Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c29cc643-e633-33d3-8878-82632ef5c701.roa
File:                     c29cc643-e633-33d3-8878-82632ef5c701.roa (raw, json)
Hash identifier:          a2E1pNs3LfBukAbNVqxN8jpnbl9Zdl0tPdkbeUeBbgg=
Subject key identifier:   61:80:AD:5C:22:23:AB:FD:3E:C1:4A:08:89:E4:F8:5E:50:B1:6B:D5
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858473FF0949115D14B0DF0ECCC20
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c29cc643-e633-33d3-8878-82632ef5c701.roa
Signing time:             Wed 18 Sep 2024 01:00:30 +0000
ROA not before:           Wed 18 Sep 2024 01:00:30 +0000
ROA not after:            Tue 17 Dec 2024 02:00:30 +0000
asID:                     12222
IP address blocks:        2001:4878:8158::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3f:f0:94:91:15:d1:4b:0d:f0:ec:cc:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 18 01:00:30 2024 GMT
            Not After : Dec 17 02:00:30 2024 GMT
        Subject: CN=f141b30d-69cf-415d-8b53-c4810f234716
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:41:04:f6:6d:25:23:29:bf:5d:7b:15:9a:26:
                    29:d8:90:cc:d3:26:3b:53:54:7e:3b:21:d6:07:de:
                    1c:e7:c6:98:22:8b:b2:bf:27:ba:3d:89:02:42:c5:
                    af:21:ed:de:06:fd:90:d3:92:cb:86:e4:56:7e:a7:
                    7f:b7:9e:61:fc:e4:ea:ce:39:51:76:7c:e9:03:d5:
                    24:a3:f3:11:7c:e9:a5:42:6f:de:8f:05:63:1c:b2:
                    85:5b:cc:03:ad:2e:36:6c:35:d9:cb:e6:90:2d:56:
                    68:1d:c8:5c:24:f0:2e:12:17:de:c5:d0:f9:29:bc:
                    8b:90:28:56:31:f5:9a:a9:36:91:bf:89:7c:48:25:
                    30:91:2b:f2:f9:3f:a5:2f:ae:2b:5e:02:98:b4:b1:
                    d0:35:4d:64:4d:94:1b:51:37:b7:b0:1c:3f:8c:f0:
                    c2:6a:ad:f8:67:a8:a6:b1:d5:f3:38:21:11:f7:06:
                    9c:9f:ac:a8:f1:24:b0:68:e6:9f:f1:76:ec:be:2b:
                    e8:b6:20:78:de:bd:8e:ac:d9:e9:dd:13:a5:97:fa:
                    20:6d:57:70:95:da:6d:24:93:20:a2:be:d8:f1:84:
                    85:54:3c:2f:6f:21:cc:85:28:e4:8d:f4:69:ca:50:
                    7d:79:9a:2d:cd:d7:e1:6f:c1:27:8a:f3:f3:c1:8b:
                    06:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:80:AD:5C:22:23:AB:FD:3E:C1:4A:08:89:E4:F8:5E:50:B1:6B:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c29cc643-e633-33d3-8878-82632ef5c701.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:8158::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:b9:9a:85:f8:65:36:12:b8:9c:8e:e7:cb:44:ce:88:23:ab:
         10:b7:32:fa:c5:d1:18:61:6f:8c:0b:3d:2c:95:1a:93:83:2f:
         42:65:a5:e9:13:57:d4:20:1c:27:82:62:2e:01:f0:f2:25:6c:
         c8:73:7d:37:d0:ef:d7:35:bb:1c:b8:53:05:08:5a:77:f0:e8:
         86:7e:70:c6:f0:11:92:96:24:68:b3:cf:61:21:08:e2:a1:38:
         41:d2:17:ab:d4:94:ad:48:30:45:b2:55:91:45:27:f9:f2:99:
         e4:ab:d0:16:48:8d:01:10:f4:fe:ba:ef:92:e1:8a:05:18:b2:
         fa:fb:a7:8c:7f:47:1d:ae:59:28:88:39:73:6a:b4:ad:de:49:
         62:a3:f5:da:95:7b:e8:d9:38:6d:ce:e5:ff:0c:86:ad:c0:5a:
         f3:6c:a0:e6:54:c4:5f:d6:1f:d6:df:8b:8c:3d:52:97:f4:8f:
         e4:87:cb:2c:52:ad:81:9f:48:c3:b5:09:50:d7:7d:57:5e:3e:
         d9:1f:93:48:2d:5f:55:33:7a:7f:d6:92:38:f1:65:18:74:05:
         b2:b0:bc:e6:a1:fa:30:6d:08:e6:9e:56:a5:27:a0:27:e3:57:
         4f:dd:96:8a:bf:db:7a:aa:da:ff:c6:35:c5:04:f2:eb:8f:b2:
         7b:73:d0:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 21:44:39 2024 by rpki-client on console-ams.rpki-client.org