Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cd0e74e6-62f4-358a-9588-53af8fb5859a.roa
File:                     cd0e74e6-62f4-358a-9588-53af8fb5859a.roa (raw, json)
Hash identifier:          SgeQdyMuZ2j/vt8ftmyagVzyvVzSbFZCsSyR5KnDylg=
Subject key identifier:   A9:EE:AA:81:0F:39:65:9D:1C:9D:0C:EB:CB:D9:7E:AD:1B:4E:76:72
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858473FF09544018E696838F6E300
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cd0e74e6-62f4-358a-9588-53af8fb5859a.roa
Signing time:             Wed 18 Sep 2024 01:00:30 +0000
ROA not before:           Wed 18 Sep 2024 01:00:30 +0000
ROA not after:            Tue 17 Dec 2024 02:00:30 +0000
asID:                     12222
IP address blocks:        2001:4878:8323::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3f:f0:95:44:01:8e:69:68:38:f6:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 18 01:00:30 2024 GMT
            Not After : Dec 17 02:00:30 2024 GMT
        Subject: CN=7ccda51e-5fd6-41e5-a21d-9c5edd8a7ee0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:10:2d:1e:bf:da:5a:a2:3b:00:d5:c1:5c:01:
                    df:58:75:b1:09:ca:38:28:69:9a:29:99:6b:ce:84:
                    5c:0e:32:81:7b:ba:e5:83:93:a9:6c:35:99:1e:07:
                    cc:50:a0:23:77:13:dd:d9:3b:8c:e1:f5:2b:85:fe:
                    52:44:62:a9:7f:9f:0e:ac:58:79:e1:e7:07:96:f0:
                    75:14:72:b8:f7:74:9f:27:fd:42:4c:cc:55:01:d9:
                    2c:bf:10:d0:6f:10:8b:0f:49:8e:be:f7:6e:24:32:
                    0c:7a:b5:ec:69:9f:fd:cc:7c:c3:e4:6c:65:ea:27:
                    47:1f:4e:f0:7b:a4:b3:bd:88:24:93:32:3d:89:9d:
                    8a:33:68:a4:6d:ad:ed:03:b4:16:f5:19:49:69:59:
                    9c:7d:22:f4:e4:15:be:7f:5e:8e:c2:34:cf:76:36:
                    bf:f9:ab:28:62:cb:8f:e8:81:26:dd:38:b0:96:fe:
                    63:a5:57:5f:35:e6:af:05:cc:08:77:35:4b:eb:9c:
                    1a:f1:75:ed:e1:41:ce:0e:c6:38:e6:63:93:76:aa:
                    9a:89:ba:47:60:ac:7b:a5:6a:85:0a:96:cc:d1:33:
                    c5:1f:58:92:45:1c:89:7b:12:30:72:78:dd:9e:05:
                    44:7f:0a:0e:ef:da:e6:e7:a7:90:f8:ba:62:2e:98:
                    40:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:EE:AA:81:0F:39:65:9D:1C:9D:0C:EB:CB:D9:7E:AD:1B:4E:76:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cd0e74e6-62f4-358a-9588-53af8fb5859a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:8323::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:68:72:e9:75:33:22:83:5f:a8:88:7c:c0:32:58:bb:9b:29:
         fb:68:3c:45:41:fb:42:da:e4:de:47:af:8e:22:3b:4e:17:ab:
         46:52:6f:fe:b3:aa:72:c9:3b:11:93:56:08:29:08:c4:e7:b9:
         54:3e:99:6b:59:74:34:d1:bb:04:6a:d7:fc:5f:cb:ea:26:4f:
         d2:5f:c9:94:74:c6:ef:2e:49:5f:d6:8f:e1:49:0b:72:ff:8d:
         a9:02:2a:93:1b:1a:60:5b:6e:05:74:34:11:1a:4e:ca:c0:a9:
         7c:1f:ab:95:3c:dc:11:02:3f:b6:23:09:e9:02:38:b7:66:24:
         57:f9:20:46:27:b7:0d:90:d6:71:35:81:d0:03:33:aa:60:a3:
         40:12:17:7a:61:22:8a:12:2c:6a:ab:d9:25:5e:de:af:1f:72:
         06:de:d0:54:b7:23:03:05:33:8d:18:9c:06:ea:b5:7d:98:0b:
         29:41:32:9b:a9:03:70:46:e1:40:4a:6a:cc:9c:f0:06:79:9b:
         69:b6:9b:31:14:b0:fe:f3:ba:94:00:96:8f:e6:ed:b1:f3:f7:
         b1:6c:f0:3d:b5:03:e6:99:25:e0:29:5c:19:b7:e2:14:e2:7d:
         c8:22:bf:18:cc:80:f1:5e:1a:4d:aa:c2:b6:61:f0:9a:5b:13:
         98:d9:5a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:17:35 2024 by rpki-client on console-fra.rpki-client.org