Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/c967a983-4816-3b7c-b4d6-367640f11653.roa
File:                     c967a983-4816-3b7c-b4d6-367640f11653.roa (raw, json)
Hash identifier:          QQIodAo/bGXq4qt3ExhCrHPfvvG1iJLUQiMvN44Vh80=
Subject key identifier:   62:BA:92:40:86:E8:5E:21:6E:17:B3:F6:D2:63:6B:4A:6F:40:B0:06
Certificate issuer:       /CN=9c3739a8-4c8d-47b0-8413-77e27a96700c
Certificate serial:       010D0C9F43285847872126B43A488E700C956280
Authority key identifier: FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/c967a983-4816-3b7c-b4d6-367640f11653.roa
Signing time:             Sun 13 Oct 2024 13:00:42 +0000
ROA not before:           Sun 13 Oct 2024 13:00:42 +0000
ROA not after:            Sat 11 Jan 2025 14:00:42 +0000
asID:                     14618
IP address blocks:        2605:84c0:50::/48 maxlen: 56

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:87:21:26:b4:3a:48:8e:70:0c:95:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c3739a8-4c8d-47b0-8413-77e27a96700c
        Validity
            Not Before: Oct 13 13:00:42 2024 GMT
            Not After : Jan 11 14:00:42 2025 GMT
        Subject: CN=1fc5a493-c322-4fde-ab1f-90ac69509c35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:59:53:cc:e2:20:da:5d:d0:3e:b9:10:ad:e6:
                    47:b7:bc:1f:ba:43:82:9c:0e:b6:f9:4d:64:59:70:
                    80:69:bc:4b:1c:e8:2b:cf:f5:8f:87:b1:78:66:0e:
                    5a:a6:a2:28:50:77:93:64:8b:ad:28:eb:d8:2c:97:
                    47:59:9e:bd:a2:87:2a:8d:0b:c3:c8:20:e6:70:83:
                    1b:0f:58:3b:75:0b:03:d4:18:95:42:2a:7b:c8:ad:
                    61:75:d3:b9:6a:7c:de:c7:3a:1c:9f:05:6d:69:b8:
                    9b:ab:e1:4b:b9:70:33:05:2a:f3:c3:da:ef:64:18:
                    58:d7:db:31:0b:f0:de:4a:0a:2d:98:32:43:c4:f5:
                    ba:bd:e1:6e:71:55:ed:9b:ab:fe:69:dc:ae:0d:e5:
                    3d:e4:58:b7:f2:33:0b:77:69:79:b2:16:b4:1d:46:
                    20:93:86:08:84:ff:a2:a0:80:2b:af:cd:6f:86:87:
                    3a:41:37:a6:c0:e3:58:67:98:6c:78:1a:55:9a:be:
                    ee:79:1e:33:cd:a8:fb:d5:51:a2:97:1e:24:a2:08:
                    49:77:f9:3a:0b:07:24:68:47:4e:6e:d4:a4:a9:16:
                    f7:80:64:58:91:15:bb:4d:6f:72:a2:25:d9:84:2b:
                    c8:dd:69:09:fb:80:d6:71:6c:5b:d1:ce:67:b4:3d:
                    0a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:BA:92:40:86:E8:5E:21:6E:17:B3:F6:D2:63:6B:4A:6F:40:B0:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/c967a983-4816-3b7c-b4d6-367640f11653.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.crl

            X509v3 Authority Key Identifier:
                keyid:FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:84c0:50::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:95:16:f8:8b:b1:55:e7:ef:25:de:fd:77:e9:ba:39:05:a3:
         e3:f2:9e:99:dc:ab:e8:37:bd:a0:ee:2b:99:69:db:dd:70:79:
         89:b2:f2:9e:7a:b6:86:88:b5:01:7a:b6:4a:92:76:57:09:80:
         e3:35:5b:ee:93:7a:0b:a7:a4:98:fd:10:93:7d:37:af:69:9a:
         98:53:bf:97:f5:d3:49:a4:6c:11:88:11:aa:23:71:4c:4e:f3:
         d1:31:03:47:d1:f0:2e:c8:de:39:c7:df:9a:c7:e5:ab:b3:32:
         13:43:ea:c9:30:99:67:86:ad:e1:0e:cc:f4:7f:54:1f:71:cb:
         55:6d:4f:66:ae:1e:bc:2c:5d:e8:65:e5:54:08:b2:cf:ac:94:
         6a:43:0d:a3:e8:48:8d:3e:1e:14:09:07:1b:26:84:2b:64:a3:
         e4:97:73:24:ba:79:65:c1:9a:20:66:8b:3c:c6:d2:7e:3a:2b:
         32:db:01:70:4e:82:b6:f5:e6:65:13:86:ee:c2:4d:a4:69:e9:
         cd:62:ea:54:72:81:0c:f0:c9:1c:d6:e7:77:42:91:2a:20:25:
         f0:8b:66:e7:b9:71:e2:3b:34:35:d9:b7:61:16:ca:9e:0e:4a:
         4c:d3:9d:3b:3a:54:3c:66:39:21:1c:a7:a8:c2:3a:55:55:10:
         bb:b7:3a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 22:16:12 2024 by rpki-client on console-fra.rpki-client.org