Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cc44dd7-835c-47ac-83c2-d7dd4dde67cd/a6a7ae2a-f570-373a-a89c-d7a5ad2effcf.roa
File:                     a6a7ae2a-f570-373a-a89c-d7a5ad2effcf.roa (raw, json)
Hash identifier:          0ySzG5Y15UUGFhBFOsBLy/JCxpsj1RaTW7EXNhxOC+U=
Subject key identifier:   4F:82:DF:91:CB:0A:64:D5:27:7B:41:A0:F8:DB:A2:77:93:3E:5F:3E
Certificate issuer:       /CN=1cc44dd7-835c-47ac-83c2-d7dd4dde67cd
Certificate serial:       010D0C9F432858471D0B1BF1BAE2E59FA6791128
Authority key identifier: 77:8D:F4:F6:AA:62:B9:3D:05:51:86:69:FE:84:44:A1:99:83:B5:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cc44dd7-835c-47ac-83c2-d7dd4dde67cd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cc44dd7-835c-47ac-83c2-d7dd4dde67cd/a6a7ae2a-f570-373a-a89c-d7a5ad2effcf.roa
Signing time:             Thu 05 Sep 2024 13:00:41 +0000
ROA not before:           Thu 05 Sep 2024 13:00:41 +0000
ROA not after:            Wed 04 Dec 2024 14:00:41 +0000
asID:                     62810
IP address blocks:        2605:ab40::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cc44dd7-835c-47ac-83c2-d7dd4dde67cd/1cc44dd7-835c-47ac-83c2-d7dd4dde67cd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cc44dd7-835c-47ac-83c2-d7dd4dde67cd/1cc44dd7-835c-47ac-83c2-d7dd4dde67cd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cc44dd7-835c-47ac-83c2-d7dd4dde67cd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1d:0b:1b:f1:ba:e2:e5:9f:a6:79:11:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cc44dd7-835c-47ac-83c2-d7dd4dde67cd
        Validity
            Not Before: Sep  5 13:00:41 2024 GMT
            Not After : Dec  4 14:00:41 2024 GMT
        Subject: CN=692c699b-3ef8-4b68-84c9-b8ccb9f0b697
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:92:fb:d2:c2:f5:98:3b:de:c6:83:61:36:84:
                    fc:46:cc:83:5d:15:34:01:cd:68:59:88:ff:ed:f8:
                    52:83:2b:f1:b4:67:6a:35:e0:87:71:9b:5a:bd:62:
                    4b:37:91:0b:96:21:3a:95:d3:a0:6b:13:51:6d:7c:
                    34:a6:78:6f:a5:23:36:60:e6:f0:da:68:82:17:46:
                    a1:c3:1b:20:9b:45:ea:c3:32:39:37:ee:26:23:e1:
                    f3:d0:6f:ab:22:4e:4f:77:61:39:d4:b1:4f:29:3a:
                    21:f6:ae:33:12:2f:ac:ab:0d:e2:ef:32:06:16:3d:
                    b5:ea:85:f0:7f:ac:b2:6a:8d:61:fc:31:5b:7c:27:
                    41:93:1c:1d:dc:fa:a8:13:40:4e:06:e1:f2:51:4f:
                    2e:9a:91:b0:d7:80:15:f3:a4:3c:69:b2:5c:83:76:
                    21:de:f4:26:09:98:c3:41:de:c2:25:2d:ac:d5:2a:
                    d3:20:04:2e:ae:e7:a7:16:c5:3e:7d:4d:e9:7c:74:
                    0d:43:e3:62:e7:7c:fe:ad:47:c4:d3:a1:bb:10:15:
                    d1:69:a0:99:15:02:a1:ff:02:d5:83:05:a5:59:3d:
                    23:6d:3d:b3:5c:d2:e0:70:e3:13:a1:4a:53:97:97:
                    87:73:d5:e8:ce:ab:a9:75:1d:1b:2f:b8:5b:ad:74:
                    9f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:82:DF:91:CB:0A:64:D5:27:7B:41:A0:F8:DB:A2:77:93:3E:5F:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cc44dd7-835c-47ac-83c2-d7dd4dde67cd/a6a7ae2a-f570-373a-a89c-d7a5ad2effcf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cc44dd7-835c-47ac-83c2-d7dd4dde67cd/1cc44dd7-835c-47ac-83c2-d7dd4dde67cd.crl

            X509v3 Authority Key Identifier:
                keyid:77:8D:F4:F6:AA:62:B9:3D:05:51:86:69:FE:84:44:A1:99:83:B5:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cc44dd7-835c-47ac-83c2-d7dd4dde67cd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:ab40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:dd:7e:8f:3b:74:9d:25:24:0e:f6:87:9f:86:33:a1:a7:4e:
         58:ef:bd:55:30:fe:d1:e1:e9:07:d8:df:33:14:ab:69:a2:65:
         7d:70:c2:16:3a:e1:73:15:d1:bb:07:e8:27:57:d4:15:05:b7:
         1a:bf:5e:26:53:08:2a:6f:b8:71:ed:27:85:a4:70:4e:a1:e8:
         af:66:0f:19:3c:d1:3a:97:9d:4b:df:c3:9f:e8:39:cf:c2:e0:
         16:75:a8:97:b6:76:d0:0b:7f:eb:ff:2d:db:7d:41:19:d0:d0:
         12:d4:09:76:9b:4a:c8:b6:f7:29:fa:97:6c:71:33:0c:a6:95:
         f9:c2:5b:8a:5c:96:40:2b:f9:8f:f3:66:92:bc:20:9f:d5:d8:
         7e:ef:1a:15:b9:84:46:ff:dd:e8:15:06:7d:ae:1c:6c:a8:6f:
         94:c3:aa:1a:65:3c:b7:ff:56:06:1d:5a:24:03:80:06:d5:3d:
         71:4c:2b:c8:be:09:e0:42:2c:a6:bd:f0:db:2d:e8:14:52:9e:
         b2:fa:b7:28:89:84:66:16:c2:c4:02:55:43:0c:9a:e2:3b:ab:
         b8:70:e9:19:8d:3e:9f:6e:31:3a:cc:71:7c:db:6b:d0:c4:ce:
         85:b9:85:dc:f3:63:cf:f8:af:c6:ef:c4:0b:40:bb:96:50:66:
         e6:e8:17:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:00 2024 by rpki-client on console-fra.rpki-client.org