Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f1d69f90-1d70-3b01-880b-d72baf9edb0a.roa
File:                     f1d69f90-1d70-3b01-880b-d72baf9edb0a.roa (raw, json)
Hash identifier:          gRrin2Njg7NJRIcbQq0jJuXAcSrgDy6MJWcS9rC0Rts=
Subject key identifier:   87:52:A7:F6:A5:69:F2:63:95:AE:49:43:96:3B:C6:B3:CD:09:02:60
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847CFD4AB73862DA5A989688D00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f1d69f90-1d70-3b01-880b-d72baf9edb0a.roa
Signing time:             Fri 08 Nov 2024 14:00:39 +0000
ROA not before:           Fri 08 Nov 2024 14:00:39 +0000
ROA not after:            Thu 06 Feb 2025 14:00:39 +0000
asID:                     12222
IP address blocks:        2001:4878:4173::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cf:d4:ab:73:86:2d:a5:a9:89:68:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Nov  8 14:00:39 2024 GMT
            Not After : Feb  6 14:00:39 2025 GMT
        Subject: CN=2d0f7822-abac-4198-8fda-c3b7a0e2a4b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ae:f2:f3:20:71:1f:0f:fc:b2:33:ff:ea:a7:
                    e0:b3:e0:da:b3:e3:5f:ea:64:a5:4e:ac:75:4b:bd:
                    46:53:ae:cc:0f:99:f8:1b:14:d2:fe:5d:6d:e4:d8:
                    1b:c7:45:e4:77:2b:2a:22:3c:be:29:5c:44:7c:1a:
                    03:39:6d:43:84:86:d2:b7:9e:85:2c:04:ab:fe:ac:
                    c2:2e:33:9a:d6:3d:ac:4c:78:83:36:f5:66:f1:df:
                    62:a1:fa:5d:1c:c2:0d:2f:35:a1:ca:23:0f:d6:67:
                    7a:99:e6:5d:5f:f7:03:45:1c:d7:76:c3:ff:c0:83:
                    25:7d:19:75:20:a1:6c:a1:3c:a4:46:10:4a:07:dd:
                    6e:39:d1:0a:3c:6a:b7:39:a6:1c:d5:be:64:01:04:
                    12:a1:25:ae:84:68:f4:d9:f4:90:ac:29:01:57:30:
                    51:8c:fb:c6:78:a2:4c:b6:77:01:eb:61:75:c9:a9:
                    b6:82:ab:d5:dd:a6:29:3a:23:df:b7:6f:85:66:da:
                    53:b7:16:10:2f:bf:cf:b3:21:59:eb:dd:41:30:d6:
                    b6:48:46:07:a5:33:89:c6:90:6a:61:7b:fd:71:fa:
                    ed:ad:a7:c3:47:31:e8:b8:88:e7:a6:9e:67:cd:70:
                    52:cf:ae:30:04:3a:e4:97:e1:4b:b5:a9:79:53:eb:
                    43:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:52:A7:F6:A5:69:F2:63:95:AE:49:43:96:3B:C6:B3:CD:09:02:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f1d69f90-1d70-3b01-880b-d72baf9edb0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:4173::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:b4:dc:a9:3d:4e:4f:f6:af:65:6a:f6:03:19:f2:db:3d:6b:
         21:3c:f8:b8:f9:f0:6b:ad:fd:0e:e4:13:c0:ae:9e:3b:ce:08:
         f2:a6:00:aa:78:d9:b6:32:fe:1e:22:ac:4e:8f:f8:a8:2a:28:
         ca:90:12:00:40:1c:03:3d:90:38:f3:3b:17:4f:79:d8:f7:2b:
         2a:28:3f:73:03:ad:4d:24:74:ef:0e:d9:21:cb:ea:e3:ac:ae:
         b8:d2:dd:e3:0d:21:3c:be:1f:32:5a:4a:55:cb:04:d8:a4:ac:
         d3:94:7e:53:58:92:f8:d2:24:7d:1c:35:60:eb:68:38:13:3a:
         54:88:b1:26:1a:a4:1e:0c:77:0d:59:b8:7f:36:db:7d:f5:48:
         af:8e:04:c9:05:07:6b:27:83:bf:c9:38:3a:4f:ed:21:17:d9:
         10:e3:3b:b6:93:42:42:f1:0d:04:3d:39:b3:74:85:5a:05:ff:
         a8:54:44:96:fb:72:89:59:73:95:49:d8:e4:95:dc:02:65:3b:
         ac:57:41:dc:33:7f:eb:27:76:af:24:2d:b5:9c:b7:21:68:62:
         67:66:c4:9a:d0:5c:21:48:08:60:eb:a6:b4:4f:72:75:15:22:
         04:69:d3:81:03:fc:88:39:54:eb:d4:27:eb:60:58:61:77:4c:
         3a:e1:a1:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 21:45:08 2024 by rpki-client on console-ams.rpki-client.org