Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/03fb9436-1079-3479-8e93-1626e18c2a80.roa
File:                     03fb9436-1079-3479-8e93-1626e18c2a80.roa (raw, json)
Hash identifier:          BmeNhRliS8zh72qkiMimB3sSkIDj62vJcgcROLpFVzc=
Subject key identifier:   F8:54:E4:BE:45:C6:24:8F:26:23:0B:85:41:A2:EB:1D:61:13:B4:38
Certificate issuer:       /CN=aad22c3d-3c14-42b7-a324-b1bb21649378
Certificate serial:       010D0C9F43285847924BD703F2F0F5D9FB3C4100
Authority key identifier: 67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/03fb9436-1079-3479-8e93-1626e18c2a80.roa
Signing time:             Thu 17 Oct 2024 13:00:42 +0000
ROA not before:           Thu 17 Oct 2024 13:00:42 +0000
ROA not after:            Wed 15 Jan 2025 14:00:42 +0000
asID:                     14618
IP address blocks:        2620:116:800d::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:92:4b:d7:03:f2:f0:f5:d9:fb:3c:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aad22c3d-3c14-42b7-a324-b1bb21649378
        Validity
            Not Before: Oct 17 13:00:42 2024 GMT
            Not After : Jan 15 14:00:42 2025 GMT
        Subject: CN=b331d281-9930-4026-84a6-1fab249eb9ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a1:0c:9f:f5:cf:4a:fa:29:b9:fa:eb:79:82:
                    a0:f2:09:ac:f6:46:c7:ee:1f:2c:b9:d6:3d:cb:a2:
                    77:ef:af:78:fe:3c:e6:ed:03:06:d9:2a:3c:e5:10:
                    3b:8e:29:b7:71:55:c4:e7:f5:27:c6:49:5b:dd:bd:
                    fd:4a:5d:c8:37:7c:38:b9:f8:59:64:eb:85:5a:30:
                    cb:af:75:43:21:b9:99:96:70:de:5a:31:c4:bc:4c:
                    05:e4:29:3c:3e:3d:03:d3:56:d3:f5:09:81:e6:f1:
                    d9:09:77:68:cf:26:3c:49:8c:dd:a0:76:59:f6:78:
                    c1:7a:1a:5b:35:f7:9a:61:b7:e3:cc:27:b8:73:a8:
                    b0:b8:d5:e2:34:cd:78:74:4d:f3:b4:b7:4b:0a:0d:
                    46:a4:c6:9b:25:39:25:10:49:f2:ed:4f:f0:11:30:
                    c3:d3:d0:c0:8b:81:04:4e:60:67:e7:a4:ae:ea:67:
                    2c:34:74:43:29:b9:63:34:cc:cb:72:cd:ec:b3:96:
                    08:50:0e:c5:d1:86:ee:d5:f4:17:ae:86:7b:ae:e4:
                    77:fb:d0:f8:75:54:6d:ec:44:45:64:79:c9:96:1b:
                    ab:93:90:55:c3:ae:c6:36:65:85:6a:c9:e5:7c:c7:
                    47:e8:ef:02:28:19:f7:d2:d5:a4:dd:63:90:1e:08:
                    13:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:54:E4:BE:45:C6:24:8F:26:23:0B:85:41:A2:EB:1D:61:13:B4:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/03fb9436-1079-3479-8e93-1626e18c2a80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl

            X509v3 Authority Key Identifier:
                keyid:67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:116:800d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:b7:de:01:f6:9a:14:94:6f:c2:ae:6f:a1:d2:69:98:f3:54:
         df:f4:cb:08:6b:a0:8c:1c:2e:3b:de:30:d0:04:da:fe:5e:b1:
         15:c5:67:ea:02:0a:13:28:99:82:9e:4b:c7:0b:e6:98:33:82:
         a0:36:56:77:89:94:c0:04:d9:5f:89:1f:89:14:41:36:6e:9d:
         30:c8:04:90:27:d0:28:76:3e:2b:5e:d4:6b:2d:a7:bb:77:da:
         fa:db:f4:bb:99:da:2d:39:9c:5f:50:00:41:23:af:fe:98:78:
         1b:8f:a1:7b:4b:f3:e8:e6:aa:6b:d7:7c:2a:89:b5:15:c0:fd:
         2e:f7:5c:3d:56:d5:a1:69:f3:c5:36:17:13:37:d8:3a:60:8e:
         35:b5:7f:d7:d1:6b:cc:60:aa:03:ad:75:5e:a6:bb:6c:c8:ae:
         6f:c8:cf:2c:40:ab:e0:23:a1:d4:db:3f:8d:4f:df:87:2a:f8:
         76:f5:ac:96:a5:ce:1e:84:d4:75:53:2e:af:e8:fa:bb:db:50:
         81:c4:8e:2c:d2:e3:9d:48:aa:1f:44:cf:7c:71:ff:41:cf:d4:
         c3:3e:e3:ca:db:08:a6:0a:93:04:3c:9d:4c:8c:bf:ee:08:d8:
         df:c9:72:bc:66:13:92:3b:47:2b:68:61:6a:d3:77:c2:fd:36:
         64:3d:8c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:42:42 2024 by rpki-client on console-ams.rpki-client.org