Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0682b49-784e-4da6-8c82-9a4562d0b08c/4df008ac-91b7-379a-aa5f-326dc986cbe8.roa
File:                     4df008ac-91b7-379a-aa5f-326dc986cbe8.roa (raw, json)
Hash identifier:          H5OR9KCQp+F2x5xYIS/uSuhQfZzjlRAhNAXSXGtZpxA=
Subject key identifier:   81:13:50:05:30:42:E7:68:84:78:97:C9:09:E2:A3:DE:FA:2A:BA:84
Certificate issuer:       /CN=f0682b49-784e-4da6-8c82-9a4562d0b08c
Certificate serial:       010D0C9F4328584795168EC3FAEE1015FF013880
Authority key identifier: C3:76:B5:48:78:AD:92:A1:DA:19:D5:D4:9D:0D:28:22:AA:E7:47:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0682b49-784e-4da6-8c82-9a4562d0b08c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0682b49-784e-4da6-8c82-9a4562d0b08c/4df008ac-91b7-379a-aa5f-326dc986cbe8.roa
Signing time:             Fri 18 Oct 2024 13:00:41 +0000
ROA not before:           Fri 18 Oct 2024 13:00:41 +0000
ROA not after:            Thu 16 Jan 2025 14:00:41 +0000
asID:                     19382
IP address blocks:        2620:13c:e001::/48 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0682b49-784e-4da6-8c82-9a4562d0b08c/f0682b49-784e-4da6-8c82-9a4562d0b08c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0682b49-784e-4da6-8c82-9a4562d0b08c/f0682b49-784e-4da6-8c82-9a4562d0b08c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0682b49-784e-4da6-8c82-9a4562d0b08c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:95:16:8e:c3:fa:ee:10:15:ff:01:38:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0682b49-784e-4da6-8c82-9a4562d0b08c
        Validity
            Not Before: Oct 18 13:00:41 2024 GMT
            Not After : Jan 16 14:00:41 2025 GMT
        Subject: CN=2c646112-03c5-47c4-82c6-828ebdb7e32d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ed:32:f2:a7:18:f4:37:15:39:4b:31:a0:18:
                    0a:fb:3c:8b:85:69:dc:b2:70:f5:d8:30:9d:02:13:
                    60:7c:41:72:1a:8c:a0:17:d5:8f:a8:0c:4e:8a:74:
                    e4:47:d5:db:61:89:8e:e2:61:0b:ba:c2:11:de:4b:
                    db:ef:be:f9:0e:8a:c0:b6:49:32:37:26:46:22:89:
                    0b:fb:d5:0d:e4:06:02:bc:3d:f5:9f:52:ee:d0:81:
                    22:7a:e9:ec:5a:ad:92:42:ae:29:fb:9d:2b:28:cb:
                    34:68:1b:bb:72:4c:b4:92:7b:13:a9:26:a8:3f:9a:
                    16:de:3b:6c:d8:98:e4:0a:79:2d:da:9f:68:96:21:
                    3d:9c:79:37:8f:85:f2:fd:98:1e:f9:de:59:92:fb:
                    9f:2a:c2:12:2a:b9:cb:25:b7:de:1d:95:cc:24:7f:
                    aa:b1:04:55:1e:19:6a:50:a6:b1:d3:4f:3c:a3:9a:
                    d9:6d:c0:c4:45:1b:95:1f:e7:ca:87:09:63:92:13:
                    73:59:07:13:2f:d3:f1:d3:9e:07:a7:60:d0:03:53:
                    af:78:4c:15:9d:d7:4b:c1:d4:ce:18:93:5c:05:32:
                    03:e5:a6:82:70:00:ae:d5:d0:b0:3a:88:13:4d:6b:
                    15:c0:0f:1c:a6:de:37:2e:46:c7:cb:57:67:cd:2b:
                    c0:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:13:50:05:30:42:E7:68:84:78:97:C9:09:E2:A3:DE:FA:2A:BA:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0682b49-784e-4da6-8c82-9a4562d0b08c/4df008ac-91b7-379a-aa5f-326dc986cbe8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0682b49-784e-4da6-8c82-9a4562d0b08c/f0682b49-784e-4da6-8c82-9a4562d0b08c.crl

            X509v3 Authority Key Identifier:
                keyid:C3:76:B5:48:78:AD:92:A1:DA:19:D5:D4:9D:0D:28:22:AA:E7:47:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0682b49-784e-4da6-8c82-9a4562d0b08c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:13c:e001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:76:bd:99:7c:1c:48:89:d3:43:6c:80:d0:2b:0e:db:90:60:
         51:f4:6d:82:95:5b:b2:4a:ab:a3:a8:89:2e:91:bf:ac:ab:03:
         4a:5f:f3:45:6a:b9:0f:d4:0e:1c:08:48:bd:20:d3:34:05:e8:
         2b:43:fd:0d:c2:f5:e1:46:7b:85:1b:66:0c:17:10:9a:0f:16:
         93:89:e7:00:b5:67:49:57:9a:82:5b:d5:7b:3d:1a:ef:e2:cc:
         89:2d:a1:b0:31:86:ef:04:5c:b5:c4:d6:c8:b0:4a:e1:3a:bc:
         e0:bf:76:32:b9:20:b3:a7:2e:6f:f2:73:34:0c:de:3b:66:02:
         20:ef:0a:17:09:35:58:e7:13:7f:e5:7b:03:cd:55:61:6c:3c:
         4c:01:88:de:8a:81:31:bf:63:86:87:43:c1:52:da:54:ab:4a:
         b3:e2:f6:6c:f0:c9:f1:84:c8:25:05:8f:da:43:a2:95:e6:6f:
         f0:94:8e:16:55:46:b3:f7:20:7b:66:75:ba:73:9e:a0:92:a7:
         75:6c:4d:2b:2b:09:5f:99:1d:e1:2c:0f:3b:c5:59:c3:6c:9a:
         bb:61:77:0d:c9:1a:a7:82:d8:83:84:b3:61:c7:51:87:5a:57:
         fd:9c:1e:c7:0c:f3:cd:cf:fc:5d:43:06:9e:0e:ce:55:15:bd:
         39:de:4c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:02:41 2024 by rpki-client on console-ams.rpki-client.org