Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5/2505f67b-6fa0-3842-b151-ace4058d830a.roa
File:                     2505f67b-6fa0-3842-b151-ace4058d830a.roa (raw, json)
Hash identifier:          Ny56Hz6Xp/6Eo30vy49kobkdrLnWoWHLgv5/yb0L1yo=
Subject key identifier:   FB:78:C5:12:B7:6A:2D:96:B1:75:01:0F:69:41:58:95:22:72:78:32
Certificate issuer:       /CN=c0d4a510-1468-46e8-beaf-e6681a1190c5
Certificate serial:       010D0C9F43285846B88A6E92B14D678437850E40
Authority key identifier: 67:DF:96:60:0B:8C:9F:22:B3:83:1E:4A:BE:DF:E4:1E:31:42:AE:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5/2505f67b-6fa0-3842-b151-ace4058d830a.roa
Signing time:             Wed 31 Jul 2024 13:00:38 +0000
ROA not before:           Wed 31 Jul 2024 13:00:38 +0000
ROA not after:            Tue 29 Oct 2024 13:00:38 +0000
asID:                     809
IP address blocks:        2620:13b:1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5/c0d4a510-1468-46e8-beaf-e6681a1190c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5/c0d4a510-1468-46e8-beaf-e6681a1190c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Sep 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:b8:8a:6e:92:b1:4d:67:84:37:85:0e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0d4a510-1468-46e8-beaf-e6681a1190c5
        Validity
            Not Before: Jul 31 13:00:38 2024 GMT
            Not After : Oct 29 13:00:38 2024 GMT
        Subject: CN=00cffb53-e0e7-453b-bb08-bf165be8660a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f5:d9:e6:e9:69:40:8f:67:1b:fb:da:b0:d9:
                    6f:36:ae:8b:8b:b3:2d:b0:81:5e:c5:6d:3c:e2:33:
                    30:93:12:08:47:65:03:60:e5:0a:b5:27:b1:13:92:
                    d1:36:f7:85:23:8f:fb:dd:87:d4:98:29:73:8b:e8:
                    e3:04:6d:c0:dc:9c:41:6a:98:fd:23:ac:5b:e6:60:
                    cc:17:b3:80:db:ca:3d:ef:52:3b:82:6e:49:d5:d5:
                    3c:6d:d4:b1:13:b2:36:26:ac:7e:cb:ed:5b:0d:99:
                    73:b5:b5:f5:b4:03:bc:db:f4:8a:79:dd:3d:e7:0f:
                    07:c3:25:75:44:3c:c0:5b:1e:99:0d:3b:d4:28:04:
                    97:4f:02:86:17:9f:37:c0:3a:35:2c:23:0b:ef:a0:
                    22:8f:06:e5:4c:8a:bf:72:d8:fa:d4:f5:3b:2a:d0:
                    1d:03:d2:7f:eb:3b:9a:73:9a:14:7c:e1:c0:f2:f6:
                    84:69:d5:07:73:02:6c:f9:57:37:ff:5a:f6:83:85:
                    31:04:45:66:5a:1f:6f:cd:6b:51:d5:06:67:3b:a3:
                    91:6b:2e:45:d3:40:01:4d:cb:5d:5c:b9:d9:05:a4:
                    79:f3:cc:b9:59:6f:d2:e8:b1:5d:ee:14:11:48:81:
                    4e:4d:cf:ab:c5:df:67:5d:48:10:36:ea:67:c2:70:
                    b1:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:78:C5:12:B7:6A:2D:96:B1:75:01:0F:69:41:58:95:22:72:78:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5/2505f67b-6fa0-3842-b151-ace4058d830a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5/c0d4a510-1468-46e8-beaf-e6681a1190c5.crl

            X509v3 Authority Key Identifier:
                keyid:67:DF:96:60:0B:8C:9F:22:B3:83:1E:4A:BE:DF:E4:1E:31:42:AE:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:13b:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:14:7a:0d:62:a4:f2:a4:3d:4e:d0:5b:cc:9b:40:e8:b0:a4:
         ca:1b:2e:a9:cf:93:51:26:86:16:d2:f9:d8:4b:53:76:16:9e:
         a1:9c:46:78:17:fd:a3:b2:dd:de:30:ec:65:25:c0:0c:2a:2d:
         7c:84:c6:be:db:f1:07:b0:9a:53:93:59:29:36:94:03:92:42:
         e4:99:66:67:d6:94:4c:ff:8a:19:c6:3b:fa:2e:3d:f4:16:78:
         9c:e8:ca:3c:35:3c:ae:f6:94:8f:3e:b7:e2:5e:fa:36:c5:d2:
         90:a9:1a:c9:9e:00:90:d4:c9:96:7a:e2:3a:06:56:7f:4f:26:
         cb:ad:f5:fb:39:33:ed:17:bf:4e:05:c8:e6:da:dd:d3:ba:28:
         c1:e0:ae:83:39:50:ab:f6:4c:1f:54:ae:1a:e4:56:cf:df:7d:
         6d:94:73:a4:c4:fc:be:e0:b9:c5:58:6b:ef:9d:e9:d5:a1:55:
         00:43:dc:ef:36:9d:e6:5a:b1:71:cb:67:75:4f:a9:e6:c5:f5:
         f3:04:fe:4f:8a:df:cf:f7:29:ac:6f:53:1f:81:98:60:a6:95:
         fb:23:8e:77:3c:c1:39:45:04:3a:f7:32:11:1b:36:1c:18:0e:
         c0:48:76:4b:2f:f4:28:3d:e2:fa:ff:bf:6f:16:54:30:93:97:
         1c:fd:9f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 21:57:16 2024 by rpki-client on console-fra.rpki-client.org