Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/2d5e3620-52fd-30cf-9ab4-5a9e9e9a4348.roa
File:                     2d5e3620-52fd-30cf-9ab4-5a9e9e9a4348.roa (raw, json)
Hash identifier:          HwRNIJUG2/sKkzYiDsEP9pdlSSy6Msd0J2W8+gJeKko=
Subject key identifier:   75:6A:C6:B0:14:29:8B:46:39:21:F2:FF:25:3D:B6:28:87:76:79:1B
Certificate issuer:       /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
Certificate serial:       010D0C9F432858477EC10CC57DCD07CE78DE8A40
Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/2d5e3620-52fd-30cf-9ab4-5a9e9e9a4348.roa
Signing time:             Thu 10 Oct 2024 13:00:41 +0000
ROA not before:           Thu 10 Oct 2024 13:00:41 +0000
ROA not after:            Wed 08 Jan 2025 14:00:41 +0000
asID:                     398351
IP address blocks:        2607:f790:fff6::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 02 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7e:c1:0c:c5:7d:cd:07:ce:78:de:8a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
        Validity
            Not Before: Oct 10 13:00:41 2024 GMT
            Not After : Jan  8 14:00:41 2025 GMT
        Subject: CN=7ea40fa9-c111-4ede-a18d-ef97d10ec713
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2b:7c:0f:6c:c9:4f:63:ac:ef:d8:73:08:4d:
                    29:a5:f6:c1:17:bc:26:81:0c:f6:de:5e:c6:a0:56:
                    35:1f:5e:eb:27:fa:ba:16:10:41:d8:42:67:ea:70:
                    7b:6f:89:07:bf:94:ba:fc:87:5d:34:99:84:8d:5b:
                    31:e2:dc:e4:79:06:bc:4d:23:1c:50:6f:d8:d8:97:
                    d1:14:3a:ec:c4:e7:d9:03:32:f4:85:0f:18:da:8d:
                    2b:c6:47:b5:7c:90:f6:a8:9e:43:b0:99:9b:af:90:
                    8b:75:9e:06:75:2d:b6:34:c3:aa:ab:7e:a4:1a:54:
                    d5:81:60:2a:b6:1b:db:c9:71:9f:fc:3f:56:d5:d0:
                    0a:84:73:e8:18:73:42:72:65:84:b8:65:18:4b:89:
                    df:ca:54:6d:fb:45:23:c7:0a:ae:d9:ec:05:ea:f6:
                    29:53:39:b9:b6:98:2e:cc:1a:a7:97:e3:d6:68:f4:
                    f9:ba:6d:66:aa:17:31:10:ec:ef:18:15:1a:3d:c0:
                    ff:2b:22:ea:d8:d5:69:1e:0f:01:fd:b4:46:80:0c:
                    33:04:49:78:6a:25:30:fc:16:aa:3e:90:4a:4d:b9:
                    55:84:c6:76:82:b4:43:29:ac:91:37:44:bf:66:5e:
                    04:ef:c3:0c:5d:90:e5:2b:dd:70:3d:d4:80:02:27:
                    cb:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:6A:C6:B0:14:29:8B:46:39:21:F2:FF:25:3D:B6:28:87:76:79:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/2d5e3620-52fd-30cf-9ab4-5a9e9e9a4348.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl

            X509v3 Authority Key Identifier:
                keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f790:fff6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:b5:8f:55:f0:cd:4d:e4:66:74:e0:c7:a6:d1:2a:c0:2e:cc:
         fe:df:93:41:b1:a1:aa:38:02:7b:55:65:0f:7c:3c:64:a7:77:
         05:df:d7:64:ef:15:b5:a2:7a:89:63:58:24:13:0b:8a:9f:dd:
         e2:78:25:3d:d4:ed:3d:eb:ff:62:85:7e:42:d7:bb:3f:e0:a7:
         76:f6:21:b5:c2:04:e9:48:e3:37:2f:d0:93:b4:92:d0:dd:19:
         6e:8b:99:5f:1d:2d:4d:50:7e:e3:ec:a6:39:a9:03:1e:3d:10:
         45:e6:8d:43:48:15:47:ce:8f:5f:ca:d6:14:8d:81:71:d2:2d:
         49:83:75:59:b0:cd:c8:a6:d9:01:86:74:cd:2b:06:c7:42:d4:
         eb:ac:43:4c:af:8f:19:e5:e3:ee:ba:ee:54:e6:aa:67:1c:de:
         23:c1:99:42:9c:a7:7b:35:78:b5:4e:7e:60:a5:56:7f:2b:40:
         bd:ce:78:c6:4a:17:60:8b:97:96:ec:c6:b9:82:7c:1f:85:3a:
         f8:a5:80:2c:b7:b5:3a:e9:02:d0:27:5a:c2:90:3a:55:18:d0:
         01:59:c0:ab:6e:c5:12:c6:a8:01:52:9d:fb:c9:cd:2e:74:80:
         e0:76:e5:b6:67:e8:ed:46:76:d6:8e:fd:bc:29:73:8f:f0:ce:
         06:c6:d7:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 22:49:32 2024 by rpki-client on console-ams.rpki-client.org