Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a1eb468e-862a-34d8-80a7-a51a0b66f132.roa
File:                     a1eb468e-862a-34d8-80a7-a51a0b66f132.roa (raw, json)
Hash identifier:          oaxfdc+Nt72hXLBnf3wEdQs4QYzrBARubmn0TajZsuE=
Subject key identifier:   8F:18:A6:03:C2:6E:05:1C:50:EA:90:EA:0B:85:9F:9D:77:8E:5E:EC
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584762D644B9097EB21467A8DB00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a1eb468e-862a-34d8-80a7-a51a0b66f132.roa
Signing time:             Mon 30 Sep 2024 13:00:42 +0000
ROA not before:           Mon 30 Sep 2024 13:00:42 +0000
ROA not after:            Sun 29 Dec 2024 14:00:42 +0000
asID:                     22394
IP address blocks:        2001:4888:8026::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:62:d6:44:b9:09:7e:b2:14:67:a8:db:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 30 13:00:42 2024 GMT
            Not After : Dec 29 14:00:42 2024 GMT
        Subject: CN=8b0fcb42-530f-4770-85a4-8f4f72f43b3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9a:0c:b8:8f:d3:34:9d:f1:e7:c0:bb:11:82:
                    d9:bf:c5:21:74:f6:ac:89:e5:d8:b3:e7:dd:8b:98:
                    28:d6:4c:d8:ff:55:c8:f6:91:ec:64:3a:0b:1e:f3:
                    ac:ed:3f:61:ec:0e:20:66:77:32:ca:7f:e7:6c:bc:
                    2f:0b:c5:45:fd:8c:91:e2:e4:19:2b:97:95:46:28:
                    d8:1a:16:5d:69:3e:18:a9:69:3c:03:b5:ba:f0:ce:
                    0e:e0:6e:d2:4c:d5:16:c7:60:d8:33:99:4e:0c:75:
                    5e:d4:4d:f5:08:e6:41:62:0c:a6:ab:12:d9:6c:8c:
                    9e:45:be:5d:d3:7c:dd:84:79:9d:1a:63:35:7c:c2:
                    d4:3e:9b:bf:44:33:d4:ab:98:5e:ee:f8:e5:4b:ca:
                    be:4f:27:46:0f:42:15:fb:79:42:ed:16:6c:30:e1:
                    c4:95:0a:5f:64:c0:0d:14:ae:2c:66:bb:3f:40:55:
                    05:27:99:12:48:ca:56:ef:c0:7c:67:f1:80:34:06:
                    7b:62:63:01:2c:51:f7:b6:be:a5:36:15:e8:26:1e:
                    39:ba:0d:cb:2a:62:e7:7d:ae:a6:10:4b:7b:86:e7:
                    f8:2c:32:c0:41:ea:68:0a:3e:53:f7:77:e2:60:32:
                    78:f8:5f:b8:86:83:80:9e:56:e3:da:5a:5b:b3:79:
                    5f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:18:A6:03:C2:6E:05:1C:50:EA:90:EA:0B:85:9F:9D:77:8E:5E:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a1eb468e-862a-34d8-80a7-a51a0b66f132.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4888:8026::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:21:df:2d:ce:2c:ce:4c:36:f4:36:68:56:aa:e6:ce:0b:17:
         0b:ba:33:91:ea:d9:fa:4c:22:f0:17:81:26:36:14:c7:6d:b2:
         82:60:4e:2a:ff:d9:fa:53:b9:28:67:20:93:3b:7e:2f:d8:e2:
         ed:d0:8c:84:f0:c7:ab:07:9a:ec:9e:f5:59:c3:a3:ba:0f:14:
         3f:7b:ec:85:21:bc:34:d6:89:d9:8a:d8:15:f0:b3:1e:d8:b0:
         29:1a:2b:0c:8f:ef:8c:36:93:ef:5c:4d:26:0e:1d:da:19:1e:
         01:23:de:fa:cf:1e:cb:7e:a0:2f:52:6a:34:18:65:e6:30:19:
         77:55:45:9b:d0:d6:6f:d1:09:1b:b6:19:5f:33:db:be:1b:13:
         6a:af:05:81:c3:26:96:33:2e:ff:f4:9f:ac:20:6a:8b:90:15:
         41:6f:d5:38:1a:49:7b:36:0b:4a:0c:92:e4:e8:3c:ee:e4:17:
         37:82:71:a2:fe:d6:56:f5:c3:ea:33:3a:3d:59:07:1a:b9:4c:
         a0:2b:cb:cc:ac:d0:b7:23:8b:c3:6f:d2:bd:01:59:a2:8e:b5:
         f9:fd:ff:a9:53:97:6a:01:a8:86:11:50:f8:82:a2:9f:b9:60:
         67:f2:32:4a:43:d0:35:68:a9:2a:de:88:63:42:7f:b3:2e:de:
         98:93:cb:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:41 2024 by rpki-client on console-ams.rpki-client.org