Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/004214fc-b41f-3eeb-895b-563153d34ef6.roa
File:                     004214fc-b41f-3eeb-895b-563153d34ef6.roa (raw, json)
Hash identifier:          4LXjApx+O6+ZGW4wah36/5aomXNfZv8UcfchEmN8dnQ=
Subject key identifier:   B3:9D:99:DE:15:C1:19:39:E1:31:6A:34:D0:97:18:D5:F7:86:3A:77
Certificate issuer:       /CN=aad22c3d-3c14-42b7-a324-b1bb21649378
Certificate serial:       010D0C9F43285847924BDBDE7CCF5927EF6DA200
Authority key identifier: 67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/004214fc-b41f-3eeb-895b-563153d34ef6.roa
Signing time:             Thu 17 Oct 2024 13:00:42 +0000
ROA not before:           Thu 17 Oct 2024 13:00:42 +0000
ROA not after:            Wed 15 Jan 2025 14:00:42 +0000
asID:                     14618
IP address blocks:        2620:116:800e::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:92:4b:db:de:7c:cf:59:27:ef:6d:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aad22c3d-3c14-42b7-a324-b1bb21649378
        Validity
            Not Before: Oct 17 13:00:42 2024 GMT
            Not After : Jan 15 14:00:42 2025 GMT
        Subject: CN=a6e45680-1cf6-4e33-bd1d-21d401fbcac8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:09:47:21:b2:3b:99:9f:2e:e8:2a:b0:03:5e:
                    7b:19:db:16:9d:80:10:7a:24:69:60:d5:66:98:3f:
                    6e:a9:18:a4:87:4a:f9:fc:6b:f9:27:03:9a:6a:be:
                    cd:98:b6:c0:39:94:f4:74:5b:21:08:45:75:4d:80:
                    77:41:ba:3d:73:ab:12:c9:52:53:1a:39:4f:75:44:
                    f8:c7:83:8b:57:9e:de:17:25:84:34:dd:c3:39:e3:
                    0e:b3:f9:db:ef:a1:24:64:46:2f:d1:56:c6:f2:95:
                    63:6b:f6:f3:10:67:ad:e9:3a:1f:96:58:13:2c:8d:
                    51:11:04:95:b1:ec:7b:65:25:09:aa:d6:5c:55:c3:
                    36:b0:bb:e4:69:9a:d2:4a:20:f6:c3:c1:85:80:06:
                    44:06:f5:fb:f3:4e:4a:16:b7:e3:66:4f:f8:1a:f7:
                    c6:6c:6d:af:46:0c:0a:a6:cf:41:09:f5:09:0e:ad:
                    c7:0f:c2:6c:48:de:3e:3d:12:89:51:03:1f:60:1a:
                    0b:c2:c3:39:61:0d:4f:1b:d6:3d:bc:76:fc:2e:c7:
                    64:a9:b1:eb:d6:69:50:79:b6:be:7f:8b:bf:98:e4:
                    11:d5:d5:95:fd:51:1c:6c:f7:a6:db:80:a3:bb:ed:
                    11:5f:cc:27:42:cf:8d:1a:39:ec:87:dd:02:41:d3:
                    50:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:9D:99:DE:15:C1:19:39:E1:31:6A:34:D0:97:18:D5:F7:86:3A:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/004214fc-b41f-3eeb-895b-563153d34ef6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl

            X509v3 Authority Key Identifier:
                keyid:67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:116:800e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:e8:69:76:c3:b6:1d:4e:28:64:95:d2:ec:08:1e:a9:96:8f:
         22:0e:9a:3f:ed:01:a4:13:81:85:ca:44:b2:13:aa:f7:ca:65:
         2d:8f:03:d1:cb:b4:36:b6:a9:48:0f:c1:8e:a0:2f:f1:d6:99:
         5d:b5:84:df:0d:b1:21:77:2d:d3:e3:d9:32:fc:4e:ff:61:18:
         f4:f5:16:1d:b2:b9:c2:04:47:b6:2f:ce:5b:b1:70:93:2f:2b:
         8b:fc:08:d9:09:23:45:05:b6:36:3d:03:69:16:77:4f:26:97:
         3a:91:34:d8:26:5b:39:c5:93:d9:9e:cd:c4:71:b9:2c:ff:48:
         70:14:c5:78:34:01:61:63:27:19:a6:1c:ac:ea:59:5d:7e:c0:
         1d:9f:ed:07:0c:34:fd:1a:5a:c0:ee:7e:75:e8:25:d3:cb:04:
         15:cd:08:06:22:49:b6:20:06:5d:a2:56:b4:e2:41:2a:61:70:
         72:c6:55:a7:f2:5e:71:ec:d0:0b:a3:7d:44:ba:d9:37:90:61:
         e0:73:f0:c9:c6:32:35:3e:08:f4:3f:33:aa:3e:96:36:73:ae:
         74:20:b4:09:7f:89:4b:39:01:58:fa:92:2f:cf:8d:5c:28:36:
         75:e0:56:34:0c:21:a4:32:0d:6e:8b:48:48:ee:9e:9a:b5:13:
         f4:67:c4:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:40:39 2024 by rpki-client on console-fra.rpki-client.org