Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/d26b76e9-3bd2-3745-9bc4-68e57fbc22c9.roa
File:                     d26b76e9-3bd2-3745-9bc4-68e57fbc22c9.roa (raw, json)
Hash identifier:          3qigr//WGd/hqAkgOi4xv5dw5x9VeiOY3QqKPslI0JU=
Subject key identifier:   95:7C:6E:FB:D2:23:39:CE:FC:7E:91:BB:D6:51:58:F6:67:11:64:53
Certificate issuer:       /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial:       010D0C9F43285847D6CF46EF12AC2CBC42ABAD40
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/d26b76e9-3bd2-3745-9bc4-68e57fbc22c9.roa
Signing time:             Mon 11 Nov 2024 02:00:27 +0000
ROA not before:           Mon 11 Nov 2024 02:00:27 +0000
ROA not after:            Sun 09 Feb 2025 02:00:27 +0000
asID:                     30238
IP address blocks:        2620:101:200a::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d6:cf:46:ef:12:ac:2c:bc:42:ab:ad:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
        Validity
            Not Before: Nov 11 02:00:27 2024 GMT
            Not After : Feb  9 02:00:27 2025 GMT
        Subject: CN=73cf3db6-5bac-463f-b632-348a57b59bab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:bf:41:25:f4:d0:7c:0c:6b:b5:56:28:46:b5:
                    b0:ea:0b:3e:e4:07:32:8d:dc:1f:c5:78:ae:64:f6:
                    7f:b6:34:46:71:19:4a:27:c3:c2:29:8a:c5:4b:4a:
                    73:5d:1d:a8:86:57:00:a4:fd:4f:8c:b1:a3:58:cd:
                    aa:07:23:4e:cd:0c:5c:f0:3f:d7:28:86:b6:17:41:
                    d1:ea:18:3c:18:47:e7:88:de:33:e6:cd:ba:04:2f:
                    78:c1:80:20:61:5d:e7:6d:ce:6d:30:bf:3f:f8:df:
                    9a:d8:c5:83:8b:7a:a0:87:45:6f:fa:43:6c:15:ec:
                    ab:8a:66:b8:20:09:8b:8c:e1:a0:f8:61:fc:96:c4:
                    6d:9b:48:32:6a:f3:d1:0a:81:c1:2a:35:8f:9e:b4:
                    e1:69:c8:ac:63:4b:35:f5:0d:04:c9:56:84:05:8f:
                    3b:eb:6f:9d:d7:35:c4:45:3a:2d:00:ee:15:39:8b:
                    14:f9:f5:ad:7a:87:f4:67:17:26:7d:0e:7d:13:2e:
                    1e:66:28:f1:6e:76:b2:ad:76:73:d9:d1:ec:60:ab:
                    86:2a:da:e1:58:c2:ac:96:a8:0a:4a:a8:b2:3f:b0:
                    8c:27:33:3b:e7:14:5a:58:ee:df:88:53:16:eb:0d:
                    cd:d7:12:12:1b:a2:76:09:ef:00:2d:fa:5d:5e:a2:
                    6f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:7C:6E:FB:D2:23:39:CE:FC:7E:91:BB:D6:51:58:F6:67:11:64:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/d26b76e9-3bd2-3745-9bc4-68e57fbc22c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl

            X509v3 Authority Key Identifier:
                keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:101:200a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:8f:cd:15:c6:da:d8:71:65:5b:1a:8d:05:f5:1e:da:56:e7:
         51:b4:59:f3:80:02:47:19:1c:48:da:3f:49:b1:f0:8e:19:3c:
         53:db:61:4a:00:d8:51:af:61:36:3b:b0:7c:8c:c4:68:8d:03:
         eb:e9:aa:8e:9f:5f:dd:a9:59:c8:e7:f4:45:b3:4d:79:bd:51:
         a7:38:36:d1:1a:4e:4c:55:79:c7:da:c1:30:07:cc:2e:ae:a3:
         f9:d3:9c:20:01:b9:49:ef:1b:f6:54:b4:c0:09:f1:0b:d9:34:
         ed:44:34:f1:f2:fc:46:f9:99:ab:a6:52:f9:16:51:b5:14:1f:
         99:5b:09:32:6f:6a:97:20:1e:de:47:8b:c7:bc:32:2a:d5:e5:
         a8:bd:d1:3a:a6:d1:cf:ce:12:9f:d0:85:89:bb:74:1d:30:1e:
         b2:6d:e9:1b:2e:34:71:f6:cc:05:6c:e5:17:a0:51:c9:56:7d:
         51:16:22:a9:aa:06:43:85:46:d9:64:0b:c0:99:fa:d5:a2:ae:
         89:b8:0e:04:0d:c0:b7:d6:32:b2:ab:b6:fe:e0:6c:5b:d5:16:
         6b:71:50:8e:54:f2:46:08:56:d2:86:c9:68:92:56:e4:e2:da:
         c3:c2:69:ba:66:79:06:80:62:32:3c:37:79:40:26:fa:18:ee:
         e0:84:8a:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:42:37 2024 by rpki-client on console-ams.rpki-client.org