Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/b425c797-bc14-318e-a834-a83b7b128000.roa
File:                     b425c797-bc14-318e-a834-a83b7b128000.roa (raw, json)
Hash identifier:          U/KM9Z2kocJS93bRoAvpL55AOMOgdZlK0bqukJEGT1s=
Subject key identifier:   10:DD:88:81:0C:2C:9E:B2:E1:AC:95:06:68:C3:FD:58:EF:D4:D5:E8
Certificate issuer:       /CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
Certificate serial:       010D0C9F4328583DEB815E2D2CC8DF6F9BDF0610
Authority key identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/b425c797-bc14-318e-a834-a83b7b128000.roa
Signing time:             Sun 15 May 2022 12:00:00 +0000
ROA not before:           Sun 15 May 2022 12:00:00 +0000
ROA not after:            Thu 10 Jan 2030 05:00:00 +0000
asID:                     36692
IP address blocks:        2620:119:11::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:eb:81:5e:2d:2c:c8:df:6f:9b:df:06:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
        Validity
            Not Before: May 15 12:00:00 2022 GMT
            Not After : Jan 10 05:00:00 2030 GMT
        Subject: CN=da1f789f-cf97-4f39-b056-7eab275b91e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:24:d9:c8:0a:9f:3b:89:db:58:6d:d1:27:57:
                    5a:50:dd:f8:17:86:4e:dd:1e:a4:6c:2e:6b:6a:3f:
                    ed:a1:bf:c6:73:73:b6:ee:86:21:94:11:e3:a3:fb:
                    f0:f1:89:d3:f9:5f:34:92:d3:42:64:1d:22:53:63:
                    18:6a:6d:06:dd:b1:17:b9:c4:4d:62:b4:cd:7c:3c:
                    3b:f9:f7:d7:4f:41:a1:0f:8c:bd:8e:23:48:5f:4f:
                    81:5a:97:14:8e:82:43:24:9c:2c:52:dc:e6:1c:5c:
                    56:aa:26:cb:05:8d:d0:26:ae:e8:57:9b:0b:83:05:
                    28:51:73:d5:7f:bd:b0:bf:9b:35:6f:b7:55:f0:a0:
                    f1:e1:66:66:41:de:ff:0f:04:41:64:5a:23:1f:8a:
                    39:e1:16:d6:e4:4e:48:7b:09:56:27:bc:fe:9b:f4:
                    19:2a:7a:04:63:9f:b1:bd:c0:f3:d8:f5:d9:20:78:
                    56:51:eb:9e:d1:f2:82:9e:42:f9:2d:5c:38:ab:f8:
                    3f:4c:75:39:d4:7d:3f:0b:94:55:55:3e:51:29:e6:
                    d2:25:6f:40:6e:bc:04:41:81:74:b3:1b:2c:35:ea:
                    34:8d:9a:83:f4:54:c5:7c:c8:d4:b1:4e:14:1b:45:
                    a2:b8:6c:43:ec:67:c4:0d:8c:45:a6:f4:c3:a4:ae:
                    3e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:DD:88:81:0C:2C:9E:B2:E1:AC:95:06:68:C3:FD:58:EF:D4:D5:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/b425c797-bc14-318e-a834-a83b7b128000.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl

            X509v3 Authority Key Identifier:
                keyid:9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:119:11::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:b9:e4:68:8d:e8:62:11:13:3d:fc:ac:c2:19:d4:ae:79:a0:
         6f:df:28:80:43:53:dd:1c:0a:6e:09:9a:bd:22:de:78:c6:4d:
         dc:95:3b:7f:bc:1e:2a:40:79:f3:af:ab:a6:ff:9c:c9:39:58:
         f9:ce:86:2c:e9:92:63:34:ea:d4:8a:20:5b:82:86:7e:4b:23:
         e8:a6:b6:d1:d4:be:2d:cc:b5:a3:7f:f3:8a:67:0a:31:96:04:
         09:97:72:b2:7d:76:85:ed:1c:6c:11:fa:b0:b6:a5:06:8b:de:
         30:83:14:dc:80:18:28:ec:63:e0:06:2e:65:7e:9a:18:37:40:
         1d:a9:ea:a2:49:a4:ad:87:5e:d0:75:23:83:40:c8:a9:c9:18:
         22:48:8b:0d:d5:ce:2d:39:3f:d6:72:a9:ba:41:71:ae:40:5a:
         d7:c0:3b:0d:03:01:55:34:07:a0:a0:6d:af:f6:38:19:2a:2c:
         07:e3:bb:5e:fc:9f:b0:15:9c:db:de:fc:86:b0:58:8b:5d:7f:
         a5:1d:15:ab:fd:49:d9:c4:4e:5d:74:7f:99:2e:23:b6:dc:ac:
         0d:5a:68:09:43:ff:91:62:93:cb:5c:3d:cb:a5:54:d8:90:78:
         f1:9a:f9:72:21:ab:e6:6f:b4:ca:65:df:18:c4:00:ee:8e:cd:
         b3:2d:42:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:40:34 2024 by rpki-client on console-fra.rpki-client.org