Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/557dbdc0-f0ba-3acc-8972-3be50d73ecc0.roa
File:                     557dbdc0-f0ba-3acc-8972-3be50d73ecc0.roa (raw, json)
Hash identifier:          8zTUmyNZY+gDxQEP84GBZh2v8u8nihoH9eiEs4VoIbM=
Subject key identifier:   B5:E5:73:77:5B:1D:7D:30:E0:05:A3:EA:7F:BE:68:66:CB:B6:47:5D
Certificate issuer:       /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial:       010D0C9F43285847A0414CF4A298F94651DFE500
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/557dbdc0-f0ba-3acc-8972-3be50d73ecc0.roa
Signing time:             Tue 22 Oct 2024 13:00:40 +0000
ROA not before:           Tue 22 Oct 2024 13:00:40 +0000
ROA not after:            Mon 20 Jan 2025 14:00:40 +0000
asID:                     16417
IP address blocks:        2620:101:200c::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a0:41:4c:f4:a2:98:f9:46:51:df:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
        Validity
            Not Before: Oct 22 13:00:40 2024 GMT
            Not After : Jan 20 14:00:40 2025 GMT
        Subject: CN=cdeb9ee9-e5f4-471e-b72e-e87f9125a0c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:32:c9:26:06:1d:db:71:32:64:ee:4a:41:67:
                    a1:fc:00:1a:a6:09:4d:cb:b4:da:76:78:d9:87:6a:
                    14:2b:d6:ea:62:48:72:a6:60:c4:90:e3:24:59:6f:
                    68:84:02:bf:9e:21:1a:00:20:cd:e9:52:2a:de:89:
                    47:db:39:d3:b2:83:f6:df:f6:c9:07:77:d6:44:e8:
                    db:76:4b:3f:60:a3:83:4f:18:25:5e:5e:d7:7f:9d:
                    42:ec:2e:86:f4:d1:15:63:2d:c5:f5:c5:e9:da:76:
                    9e:ed:54:2a:da:55:f4:7f:87:e8:0c:10:94:4a:1d:
                    9a:38:a9:a0:c3:d4:3e:71:53:f3:a5:92:8b:c0:d3:
                    9b:48:fa:30:80:a0:30:5a:e3:b5:ff:b2:57:4e:e3:
                    3a:b1:6c:8b:06:98:a9:86:00:4f:76:c5:e8:3b:01:
                    29:75:b5:3d:ca:fd:a3:29:13:dd:c3:d3:6a:6e:c9:
                    e9:0a:6f:a3:0c:14:ab:2a:06:de:6b:31:9e:98:0f:
                    b7:6e:9c:63:9f:fb:f7:df:16:f4:a2:d0:be:df:fb:
                    ae:d3:f7:f3:a8:b0:37:20:43:70:d0:92:c5:e9:79:
                    29:47:7c:a9:c9:eb:0c:d8:bc:a1:6f:d3:6a:7a:a5:
                    67:cd:b4:9e:1f:73:a6:4e:75:5a:1c:43:36:e3:d9:
                    a9:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:E5:73:77:5B:1D:7D:30:E0:05:A3:EA:7F:BE:68:66:CB:B6:47:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/557dbdc0-f0ba-3acc-8972-3be50d73ecc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl

            X509v3 Authority Key Identifier:
                keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:101:200c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:d9:77:10:94:7a:72:a4:45:c8:70:cc:dd:20:a2:fe:3e:e3:
         ca:28:fb:62:34:44:9a:1d:06:0a:57:01:fb:ce:7e:b4:30:95:
         72:ea:6a:76:35:25:93:e2:90:df:6b:6e:33:f3:a3:16:9c:50:
         c4:59:4d:e5:e9:f5:e6:e2:fb:e0:d1:2e:83:72:90:f5:81:26:
         d0:4c:10:fd:69:ae:28:81:97:c7:97:38:81:2a:3b:9c:17:36:
         b0:77:ea:8a:7a:18:d9:f8:1e:3e:e3:aa:5d:fd:0d:d2:7b:87:
         d4:af:69:c5:42:97:4f:23:6c:72:c4:66:f7:5c:0e:df:0a:a6:
         2d:d3:a2:5b:a6:5d:89:78:e1:1e:b4:65:f4:33:63:93:31:fb:
         2a:3c:0d:95:b2:63:33:a8:df:a8:e2:4c:d9:b2:50:4e:bc:f2:
         b9:2b:10:87:f5:a3:14:73:28:cf:ad:e4:41:68:14:20:94:9e:
         fd:95:e9:03:b9:1e:c5:70:6f:81:2c:a7:7f:32:e4:6e:b4:f3:
         43:0e:0f:86:ce:ca:c1:14:10:a6:40:93:c8:ea:07:e3:d9:c8:
         12:a8:d8:50:59:22:d6:2d:f1:61:98:a9:37:a2:8e:65:81:3d:
         32:bd:56:c5:7b:d0:e2:69:a1:ec:de:e0:07:5a:21:e6:c8:50:
         96:4a:4f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 22:16:10 2024 by rpki-client on console-fra.rpki-client.org