Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/4aa8fcfa-0674-34e2-bf12-0ede1debfb62.roa
File:                     4aa8fcfa-0674-34e2-bf12-0ede1debfb62.roa (raw, json)
Hash identifier:          b9Ol6Ttyf98z5ytyxhIuMt/Q6TUKM8WZKa1YOwVrtr8=
Subject key identifier:   A4:5F:A7:C4:48:D0:19:70:43:0A:EF:A0:63:2C:15:2C:BD:12:F0:37
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F43285847AE36C50E41490B9CE6381AC0
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/4aa8fcfa-0674-34e2-bf12-0ede1debfb62.roa
Signing time:             Sun 27 Oct 2024 13:00:41 +0000
ROA not before:           Sun 27 Oct 2024 13:00:41 +0000
ROA not after:            Sat 25 Jan 2025 14:00:41 +0000
asID:                     30103
IP address blocks:        2620:123:2098::/48 maxlen: 48
                          2620:123:2099::/48 maxlen: 48
                          2620:123:209a::/48 maxlen: 48
                          2620:123:209b::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ae:36:c5:0e:41:49:0b:9c:e6:38:1a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Oct 27 13:00:41 2024 GMT
            Not After : Jan 25 14:00:41 2025 GMT
        Subject: CN=4e6d9d5c-bf6d-4529-a810-69d47b02f23e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:dd:2e:27:f1:19:6b:0a:3f:55:23:3c:ff:1b:
                    47:9c:3a:16:ba:8e:e3:63:96:76:51:2d:35:65:33:
                    b1:b2:c0:6a:ce:92:47:93:ef:4e:86:94:ba:c1:dc:
                    ea:f4:d0:b1:5a:ff:86:d8:25:f0:42:6a:bb:f7:2e:
                    5d:f3:36:74:c7:e4:ed:68:0c:39:92:a9:bf:d7:da:
                    32:e1:b1:b2:5d:b2:a8:c7:eb:91:23:1c:86:ac:7e:
                    ae:6a:f3:8b:38:f3:dc:e8:88:f0:25:9e:ac:bd:4a:
                    89:f0:3c:17:3c:f9:6d:64:39:7a:4c:a1:6a:d8:6c:
                    5d:16:ce:d9:e4:a5:e9:dd:b5:c4:56:26:bc:be:01:
                    99:5e:ce:5f:a3:02:85:68:d2:3e:09:e8:97:aa:6e:
                    34:14:49:86:bf:78:07:dc:bc:de:cd:d1:f2:bc:9e:
                    c4:a9:ff:57:84:d0:6e:da:7e:6d:0d:08:f9:93:87:
                    c1:3c:55:eb:2d:60:88:1a:da:12:4e:4a:44:6a:b9:
                    82:89:dc:f1:a8:15:a2:b1:a7:66:ce:31:f5:9a:87:
                    7e:75:7b:4d:de:44:08:2e:10:98:ee:44:ef:73:10:
                    53:92:21:1c:ce:ef:3d:6e:0a:a6:3a:25:18:b7:11:
                    c7:15:13:de:4a:21:3e:c4:7e:a0:45:40:d0:e1:5b:
                    cf:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:5F:A7:C4:48:D0:19:70:43:0A:EF:A0:63:2C:15:2C:BD:12:F0:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/4aa8fcfa-0674-34e2-bf12-0ede1debfb62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:123:2098::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:12:04:27:ce:61:14:e5:ae:59:90:26:f7:84:96:37:61:ef:
         44:64:b9:c7:46:e4:c1:51:84:58:28:5b:77:c0:23:e3:e1:d5:
         0e:5c:10:6f:b3:70:12:c2:10:25:73:15:f4:1d:f6:c1:29:df:
         82:14:7c:f7:a5:6a:f6:fd:09:d9:6f:48:92:3a:75:c8:eb:93:
         de:65:15:22:3c:3b:03:53:8f:d4:ef:26:98:a5:c7:e3:9c:f5:
         f1:76:98:7d:1c:29:b0:df:2a:f8:2e:c9:f7:cb:8a:83:d0:91:
         22:ac:8c:37:14:7b:d2:d9:ab:a3:69:e1:22:91:fd:e6:18:2a:
         0e:5b:9d:00:1e:69:bd:97:e1:8f:54:9b:7f:ca:48:77:1f:0f:
         f9:7f:74:36:1d:d9:5b:5d:02:82:16:57:d0:a1:64:09:25:c6:
         ec:9f:d3:62:76:26:59:8a:1b:06:a7:5a:09:6a:2c:9e:36:22:
         ad:33:31:ef:1d:cf:70:a5:d3:9b:12:4a:e2:b1:9f:3c:2a:53:
         ca:43:6c:b4:6b:93:11:6e:ac:0e:29:23:36:f2:3b:08:58:70:
         10:27:4e:c9:eb:cd:44:c7:6a:37:f8:ae:48:13:3a:a9:c1:31:
         a2:bd:28:95:13:dd:2e:56:1c:67:ae:73:02:00:47:4d:a7:66:
         b4:fa:1e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 22:16:26 2024 by rpki-client on console-fra.rpki-client.org