Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/84c550b1-046e-3e72-ab49-337282042647.roa
File:                     84c550b1-046e-3e72-ab49-337282042647.roa (raw, json)
Hash identifier:          ovkLfyQISYDK+NzR3Wc+i5UTq6dhCx6E5m+hzP6L8KU=
Subject key identifier:   1D:C8:E1:34:03:8D:B1:5F:6C:6D:9E:CD:4B:27:2B:2E:3A:24:BA:3F
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285847E62B6BE438DE54654EA63B40
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/84c550b1-046e-3e72-ab49-337282042647.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     15169
IP address blocks:        2001:4860:482f::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2b:6b:e4:38:de:54:65:4e:a6:3b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=cd6d8bd6-4a2e-4dcb-b23e-7559ab539cea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:05:69:4a:04:12:ad:cd:d6:0f:b2:af:9e:09:
                    5e:af:b8:e4:17:40:08:41:90:b8:cb:dc:09:5e:02:
                    31:68:33:cb:33:34:86:4b:8b:ab:da:9e:e0:c9:40:
                    ab:cc:b6:14:36:48:d4:4f:63:3f:3c:d6:61:6c:45:
                    3b:00:9d:3d:2c:de:8f:52:1d:5e:60:5e:d0:75:a4:
                    9a:d5:61:cc:e5:c9:21:f0:f9:b9:84:0f:68:31:94:
                    e7:0a:00:2f:5e:ca:97:e4:bc:47:c2:d7:c1:bf:1a:
                    35:c2:dd:36:8c:8b:6a:80:0d:d0:ce:f6:fe:23:8a:
                    27:cc:5f:95:23:6c:c3:51:d7:53:ad:56:c8:e6:31:
                    7a:81:63:c1:6d:5c:7d:77:3c:06:e3:7b:cd:ce:93:
                    4b:76:83:f3:2b:44:04:7c:ab:68:cb:83:7c:cd:f7:
                    39:07:59:d7:59:39:6e:07:59:7f:05:72:70:e1:ef:
                    86:b9:84:f1:bb:53:b7:d8:18:3e:6e:4c:87:0b:db:
                    b4:37:43:88:8f:1c:ee:2c:e3:e0:cd:88:08:4b:15:
                    87:c4:1d:6e:9e:4b:24:72:61:fd:c3:38:d0:32:30:
                    c3:12:0a:91:cc:bf:29:ef:03:60:60:2b:42:78:a7:
                    92:13:bd:6b:2f:00:b7:59:33:a7:a0:82:34:d7:c0:
                    3d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:C8:E1:34:03:8D:B1:5F:6C:6D:9E:CD:4B:27:2B:2E:3A:24:BA:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/84c550b1-046e-3e72-ab49-337282042647.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4860:482f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:51:8a:db:dd:f2:20:5f:04:7d:32:08:4e:0e:2b:98:93:dc:
         26:5a:b7:fa:0a:e9:5f:68:29:cf:74:18:01:97:2f:22:a5:64:
         91:5f:04:e8:73:46:c8:df:42:b4:82:50:64:37:87:bb:0d:68:
         53:ba:28:ac:d8:08:92:4c:89:fb:ef:80:77:50:6b:d7:dd:8a:
         d8:5b:c3:d1:99:ef:88:52:70:b8:a7:d9:9f:39:9c:0c:a4:e3:
         fc:0a:43:9f:7b:b0:a6:d4:b5:5a:b0:62:7c:23:87:76:cf:10:
         74:bc:f1:5e:1c:d9:bb:c8:2b:da:32:64:6c:b8:8d:5e:91:80:
         79:a9:c1:bf:91:2a:53:c9:f1:4d:96:71:09:33:0e:82:40:fd:
         6f:4e:e7:bb:75:51:78:93:68:5f:33:05:9a:4a:7f:0e:bc:fd:
         4c:23:24:1c:e3:31:06:db:73:6f:af:8b:27:19:8c:8b:6d:a4:
         c1:ef:0a:c7:2d:2e:1d:03:02:2a:c2:5c:e1:9b:df:d2:58:2c:
         76:5e:24:af:c6:85:d4:1b:72:62:6e:d9:91:cf:73:31:1e:b7:
         53:66:31:3d:42:de:c0:90:b3:92:d8:1f:7e:b4:f6:fd:30:1b:
         7f:0f:d0:70:2f:15:fe:28:88:50:5b:22:78:c0:cf:71:dc:d7:
         a9:8a:5c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:59:15 2024 by rpki-client on console-fra.rpki-client.org