Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/83746480-7bf7-3529-87df-8959dd4dafcd.roa
File:                     83746480-7bf7-3529-87df-8959dd4dafcd.roa (raw, json)
Hash identifier:          X99M0isghpg8sXR6HZeY0W1fajtNSAXkZGSI6307/BQ=
Subject key identifier:   94:2F:08:63:52:FF:3F:4A:8C:A9:EE:65:E9:BD:71:41:6B:43:8C:23
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858473D25E735BD14696329C78640
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/83746480-7bf7-3529-87df-8959dd4dafcd.roa
Signing time:             Tue 17 Sep 2024 01:00:31 +0000
ROA not before:           Tue 17 Sep 2024 01:00:31 +0000
ROA not after:            Mon 16 Dec 2024 02:00:31 +0000
asID:                     12222
IP address blocks:        2001:4878:8::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3d:25:e7:35:bd:14:69:63:29:c7:86:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 17 01:00:31 2024 GMT
            Not After : Dec 16 02:00:31 2024 GMT
        Subject: CN=3a24be9d-1696-4b37-a1b2-4da92d2db0de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0c:e0:d5:53:87:56:68:28:b6:54:9c:a2:c7:
                    e8:df:ef:ae:23:95:ab:76:6f:a2:db:02:57:05:2c:
                    13:5e:e0:1d:d1:59:03:ec:dc:22:9a:9f:41:af:ed:
                    e6:bc:63:b7:68:cd:2c:9b:06:ed:b1:14:ac:1b:39:
                    fd:03:00:dd:47:e0:3e:0b:c8:07:af:03:67:f2:04:
                    f0:91:2b:cb:ad:15:1a:f7:3f:50:38:af:25:4e:83:
                    f5:08:25:ea:1d:52:7e:4f:cf:4d:97:21:7c:af:23:
                    ea:22:f6:ae:26:48:bb:df:76:99:ea:95:02:49:8c:
                    55:79:46:7e:0f:fa:d0:57:54:f9:13:c8:46:c9:f0:
                    e1:eb:14:d6:cf:2f:77:0a:7d:0c:52:bf:ae:dc:bf:
                    be:96:c3:7a:85:6e:3b:f2:28:e2:d6:77:53:38:c6:
                    64:7b:05:49:6b:25:0a:75:93:02:6f:de:b5:67:fa:
                    ae:f0:e1:30:a7:98:e7:e1:dd:56:97:1e:08:ce:1d:
                    c9:22:ea:d5:00:8b:97:cd:f4:34:f3:58:e9:cd:35:
                    3a:70:4d:cb:32:d0:21:30:cd:eb:7c:cb:15:fd:18:
                    cf:30:48:27:9f:ca:98:e1:bf:28:01:cd:64:25:29:
                    69:0f:d7:66:79:b0:77:28:84:9f:cf:32:51:44:3b:
                    9d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:2F:08:63:52:FF:3F:4A:8C:A9:EE:65:E9:BD:71:41:6B:43:8C:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/83746480-7bf7-3529-87df-8959dd4dafcd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:8::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:2a:a8:5e:d7:8d:2a:3a:7e:7f:ed:43:e9:b5:ec:a3:89:48:
         b9:dd:f3:a5:f4:c7:3d:b3:db:de:f5:ae:8c:fc:73:45:fc:82:
         8c:a7:9d:80:4a:14:56:e1:3b:7b:2d:62:99:98:46:67:cb:a4:
         de:be:4c:f4:35:0d:cc:6a:3a:24:55:96:55:bb:d1:27:cc:95:
         2d:c0:81:20:d7:ab:13:97:4b:e5:cc:e0:1d:a6:11:34:26:06:
         e7:7e:e5:3b:aa:94:f6:be:3d:7e:9c:da:dd:08:a5:ec:d0:71:
         6b:f1:02:eb:0d:68:df:b8:d8:fa:42:ae:88:a3:e9:29:47:1b:
         4a:9f:7e:49:29:54:f8:32:2d:83:8a:fd:19:f1:7e:1b:69:7f:
         98:75:84:f9:6b:59:63:ae:7d:05:66:e9:d6:ab:c6:3c:84:5c:
         e4:e2:90:da:54:93:68:7f:b0:ca:e7:ae:e4:f9:39:a7:8f:ef:
         24:c7:d2:9e:c8:5b:cd:5f:06:2a:0b:0b:5f:a7:53:3e:23:1c:
         71:6c:b3:ad:e8:65:17:cf:c2:01:29:7d:c7:e9:00:17:fa:b1:
         ff:7a:e2:37:2f:88:7a:82:50:a3:2e:91:b3:21:17:b2:46:0b:
         55:e8:89:34:9d:d1:8b:51:e8:86:0e:9c:5e:20:7e:4a:fe:24:
         98:ad:8a:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:17:09 2024 by rpki-client on console-fra.rpki-client.org