Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/47eaced4-7c56-33f2-8b26-d7582d328fcc.roa
File:                     47eaced4-7c56-33f2-8b26-d7582d328fcc.roa (raw, json)
Hash identifier:          FQTZ9fUKd+8EpssIsKZ+kQUiMryZ5Oxum5cG1koQ6DM=
Subject key identifier:   39:A2:A3:70:B8:4E:5E:50:92:19:62:A3:D7:83:C2:47:B3:C8:80:FB
Certificate issuer:       /CN=ebd609f9-488f-4ccb-b562-f82edd8191dd
Certificate serial:       010D0C9F432858474C80B5739683660CE6FD4270
Authority key identifier: FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/47eaced4-7c56-33f2-8b26-d7582d328fcc.roa
Signing time:             Sun 22 Sep 2024 13:00:40 +0000
ROA not before:           Sun 22 Sep 2024 13:00:40 +0000
ROA not after:            Sat 21 Dec 2024 14:00:40 +0000
asID:                     64249
IP address blocks:        2001:4830:c210::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4c:80:b5:73:96:83:66:0c:e6:fd:42:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebd609f9-488f-4ccb-b562-f82edd8191dd
        Validity
            Not Before: Sep 22 13:00:40 2024 GMT
            Not After : Dec 21 14:00:40 2024 GMT
        Subject: CN=7b48bd11-1a4b-4977-aab9-8d2ee605baea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:4a:9b:9b:f0:25:b5:b8:ba:cb:49:3f:b6:ae:
                    53:38:45:c8:ef:c1:d9:65:d6:05:26:3c:b9:a4:28:
                    6b:f4:82:f4:a6:32:64:4c:b8:33:41:23:72:f4:6c:
                    53:42:98:69:61:8d:ca:14:8a:2b:fe:b8:92:8b:2d:
                    2a:2f:70:c5:ad:9d:a2:72:13:8c:93:23:e2:2b:19:
                    f8:88:08:c1:1f:6f:03:c9:b1:c1:39:6a:90:d0:db:
                    a1:fa:fc:c9:68:42:da:09:bc:f0:0e:87:ce:43:a8:
                    c2:79:72:37:a0:f2:13:0a:d6:0a:7b:68:0a:bb:f8:
                    b0:38:ad:45:d6:87:87:e0:9d:9e:87:02:12:b9:2c:
                    46:43:68:3f:38:e5:1c:16:95:39:4c:a2:bb:78:2a:
                    fb:68:4f:02:28:46:2d:18:84:8d:52:8f:92:88:61:
                    6b:b1:c5:e2:5f:3e:59:52:6b:6a:4d:e7:45:33:12:
                    6a:1f:f9:3c:4b:bb:6e:99:7e:72:7a:67:db:8c:db:
                    62:c0:36:ba:a1:cc:4d:d7:77:1f:e7:26:9d:f2:28:
                    00:9d:58:cf:b2:67:86:a9:f7:5c:26:43:b1:ff:55:
                    ad:a6:2b:df:ac:a1:92:ff:41:19:eb:ab:8d:89:e4:
                    b2:8a:6a:8c:50:07:a9:a8:ea:83:5e:ed:c6:dc:7a:
                    c9:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:A2:A3:70:B8:4E:5E:50:92:19:62:A3:D7:83:C2:47:B3:C8:80:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/47eaced4-7c56-33f2-8b26-d7582d328fcc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl

            X509v3 Authority Key Identifier:
                keyid:FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4830:c210::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:44:d1:1d:0e:f5:e5:28:c7:0d:eb:87:ec:ca:74:93:4d:5c:
         f5:82:f4:4c:fb:c9:cd:81:c3:d0:fd:ae:e0:36:63:a8:62:23:
         53:fe:5b:ae:d5:7b:f9:19:c1:3a:6e:bd:8a:fa:51:ae:34:63:
         f5:74:16:d7:c8:c6:c2:f6:c2:96:d9:6a:39:cb:96:78:8d:0f:
         08:06:c9:10:4e:39:18:41:b2:7e:4d:5c:59:4f:e6:9d:dc:a3:
         b1:b0:45:75:32:9a:f8:72:94:de:d1:b4:49:d3:69:7a:00:9e:
         7b:60:ce:8e:3f:17:dc:cf:0f:a6:f7:07:b1:cb:e4:80:b8:af:
         aa:b8:ff:f8:3e:14:f6:5e:75:1c:28:82:48:cb:c6:96:92:d1:
         0e:8c:59:ce:c8:b9:9b:a6:ec:4c:1e:fa:0a:95:98:91:e9:0b:
         40:4c:65:9c:17:ea:1a:4c:cd:54:a6:36:d6:46:18:00:47:9f:
         93:98:2c:a3:0f:3d:ae:d6:eb:fa:af:39:92:5c:55:98:88:63:
         a3:bb:d1:9a:66:89:21:7c:54:72:a4:43:f0:91:2b:1e:c8:a4:
         7c:20:85:6f:9c:05:07:30:9e:4e:c6:b2:a9:5a:43:18:72:83:
         0e:f9:01:ad:d0:4e:b5:dc:f7:be:0e:4f:80:18:f8:58:0d:b6:
         27:4c:75:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:37:51 2024 by rpki-client on console-fra.rpki-client.org