Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/9ed7d48d-0aeb-3d6f-88a0-f5c19df8f380.roa
File:                     9ed7d48d-0aeb-3d6f-88a0-f5c19df8f380.roa (raw, json)
Hash identifier:          OwD76N1H4y4JVXwu535eBC0HhQ88V9wov67w5CmQRDc=
Subject key identifier:   93:AF:35:28:6F:78:19:F8:C7:D3:AB:43:04:E5:A5:B3:B1:A2:D4:76
Certificate issuer:       /CN=4eab7524-ab79-46c8-aea6-96b100eb245d
Certificate serial:       010D0C9F43285847BAC6A6F84ADB6CEAF52010E0
Authority key identifier: 02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/9ed7d48d-0aeb-3d6f-88a0-f5c19df8f380.roa
Signing time:             Fri 01 Nov 2024 01:00:30 +0000
ROA not before:           Fri 01 Nov 2024 01:00:30 +0000
ROA not after:            Thu 30 Jan 2025 02:00:30 +0000
asID:                     400097
IP address blocks:        2606:3d40:14::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ba:c6:a6:f8:4a:db:6c:ea:f5:20:10:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4eab7524-ab79-46c8-aea6-96b100eb245d
        Validity
            Not Before: Nov  1 01:00:30 2024 GMT
            Not After : Jan 30 02:00:30 2025 GMT
        Subject: CN=a01a9abf-ce5f-484c-b87e-08e1e184b5d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:4c:1b:6f:e9:b0:7c:b3:d8:fd:39:e0:9b:46:
                    e3:1d:de:10:10:d4:9c:b1:46:a9:61:b8:b1:aa:5f:
                    86:66:e9:8c:59:e5:71:92:15:db:36:14:b2:b2:18:
                    72:1a:f5:0e:b2:86:46:25:a8:ed:4e:e6:9d:ac:ff:
                    19:c4:b8:e0:8b:14:ac:5f:17:d4:dd:9c:09:f6:66:
                    0e:62:e9:9e:14:27:d4:4f:ab:32:96:f2:f4:16:21:
                    b7:8f:79:80:42:58:db:92:e8:ec:9d:9a:b0:7e:3a:
                    8c:0c:f8:18:90:44:5a:00:9f:61:53:1c:5f:b5:c3:
                    39:f4:bc:b7:d7:6b:04:b0:a0:d9:1a:86:b8:30:a8:
                    13:dd:54:87:d7:74:b4:6e:45:8b:c8:b5:f1:b6:86:
                    a9:e8:c4:fd:36:ab:0d:b9:70:7a:72:75:be:b8:46:
                    a8:b5:9f:b5:98:03:80:50:58:1b:e7:ca:54:93:5d:
                    ef:d1:09:98:29:c7:11:e1:11:ef:fd:fa:04:66:22:
                    81:ec:47:6c:aa:e0:3e:ab:c6:51:8b:7e:8e:6e:3e:
                    46:03:be:04:f2:be:d3:12:ec:de:85:d3:8d:04:17:
                    3a:c7:e1:f6:0c:d7:7f:34:61:be:57:12:c4:0a:3d:
                    cf:67:8b:af:03:8f:4a:b8:86:80:bb:94:b0:7f:b0:
                    ef:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:AF:35:28:6F:78:19:F8:C7:D3:AB:43:04:E5:A5:B3:B1:A2:D4:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/9ed7d48d-0aeb-3d6f-88a0-f5c19df8f380.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl

            X509v3 Authority Key Identifier:
                keyid:02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3d40:14::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:96:3f:32:ec:45:bd:db:48:3f:96:9c:36:e7:24:e2:45:0e:
         f1:74:8c:f1:5b:34:7e:5c:d1:46:c0:7b:35:15:bb:90:b2:e0:
         a1:39:45:87:96:92:33:66:2b:ab:9e:37:4a:c9:2b:2c:7e:5b:
         cb:84:6e:e6:66:ad:08:c0:df:c6:9e:07:bd:74:14:e7:40:b5:
         68:c6:1f:11:0d:49:0f:9f:2d:6b:c6:47:53:62:0c:32:11:d1:
         b7:84:1f:b9:48:3d:2d:ab:09:7c:ee:42:b9:04:21:58:62:c1:
         ee:85:5a:ac:d0:a2:4b:ef:9d:30:5e:ef:95:d8:f2:f7:de:99:
         f1:b3:6c:93:de:57:cc:0b:6d:53:dd:a4:0c:22:a0:56:98:5d:
         3b:8e:1c:49:f1:27:36:f8:9d:c8:93:1f:c0:c5:45:44:c1:e6:
         3a:6d:7d:06:51:73:27:cf:a2:bf:0e:cf:ef:6f:28:9b:d2:a0:
         d7:54:fe:76:4e:aa:a2:a3:4d:12:dd:4a:68:ae:f0:3d:46:35:
         4d:e3:37:fc:6a:ef:c0:e7:05:31:b2:55:0a:13:f5:5c:33:1b:
         6c:c0:c7:37:17:ab:58:2c:92:2f:75:bd:e3:b2:ee:52:ec:e0:
         42:59:5e:4c:bf:d0:de:2d:57:04:12:c8:a5:e8:cc:94:fc:16:
         5a:18:4e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:02 2024 by rpki-client on console-fra.rpki-client.org