Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e4622068-5993-31d9-98f0-90eae23993bc.roa
File:                     e4622068-5993-31d9-98f0-90eae23993bc.roa (raw, json)
Hash identifier:          NMZhvNEnhrqNIsNwcPBqdlDU+s2h+qEiKGidktyla7o=
Subject key identifier:   AB:69:81:84:F2:4B:54:80:5B:1F:F7:B9:87:3A:8D:33:A8:57:5F:CE
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858473D25E939D40BDF040E40BB80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e4622068-5993-31d9-98f0-90eae23993bc.roa
Signing time:             Tue 17 Sep 2024 01:00:31 +0000
ROA not before:           Tue 17 Sep 2024 01:00:31 +0000
ROA not after:            Mon 16 Dec 2024 02:00:31 +0000
asID:                     35994
IP address blocks:        2001:4878:4001::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3d:25:e9:39:d4:0b:df:04:0e:40:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 17 01:00:31 2024 GMT
            Not After : Dec 16 02:00:31 2024 GMT
        Subject: CN=dbe76496-8fe7-48b0-b686-74cdc704be2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:37:7e:29:b8:eb:e7:78:ba:4b:a6:33:35:76:
                    8a:ae:c1:b5:56:3f:c7:d3:47:80:23:87:e4:13:05:
                    61:79:d0:73:af:56:b0:ac:01:ec:b0:24:b5:09:68:
                    5f:dd:20:b4:90:74:16:38:98:50:f4:d4:e5:64:88:
                    b2:cc:b7:d6:c7:11:1c:fb:90:bb:57:3d:68:97:1f:
                    16:d8:f6:6a:44:b3:16:39:58:bf:92:dd:f2:fb:62:
                    dd:31:d7:10:6b:97:b8:1d:9d:e4:74:46:8c:46:eb:
                    dd:d5:06:ad:7e:0b:05:25:38:55:1c:2f:fe:3d:57:
                    ec:03:06:89:52:21:78:7a:42:98:23:0c:50:be:cb:
                    f5:fa:38:ef:ce:e4:98:9b:7b:69:0d:70:70:33:cf:
                    84:a8:13:d3:f5:97:d0:8a:9d:1b:ec:f6:12:58:6e:
                    7a:3f:ef:54:7b:b8:a2:a7:af:0d:99:e2:a5:c6:de:
                    2d:ab:0a:61:d4:00:d1:53:95:6f:4f:0a:02:7e:5c:
                    a2:6b:cd:6c:0e:eb:3a:ad:35:bc:97:45:65:f4:db:
                    80:72:5d:d9:53:0d:66:97:6e:a4:1a:f4:e1:c5:f2:
                    fe:9c:c9:7a:af:3b:5a:eb:37:2b:8b:11:ef:db:16:
                    40:f5:58:4f:89:c2:63:9e:4b:31:4f:33:16:a5:44:
                    fb:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:69:81:84:F2:4B:54:80:5B:1F:F7:B9:87:3A:8D:33:A8:57:5F:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e4622068-5993-31d9-98f0-90eae23993bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:4001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:b3:ea:9d:b9:37:2d:af:da:e2:c5:59:65:d6:33:32:2d:01:
         14:27:83:78:eb:d1:6d:74:17:0a:7e:dc:ad:85:3b:9c:39:b4:
         e3:74:c4:ef:fb:e0:58:b9:04:92:17:9b:ad:0d:a2:83:98:c7:
         57:85:7b:a5:35:cb:bd:b2:42:9a:28:68:d5:11:7a:91:e3:90:
         2b:4a:29:4c:d8:95:78:a3:7b:5b:6d:b0:43:39:3d:5e:02:97:
         b7:51:5f:1c:62:1f:de:c7:28:a0:5d:eb:9f:62:f7:34:25:51:
         94:ac:34:4b:f5:98:fd:7c:0f:a5:36:75:a2:63:9b:19:95:be:
         c8:2b:d0:77:cb:db:f5:40:82:42:65:b8:e7:32:9e:a2:ff:1b:
         95:73:5e:80:81:6d:e7:4d:0d:eb:0d:d5:39:a8:41:40:b1:8d:
         47:b6:c2:b3:af:9d:01:ff:f0:db:8c:a9:a7:1d:ed:07:3c:06:
         f7:7e:1f:0c:8e:eb:d7:d7:05:f8:b0:6f:11:d9:ab:d5:fa:bc:
         28:35:91:e6:86:5c:92:d6:fd:88:29:6c:40:b1:34:1a:e7:db:
         4f:f5:b2:8d:b3:19:33:ce:4b:74:19:a6:fd:35:66:dc:86:47:
         fe:65:5b:4c:27:f2:28:d2:25:8c:43:12:ee:92:c4:3e:44:8a:
         96:d6:ac:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:48:35 2024 by rpki-client on console-ams.rpki-client.org