Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c6a47138-193d-342a-adfd-429a1b414d56.roa
File:                     c6a47138-193d-342a-adfd-429a1b414d56.roa (raw, json)
Hash identifier:          p9HOFB+RwGcEYgar44ri7XbjsATpAbax4ZrAUWJ6X+M=
Subject key identifier:   EB:9F:A0:8B:C7:C2:4D:88:18:24:87:D8:80:FE:E3:FF:9E:10:D1:EE
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858473D25F08C688A18B464944F00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c6a47138-193d-342a-adfd-429a1b414d56.roa
Signing time:             Tue 17 Sep 2024 01:00:31 +0000
ROA not before:           Tue 17 Sep 2024 01:00:31 +0000
ROA not after:            Mon 16 Dec 2024 02:00:31 +0000
asID:                     12222
IP address blocks:        2001:4878:48::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3d:25:f0:8c:68:8a:18:b4:64:94:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 17 01:00:31 2024 GMT
            Not After : Dec 16 02:00:31 2024 GMT
        Subject: CN=b50ee01d-5b03-418f-adac-9c567d49150f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:25:15:ea:98:0f:d0:2f:a1:c5:44:e4:a3:f1:
                    f2:34:1b:c7:e3:b6:1a:9b:ca:88:d7:78:55:b1:8c:
                    95:0a:2a:7a:b6:d7:55:de:36:ca:aa:af:30:b0:1e:
                    51:8c:49:0d:00:dc:fe:5e:aa:64:da:9b:50:e7:c6:
                    1f:f7:15:b4:84:a7:0b:71:d9:95:57:2b:d3:3f:39:
                    18:b5:ec:18:30:0e:b8:68:81:e1:b3:ea:d5:e1:63:
                    2b:dc:cc:9e:a0:54:da:f4:6b:37:6d:d8:84:64:63:
                    bf:d2:f1:8d:c0:a9:6b:75:12:6e:61:d3:5d:6d:3c:
                    89:da:a7:47:a3:37:78:0c:55:f0:83:cd:c7:90:b5:
                    51:da:a2:60:81:75:8a:bc:49:2c:20:e7:ca:b5:d9:
                    00:25:dd:17:1b:d3:f2:50:39:e1:66:36:e4:f6:b5:
                    c4:ba:ef:b7:c8:22:5c:ae:ce:ff:8e:ed:76:6a:89:
                    13:73:6e:42:a4:83:36:1d:c5:c7:e1:61:c6:2c:fd:
                    7d:b5:bf:dd:d6:20:5a:01:7b:d8:7a:cd:53:0d:4d:
                    f3:8a:82:54:9f:b1:a6:6b:95:41:01:ae:64:c3:c9:
                    9d:7d:bc:00:aa:1b:b8:bd:fa:2a:e9:d3:d7:8f:20:
                    7e:08:4f:a6:7b:18:7d:a8:a4:b4:a2:bb:80:f2:5e:
                    63:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:9F:A0:8B:C7:C2:4D:88:18:24:87:D8:80:FE:E3:FF:9E:10:D1:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c6a47138-193d-342a-adfd-429a1b414d56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:48::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:bc:33:56:68:4b:e1:52:88:f3:cc:d1:b1:e3:f3:e2:fd:06:
         61:fd:a7:c6:8d:bf:69:3f:54:34:33:ff:81:40:82:9e:09:bb:
         8c:e1:51:cb:5f:c1:3a:12:8f:6f:f3:ad:cf:96:a6:47:97:b1:
         89:df:3c:e8:6c:c8:91:ff:b1:f8:36:23:ab:d4:a9:1b:a8:65:
         7b:55:75:f4:b7:f8:34:3d:95:da:d5:3d:25:54:17:c4:ee:a0:
         c5:e8:85:0c:76:41:5b:09:b9:1b:5f:46:20:ce:a5:7f:ea:4b:
         b5:f1:86:9d:9e:86:97:04:e7:6a:88:35:67:84:71:0d:e5:2a:
         ab:c4:ce:06:8e:1f:e5:e2:d8:c9:9a:21:ed:d9:ac:5c:60:6b:
         17:2e:89:11:3d:2c:12:14:e8:05:a1:74:5f:c7:e0:92:3e:8d:
         1a:68:68:bf:41:8f:c1:5a:f3:0d:5f:ff:0e:e0:ea:b2:66:e6:
         d9:c4:7d:34:04:a7:86:ba:c8:6a:b1:6f:f4:f2:db:38:02:3d:
         19:2d:b6:4c:ba:f4:02:54:bd:4a:0a:ff:7a:6a:5d:43:53:d2:
         66:68:e6:2f:79:56:06:67:6f:ed:02:83:20:d8:b6:3a:d4:01:
         ea:4b:4c:9c:26:02:eb:11:92:cb:32:39:49:c3:0f:42:29:27:
         50:f4:a6:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 21:44:43 2024 by rpki-client on console-ams.rpki-client.org