Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d33aa9fa-11f6-3023-982a-12ed78c3f469.roa
File:                     d33aa9fa-11f6-3023-982a-12ed78c3f469.roa (raw, json)
Hash identifier:          pz+ElxPLE3z9oEJE/qa8lHwd/BOZg2FUh8O1hD+yHLE=
Subject key identifier:   FD:3B:11:99:CE:E2:69:63:2D:1B:DD:A7:E3:C7:46:8B:D3:7E:B7:00
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584722A1864CAE1057B6E8021780
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d33aa9fa-11f6-3023-982a-12ed78c3f469.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     20115
IP address blocks:        2600:6c0c:2a3::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a1:86:4c:ae:10:57:b6:e8:02:17:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=004d13bc-ff33-4ae2-a436-de2b57a13dd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:18:f0:18:e9:ae:36:b3:95:d6:32:0d:34:e4:
                    79:ee:43:39:80:db:bc:67:83:a8:70:07:e6:46:8e:
                    39:fd:18:e6:0c:ed:a1:9e:42:77:91:f5:31:ab:a7:
                    54:a4:63:5b:cf:31:b9:e5:bb:de:c4:ec:a5:45:41:
                    c5:bc:c2:21:56:9c:74:66:bb:31:70:47:46:d7:7d:
                    5a:80:7f:f0:7d:45:21:31:1a:75:ed:c3:45:eb:6c:
                    34:15:19:a6:0f:19:a8:f6:94:c2:bd:ae:63:5d:25:
                    59:e1:69:4c:e6:8a:9a:56:b1:fb:41:62:29:b6:8d:
                    f7:0e:57:b4:be:d2:37:2a:5d:33:a5:e0:2c:54:64:
                    a9:a1:a2:68:6d:36:95:fe:7c:c6:b8:85:17:68:0a:
                    c8:10:53:90:6f:e0:26:75:6c:4c:06:97:92:20:36:
                    7a:1a:76:cb:42:00:61:2a:83:8a:a9:0e:93:ae:ea:
                    42:b0:8f:7e:a1:96:c9:ac:e9:e0:be:95:9c:9d:57:
                    3f:ca:a8:fa:9b:f6:54:68:b4:fc:51:e8:b8:ea:6b:
                    f6:67:ea:d7:2b:94:65:5a:b6:fd:ff:cd:8e:5c:56:
                    98:4e:b0:e8:b4:66:22:e0:5c:97:ba:83:c8:4b:35:
                    14:2d:8e:4c:6b:12:c0:4a:fc:70:e4:2a:85:06:04:
                    94:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:3B:11:99:CE:E2:69:63:2D:1B:DD:A7:E3:C7:46:8B:D3:7E:B7:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d33aa9fa-11f6-3023-982a-12ed78c3f469.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:6c0c:2a3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:f9:da:ae:a7:60:91:cc:4f:ae:69:3f:2e:ac:c4:9b:d0:aa:
         7c:d7:12:a9:cc:60:cb:89:2a:e6:96:5b:d0:4e:9e:c4:37:c7:
         8f:d4:56:99:6b:b7:de:31:d2:f8:8e:34:02:58:ad:7d:df:36:
         d8:61:90:46:73:e1:71:e8:cf:7b:ae:84:ab:a8:dc:8c:11:8f:
         2f:08:16:37:34:36:8b:1f:2c:ca:3a:92:db:8f:3f:f2:f8:85:
         9c:af:dc:a1:4a:cf:57:4e:be:18:d7:d1:21:33:76:8d:f8:e9:
         47:1b:ce:4b:be:61:0c:86:ef:ce:c5:7f:0d:17:08:d4:92:ab:
         5c:f3:7a:cf:9e:16:95:b4:2d:c8:de:40:c0:d5:a0:ce:f3:0b:
         85:ee:38:97:8c:03:2a:59:f1:c9:4d:df:87:f5:bd:2e:99:af:
         42:4b:db:6a:7e:d6:08:17:94:e2:a5:3f:7e:4f:b6:f7:d5:c2:
         7b:73:38:16:4f:bb:7d:85:42:22:e8:ac:0e:32:42:f0:52:b0:
         d9:99:e1:b7:2f:3b:ef:a8:63:2a:b9:5b:bf:7b:d9:b5:83:9f:
         44:95:0a:e0:38:c0:6d:f3:06:52:f3:68:6d:ad:96:92:3e:d3:
         07:61:87:bf:35:b4:39:b1:b6:c8:b2:bd:6f:56:fa:36:ad:c4:
         d3:73:3a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:51:02 2024 by rpki-client on console-ams.rpki-client.org