Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/086cb794-8c2f-3726-899f-ae4c1798bd3f.roa
File:                     086cb794-8c2f-3726-899f-ae4c1798bd3f.roa (raw, json)
Hash identifier:          rRUl0U+KTGfvjkGkJfdNLu75xBexn9hFo/qiMbg2Uaw=
Subject key identifier:   41:A5:E7:E3:61:56:F1:F5:D8:97:36:BD:1E:33:CF:5D:30:51:21:F4
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F43285847AE36C4B3304E926FF6E8AE00
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/086cb794-8c2f-3726-899f-ae4c1798bd3f.roa
Signing time:             Sun 27 Oct 2024 13:00:41 +0000
ROA not before:           Sun 27 Oct 2024 13:00:41 +0000
ROA not after:            Sat 25 Jan 2025 14:00:41 +0000
asID:                     30103
IP address blocks:        2620:123:2080::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ae:36:c4:b3:30:4e:92:6f:f6:e8:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Oct 27 13:00:41 2024 GMT
            Not After : Jan 25 14:00:41 2025 GMT
        Subject: CN=21a7c859-b9d2-4c0d-ae69-d04c6c18efbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2d:69:f6:95:81:3c:3b:4a:01:f2:cb:42:34:
                    5f:aa:b0:31:91:49:6b:4c:58:dc:f3:16:ea:77:fc:
                    7b:8a:b2:00:1b:80:47:ee:b9:42:a5:69:81:52:a2:
                    ce:ad:b8:a5:83:d5:b8:22:b4:e9:cd:80:ec:e5:cd:
                    77:a9:ea:84:36:25:02:20:5a:2c:4d:fb:9f:d5:48:
                    7c:22:cf:22:28:fd:b9:97:13:93:44:b8:16:b1:63:
                    32:de:7d:78:9f:c0:96:ad:0a:c8:16:ab:7f:bd:2f:
                    8c:e3:5a:4c:00:61:46:6e:38:ad:4c:e5:42:35:c7:
                    39:2e:85:83:31:4c:eb:0b:65:4b:f3:07:5f:38:a7:
                    6b:27:68:fc:a3:16:00:26:90:86:96:b5:e0:5d:a1:
                    7d:67:03:00:18:9d:cc:e9:90:75:4f:93:b2:37:ef:
                    ba:a3:c2:03:55:c4:b6:c4:b1:05:c7:f1:5b:56:83:
                    2b:60:12:2b:62:66:0d:f0:8d:0a:38:4e:fd:2d:ad:
                    dd:c5:07:7c:a1:16:ef:ef:90:3b:ff:0d:b1:9d:d0:
                    af:1a:78:16:d1:17:8d:1e:d1:f0:ba:49:08:64:8d:
                    91:42:21:3d:8b:93:b4:11:da:13:92:a2:e6:5a:ec:
                    3b:51:f7:3f:a2:7b:bc:f9:48:b4:3f:87:ef:7e:e2:
                    a5:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:A5:E7:E3:61:56:F1:F5:D8:97:36:BD:1E:33:CF:5D:30:51:21:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/086cb794-8c2f-3726-899f-ae4c1798bd3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:123:2080::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:6d:1d:cb:fc:c8:08:1c:ce:ab:ad:94:09:43:77:c4:a8:19:
         9b:b0:dc:a2:e2:95:eb:3b:90:03:cf:e9:d6:46:1d:58:08:92:
         ed:6f:32:71:47:bd:b3:da:04:98:56:78:59:d8:4c:9d:a8:a8:
         89:17:42:f4:9c:4d:f4:58:eb:3e:2c:4f:65:b0:41:c4:7e:61:
         b9:f7:b9:6d:ce:5a:49:d7:7c:4d:08:4f:44:63:75:04:80:84:
         ba:21:c3:3e:f5:76:41:5c:b3:e4:71:d7:67:8e:b2:a1:75:1f:
         bc:11:b0:73:16:00:93:8b:ba:de:2b:f1:60:3a:7a:6e:c5:54:
         ad:35:ec:d5:3d:b3:8f:92:42:d5:4c:63:f3:08:fb:c8:28:81:
         84:3c:b1:04:2d:b0:f5:6b:36:5c:22:dc:3f:62:86:11:a0:76:
         3d:d3:90:f9:f4:7d:5f:18:5c:f1:a5:c0:a9:53:11:5e:b9:45:
         1d:49:c1:08:b4:47:06:47:87:49:54:04:98:36:93:70:0f:96:
         81:01:d3:80:39:48:52:1c:8e:34:00:de:41:0c:76:d4:90:56:
         6d:d3:9b:ae:d3:80:79:b9:03:38:b7:c8:89:ac:c6:5f:cf:b9:
         cb:d9:2c:bd:7e:e6:19:32:ff:d9:02:b0:84:69:af:6e:9d:cd:
         cf:d8:24:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:40:50 2024 by rpki-client on console-fra.rpki-client.org