ROA not after:            Mon 16 Dec 2024 02:00:31 +0000
asID:                     12222
IP address blocks:        2001:4878:2000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3d:25:e8:3f:e7:19:7f:c1:78:8b:35:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 17 01:00:31 2024 GMT
            Not After : Dec 16 02:00:31 2024 GMT
        Subject: CN=67ea2ce2-dc14-4720-9002-03f5b74281d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:0c:a5:30:94:16:7b:5b:07:8f:1e:c4:4e:37:
                    70:cd:8f:d6:94:99:d1:06:05:00:be:00:5c:2c:e1:
                    d4:76:6d:84:f4:b6:f5:fc:72:25:35:2d:46:d5:48:
                    48:00:01:02:93:34:f6:2c:b7:d5:da:b0:e8:f7:cc:
                    49:08:19:c8:c6:58:a7:0b:c6:ad:4b:0a:5f:7a:be:
                    73:db:02:c8:e9:e7:de:97:8b:85:74:92:d1:13:d4:
                    6d:0f:ab:b2:70:63:b9:1a:53:74:93:ee:69:83:52:
                    33:e1:7d:34:cf:c2:59:8c:72:00:b5:38:9f:c3:a3:
                    5e:97:cd:6a:8d:8c:85:e8:74:3c:2b:14:50:73:bb:
                    e5:88:bb:e4:bd:49:85:ec:b8:56:d7:0e:8a:f9:ee:
                    5e:50:52:09:86:c0:66:5f:b2:d9:ee:5b:f6:5b:cb:
                    a2:61:bb:b3:57:d7:6b:4e:9e:6e:2e:fa:84:61:1b:
                    b6:ab:ff:34:f6:92:d3:56:0e:08:31:b4:3b:ba:93:
                    98:85:00:f2:78:2c:3b:07:86:f5:11:37:ba:36:30:
                    aa:dd:10:7b:19:ff:bd:97:ce:6c:5f:76:1a:2a:e1:
                    47:96:cb:c1:4c:79:75:a0:45:73:8f:82:b1:50:f2:
                    bb:81:49:2c:95:db:28:b8:22:01:18:76:96:4e:b2:
                    60:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:64:89:71:1A:33:3C:C1:8E:2B:D2:F7:D2:72:E6:36:AA:7D:31:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4c629b68-13e5-34f7-92f7-4e43fd2b0cb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:2000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:03:9b:c0:55:e0:36:a5:3b:0c:4d:d7:39:e0:49:6c:74:77:
         f0:0f:23:14:fd:42:98:7b:58:cc:6b:0f:da:6f:79:c6:3d:61:
         aa:b0:e3:63:97:e2:ef:6a:06:71:3d:dc:c8:7a:f4:ef:46:cf:
         e4:4a:b6:7c:7a:20:8b:a5:0a:ec:03:63:e8:69:f6:45:d9:77:
         d4:7c:cc:24:43:72:83:c2:25:57:2f:69:60:26:ac:54:75:38:
         b0:92:2a:09:93:39:d9:8a:dd:d2:33:6c:fe:81:6e:ea:3b:90:
         82:75:e7:3b:24:96:2d:2b:21:d3:8e:9e:97:1b:c3:ba:b5:f9:
         e0:5d:e8:0f:7c:ca:c6:1f:54:b1:69:53:c2:36:3f:2c:47:cd:
         fa:f5:6b:e5:4f:03:64:8d:07:47:95:dd:f8:7d:1d:a4:55:55:
         08:1b:bf:fb:a7:d6:2a:3c:a1:65:83:9f:3d:41:ce:b8:e5:c9:
         33:63:bb:4b:4b:d7:c0:16:49:0a:8b:49:a7:f0:2d:35:34:83:
         72:af:a6:47:f8:6e:10:f6:5c:ec:26:61:09:00:c1:d4:e8:97:
         06:c6:df:6d:27:f1:b3:75:be:12:91:d6:c0:ae:aa:f5:53:9c:
         60:65:0d:bd:a6:33:65:a3:37:af:7b:9e:0c:53:91:23:47:c6:
         72:61:9d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:16:49 2024 by rpki-client on console-fra.rpki-client.org