Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/bd1a2e9c-e288-3f4d-8934-fcbd347671d6.roa
File:                     bd1a2e9c-e288-3f4d-8934-fcbd347671d6.roa (raw, json)
Hash identifier:          VqwhvXuGJyayp7+XQDfDIqLEFA/Y+JBYAmhUhjTSiwo=
Subject key identifier:   37:55:4C:48:3F:0E:DB:CF:E0:A4:60:54:92:C8:21:09:39:6B:F6:15
Certificate issuer:       /CN=9c3739a8-4c8d-47b0-8413-77e27a96700c
Certificate serial:       010D0C9F432858474C80BA149F063F41D79C4C68
Authority key identifier: FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/bd1a2e9c-e288-3f4d-8934-fcbd347671d6.roa
Signing time:             Sun 22 Sep 2024 13:00:40 +0000
ROA not before:           Sun 22 Sep 2024 13:00:40 +0000
ROA not after:            Sat 21 Dec 2024 14:00:40 +0000
asID:                     14618
IP address blocks:        2605:84c0:55::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4c:80:ba:14:9f:06:3f:41:d7:9c:4c:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c3739a8-4c8d-47b0-8413-77e27a96700c
        Validity
            Not Before: Sep 22 13:00:40 2024 GMT
            Not After : Dec 21 14:00:40 2024 GMT
        Subject: CN=678719f8-a5ba-4499-946f-2b368302268b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:28:64:9e:12:66:0b:80:8f:08:6c:a7:9d:4b:
                    96:c2:dd:a3:1c:d4:91:33:c6:10:7e:ed:3e:db:da:
                    9a:01:95:6f:5c:08:b2:35:34:e6:a1:cb:d1:4b:9c:
                    da:00:a9:36:d8:4b:1f:05:64:ab:39:c5:48:ed:4b:
                    06:03:74:7b:11:15:90:88:55:16:69:f8:02:84:6a:
                    03:77:f1:d0:a5:5d:1b:46:00:90:b0:c1:d9:b9:75:
                    b7:e0:ad:b6:19:42:cb:d4:b2:80:9b:1b:0f:64:ab:
                    f5:65:97:df:6c:cc:54:fe:1d:d7:78:d9:25:93:1e:
                    83:48:f4:7d:1a:9e:fe:82:4d:4b:14:48:ca:fe:76:
                    5b:b7:7d:da:35:d4:3a:88:85:01:b1:d1:f7:ec:00:
                    db:4b:8f:88:06:c8:9a:ea:0b:8d:6c:7c:9c:66:f1:
                    fe:3e:ad:c3:b8:13:21:17:1b:00:4b:fe:6c:41:bc:
                    57:79:ec:06:01:8e:e9:db:1e:c9:c3:85:13:75:b5:
                    93:ee:95:72:17:0d:66:47:93:c5:bc:32:37:0c:0a:
                    ce:dd:c7:c6:60:14:d1:90:fe:04:64:e4:32:80:44:
                    8c:4d:3e:c3:be:20:cb:57:01:92:25:5d:51:fc:d7:
                    64:5f:37:c9:69:ef:f2:12:ba:08:42:e3:1b:df:9b:
                    1b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:55:4C:48:3F:0E:DB:CF:E0:A4:60:54:92:C8:21:09:39:6B:F6:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/bd1a2e9c-e288-3f4d-8934-fcbd347671d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.crl

            X509v3 Authority Key Identifier:
                keyid:FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:84c0:55::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:9b:89:6c:9b:f9:72:99:80:39:75:b4:21:64:a8:97:a7:de:
         70:d8:7f:99:7e:0e:75:42:b1:f7:df:0c:55:68:f5:43:fa:10:
         0e:b4:05:a2:03:03:1c:d9:2a:4f:7d:28:b5:24:27:02:a3:c4:
         fd:70:0c:29:81:af:a4:ae:57:a3:f2:40:7f:79:44:be:0e:27:
         bb:9c:24:68:c5:6d:74:69:dd:13:2e:87:2f:3c:62:3c:08:50:
         57:5b:00:0c:69:df:22:85:30:ee:9a:52:ef:22:40:ad:b8:27:
         c6:cd:45:01:21:3e:a4:7e:5e:e6:67:8b:22:ae:61:7a:c9:5f:
         a3:67:57:5e:d6:66:52:11:1a:f2:1b:29:4b:99:e8:e3:6c:6b:
         c4:35:35:a3:98:66:44:05:af:3a:de:58:b8:01:fe:05:02:bb:
         8f:5f:9d:92:0e:df:07:30:86:b0:55:7e:80:60:b5:9f:6b:30:
         cd:99:ae:5b:4e:ff:b5:3d:eb:68:9f:3a:5f:84:47:51:69:31:
         9f:00:db:9d:56:aa:c6:f1:2d:d9:be:be:b0:4f:3c:c6:b2:ae:
         e1:e9:66:a6:82:cd:bd:32:dd:94:17:bd:30:06:18:87:84:8e:
         d0:c8:f8:fc:50:44:f5:64:01:72:06:f3:a3:3a:51:2e:16:52:
         66:f5:00:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 22:16:12 2024 by rpki-client on console-fra.rpki-client.org