Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/09ee371d-db17-35a1-95c0-fbdbefe48a84.roa
File:                     09ee371d-db17-35a1-95c0-fbdbefe48a84.roa (raw, json)
Hash identifier:          RIi52HH12aM04eW5kHSh3X+GD7lwC4xAakpH+0BjUfU=
Subject key identifier:   E3:9F:F7:5E:B8:FB:ED:88:50:3D:71:13:84:0E:60:A0:C8:2C:23:B9
Certificate issuer:       /CN=aad22c3d-3c14-42b7-a324-b1bb21649378
Certificate serial:       010D0C9F43285847924BDB7070CD1D10DDBE7F80
Authority key identifier: 67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/09ee371d-db17-35a1-95c0-fbdbefe48a84.roa
Signing time:             Thu 17 Oct 2024 13:00:42 +0000
ROA not before:           Thu 17 Oct 2024 13:00:42 +0000
ROA not after:            Wed 15 Jan 2025 14:00:42 +0000
asID:                     14618
IP address blocks:        2620:116:800a::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:92:4b:db:70:70:cd:1d:10:dd:be:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aad22c3d-3c14-42b7-a324-b1bb21649378
        Validity
            Not Before: Oct 17 13:00:42 2024 GMT
            Not After : Jan 15 14:00:42 2025 GMT
        Subject: CN=72292e85-8948-490a-aea1-e0bc36bda024
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:da:7f:aa:13:92:53:d0:92:33:2a:c4:9d:7b:
                    39:57:f9:9f:bb:fd:07:3a:68:c5:ee:ab:55:da:04:
                    a4:57:5a:9b:b6:ce:a0:b6:d0:eb:8b:96:f9:b0:74:
                    1b:51:1e:83:cb:5f:d4:88:6c:72:30:e4:ea:ac:8f:
                    fc:8b:61:5d:72:ac:ee:d9:b2:06:04:fe:32:b6:9f:
                    00:01:a0:4c:a6:cc:ed:06:1f:bc:0e:ee:39:54:da:
                    58:36:65:f0:d0:0d:6e:ab:ca:7e:aa:68:50:79:50:
                    6f:e1:da:3a:85:f2:86:81:57:78:8f:d0:e5:79:b5:
                    3d:0a:73:49:be:7a:35:71:89:ca:e2:af:54:58:c9:
                    4a:76:3f:98:f3:7b:cf:5b:e9:8b:2f:13:1d:0e:44:
                    2b:40:d2:db:e9:0e:5f:50:64:d2:03:5a:c9:f3:62:
                    ed:18:95:5d:73:f8:7c:62:be:fa:a1:19:2f:74:6e:
                    ec:14:3e:b5:0e:b4:2d:47:80:18:17:5e:68:59:d5:
                    4c:9f:f6:fa:be:df:a6:f8:05:a3:0d:76:28:74:fa:
                    d0:6b:20:6e:d9:f6:e1:2a:d3:42:f3:78:d6:bd:0b:
                    e3:72:23:e5:60:75:43:c1:fd:2d:99:3a:34:c3:42:
                    21:b6:8b:9b:b4:11:95:43:45:a7:1a:eb:fd:27:b2:
                    f4:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:9F:F7:5E:B8:FB:ED:88:50:3D:71:13:84:0E:60:A0:C8:2C:23:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/09ee371d-db17-35a1-95c0-fbdbefe48a84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl

            X509v3 Authority Key Identifier:
                keyid:67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:116:800a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:73:5a:e6:b6:18:c8:4b:20:98:40:fc:61:40:0f:2b:55:79:
         13:14:a2:c9:6c:f2:bb:e0:cd:ea:cc:1f:f2:f7:e2:b1:15:6f:
         b9:72:29:a7:b0:7c:82:bd:30:a4:81:eb:fe:c0:aa:f8:49:91:
         12:e1:f2:d6:94:96:ed:98:6e:c1:ad:c6:45:bd:97:46:70:a4:
         d7:38:3c:85:fc:b6:9f:58:ea:ac:6b:ac:79:2b:e5:f7:81:a1:
         96:f4:c7:0c:40:06:11:4a:5b:66:84:c2:a7:d5:93:3d:3a:84:
         d6:91:10:26:44:b3:df:ee:65:0b:13:c9:c7:3c:cd:24:d3:bb:
         a3:9e:8f:8d:04:17:6b:56:f2:e7:26:f6:87:54:11:61:63:77:
         c4:dc:16:ce:6f:50:80:af:7a:12:57:10:2a:f1:94:3c:81:f4:
         da:d5:51:6e:62:5a:ae:1c:a8:82:27:a9:52:49:5c:36:b8:d2:
         77:13:b8:d8:43:21:80:4f:5e:d4:6a:52:f7:1f:69:f5:1e:b6:
         44:c1:fa:cd:54:f1:8e:6b:22:32:19:58:ec:d9:ec:73:61:73:
         4a:be:84:b9:59:2d:58:c1:0a:ea:9e:40:c5:62:46:67:44:0d:
         f8:83:ca:fc:75:78:4e:ce:d8:5e:f2:7c:76:fc:18:10:f6:a6:
         58:12:b7:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:40:39 2024 by rpki-client on console-fra.rpki-client.org