Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a2190d0-2edf-4b5e-a6f6-c788ca636585/b9b307c3-dc7b-3371-a0f1-315acde48792.roa
File:                     b9b307c3-dc7b-3371-a0f1-315acde48792.roa (raw, json)
Hash identifier:          2PPz4XK4IJSxqTUWe1ClPlaGMF6KiGAEUVF7w0QDPCg=
Subject key identifier:   FB:24:69:0F:91:52:B4:98:D4:0C:F8:01:6F:F9:2D:66:C5:50:98:84
Certificate issuer:       /CN=2a2190d0-2edf-4b5e-a6f6-c788ca636585
Certificate serial:       010D0C9F4328584774FB91348FC0B84A7C270500
Authority key identifier: 50:09:31:6F:BA:FD:0F:52:FB:AA:67:0B:4C:76:D2:DC:90:EF:32:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a2190d0-2edf-4b5e-a6f6-c788ca636585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a2190d0-2edf-4b5e-a6f6-c788ca636585/b9b307c3-dc7b-3371-a0f1-315acde48792.roa
Signing time:             Mon 07 Oct 2024 01:00:31 +0000
ROA not before:           Mon 07 Oct 2024 01:00:31 +0000
ROA not after:            Sun 05 Jan 2025 02:00:31 +0000
asID:                     1351
IP address blocks:        2620:104:e000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a2190d0-2edf-4b5e-a6f6-c788ca636585/2a2190d0-2edf-4b5e-a6f6-c788ca636585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a2190d0-2edf-4b5e-a6f6-c788ca636585/2a2190d0-2edf-4b5e-a6f6-c788ca636585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a2190d0-2edf-4b5e-a6f6-c788ca636585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:74:fb:91:34:8f:c0:b8:4a:7c:27:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a2190d0-2edf-4b5e-a6f6-c788ca636585
        Validity
            Not Before: Oct  7 01:00:31 2024 GMT
            Not After : Jan  5 02:00:31 2025 GMT
        Subject: CN=6feada0b-a3e3-47f5-b6f5-69928a233599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:78:45:7b:03:ce:4c:7f:93:ad:d6:48:3b:0d:
                    21:4b:7e:68:3e:b2:5b:88:e2:30:89:57:1a:a8:f3:
                    51:b7:6c:d4:cf:fc:a6:80:93:b6:d6:fa:32:0e:da:
                    1e:a3:1e:48:c4:da:af:e0:c6:1a:ee:4d:3e:c3:22:
                    56:b8:61:ae:5e:f4:37:7c:54:43:50:e5:86:d5:70:
                    cd:3e:93:1d:02:aa:5a:9d:16:ef:52:bb:dd:36:da:
                    10:a9:4d:31:b2:6a:89:85:67:35:9d:a6:86:9a:53:
                    e1:7c:3c:a3:17:50:51:43:f6:e7:d4:d6:a5:66:a6:
                    dd:0d:75:da:46:93:88:a9:08:f5:59:f1:56:db:46:
                    d7:b4:7a:b7:b2:39:34:49:dd:4e:83:7e:e3:31:7f:
                    2d:cd:e8:fb:17:82:5e:43:65:b6:9d:55:e1:e2:c1:
                    52:97:a7:fe:b0:ed:b5:13:bc:62:f5:1a:d3:c1:e9:
                    a9:62:00:49:a9:bd:76:25:8f:85:56:9e:70:53:4f:
                    0c:b9:39:f2:f0:82:16:b9:57:63:29:d7:0a:18:ee:
                    23:c5:4a:46:9d:d1:03:86:6c:7b:e0:99:42:07:00:
                    9b:53:9b:b8:9e:f7:a9:9e:4b:c9:50:4b:ef:0f:db:
                    b5:f1:97:5e:4b:72:99:1a:51:84:82:81:30:ea:8c:
                    b4:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:24:69:0F:91:52:B4:98:D4:0C:F8:01:6F:F9:2D:66:C5:50:98:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a2190d0-2edf-4b5e-a6f6-c788ca636585/b9b307c3-dc7b-3371-a0f1-315acde48792.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a2190d0-2edf-4b5e-a6f6-c788ca636585/2a2190d0-2edf-4b5e-a6f6-c788ca636585.crl

            X509v3 Authority Key Identifier:
                keyid:50:09:31:6F:BA:FD:0F:52:FB:AA:67:0B:4C:76:D2:DC:90:EF:32:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a2190d0-2edf-4b5e-a6f6-c788ca636585.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:104:e000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:46:58:cc:14:9a:6b:e7:73:ba:56:25:c8:8e:00:38:9d:93:
         01:4d:13:d9:ef:2a:c3:cc:32:f1:45:82:ed:72:a9:4f:06:89:
         51:2f:23:cf:db:12:87:4c:1a:df:94:b3:92:ae:cb:78:a3:15:
         bc:3b:7c:2a:39:dd:b0:aa:78:36:3f:98:de:b8:8c:54:91:fb:
         38:a8:ea:fd:b2:4a:e3:5a:3a:f4:9e:5c:be:2c:1d:79:43:de:
         48:7b:b7:95:34:78:c1:f1:83:f9:a0:6e:54:3e:a3:5c:60:6c:
         53:c5:fa:38:56:95:7f:a7:39:4b:da:08:19:e6:1a:0b:61:98:
         60:50:e8:33:25:08:82:a9:5c:27:b8:c8:a4:13:74:da:48:ca:
         50:0f:5d:fe:88:b8:0e:f9:9a:cd:88:01:ee:ec:5f:55:e6:01:
         a6:b7:21:5e:d8:42:4d:c7:f6:81:7f:f7:f7:e3:90:a7:79:98:
         bd:38:42:71:2a:6c:cf:a2:31:de:56:73:1e:79:4a:fd:16:27:
         cc:cb:35:61:cd:7b:52:b5:7b:f6:ac:98:7b:81:99:75:e4:3c:
         8e:d8:f5:00:ac:8c:ad:d2:b3:8a:39:a5:cd:92:a2:cc:91:d8:
         fb:4d:e7:52:57:05:0d:2b:ea:36:e2:a9:04:fb:37:be:69:4c:
         39:06:fa:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:00:34 2024 by rpki-client on console-fra.rpki-client.org