Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/d28f470b-914c-3e8e-b4e1-0740a95123cb.roa
File:                     d28f470b-914c-3e8e-b4e1-0740a95123cb.roa (raw, json)
Hash identifier:          M8482kqlHhItTwZzzwnMuS3kBvNd6xULAqJVOxPhBdU=
Subject key identifier:   BC:38:FC:05:78:EC:85:E6:A4:63:E1:05:EF:69:99:FB:2F:96:79:FA
Certificate issuer:       /CN=55feeaf5-abfd-4f9c-9707-9236ce5397bd
Certificate serial:       010D0C9F43285847E35F67D44CB944B5D32E77C0
Authority key identifier: C9:EF:4B:01:33:02:5C:34:66:53:86:01:A7:05:AC:03:48:05:9A:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/d28f470b-914c-3e8e-b4e1-0740a95123cb.roa
Signing time:             Fri 15 Nov 2024 14:00:39 +0000
ROA not before:           Fri 15 Nov 2024 14:00:39 +0000
ROA not after:            Thu 13 Feb 2025 14:00:39 +0000
asID:                     11272
IP address blocks:        2607:f4a0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/55feeaf5-abfd-4f9c-9707-9236ce5397bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/55feeaf5-abfd-4f9c-9707-9236ce5397bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e3:5f:67:d4:4c:b9:44:b5:d3:2e:77:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55feeaf5-abfd-4f9c-9707-9236ce5397bd
        Validity
            Not Before: Nov 15 14:00:39 2024 GMT
            Not After : Feb 13 14:00:39 2025 GMT
        Subject: CN=b8da4c30-3bbd-49e8-b77b-10d8e9eda54e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:7f:26:75:ea:dc:60:09:55:8f:b4:c9:57:07:
                    df:41:28:a0:15:d9:2b:bf:96:01:49:90:c0:6b:3c:
                    66:67:b8:15:e9:50:a2:91:5c:b6:b2:d4:de:41:83:
                    88:ee:cc:29:8c:05:f6:42:30:e4:68:c7:88:32:0c:
                    5d:b4:05:c9:79:97:0f:fd:31:c8:a0:66:86:ae:3a:
                    33:97:47:d4:62:08:7b:e6:d9:cc:cf:70:aa:7d:a3:
                    fc:a1:7b:78:60:e8:e5:e6:d7:3f:9c:88:b1:7f:e8:
                    9c:17:c5:92:03:18:d8:88:fe:be:19:09:07:3a:b1:
                    a7:f2:56:f2:e7:87:47:fb:ed:a4:54:02:26:8c:92:
                    a3:fe:31:bf:7e:82:d8:99:d8:eb:09:08:54:0e:e6:
                    b0:a5:7f:66:44:73:df:08:fd:32:fb:e3:a0:66:d0:
                    c9:b1:a9:4d:b2:7b:bf:0e:9f:01:81:b0:67:cc:0b:
                    b5:43:5d:87:94:a5:f4:73:1d:53:a7:57:8a:fb:46:
                    aa:94:8a:46:26:7f:61:5e:ab:8a:bb:e3:bf:24:b2:
                    5d:5d:05:7e:0f:a8:ee:bb:62:47:6f:e1:76:86:b9:
                    ef:d9:ff:0a:63:cc:4b:31:76:73:bb:b9:2c:5d:fb:
                    4f:c7:9d:9a:b2:10:ae:5e:5a:c1:8a:d4:34:d3:79:
                    0b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:38:FC:05:78:EC:85:E6:A4:63:E1:05:EF:69:99:FB:2F:96:79:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/d28f470b-914c-3e8e-b4e1-0740a95123cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/55feeaf5-abfd-4f9c-9707-9236ce5397bd.crl

            X509v3 Authority Key Identifier:
                keyid:C9:EF:4B:01:33:02:5C:34:66:53:86:01:A7:05:AC:03:48:05:9A:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f4a0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:d1:2b:44:4d:52:c6:87:0d:d9:35:f7:ab:68:cb:0d:03:c7:
         75:90:24:ab:73:4f:7e:c5:fd:b7:a9:0b:8d:92:6a:2e:5a:30:
         ce:0d:ad:ac:9c:29:1f:f3:92:73:b2:83:99:56:b9:be:c4:ee:
         73:14:e5:22:09:36:96:a3:de:b7:97:d8:de:36:45:f2:fe:4e:
         5c:e8:90:1e:f0:97:cb:e5:50:ff:d3:21:fd:a4:cf:0e:f7:23:
         20:c9:77:f8:ec:50:dd:b7:8e:ac:32:7b:ec:fd:6c:3e:f3:2d:
         a2:41:19:89:24:5a:ca:c9:26:47:06:3a:dc:e4:fe:b7:c0:75:
         01:7c:f9:71:de:5f:40:9d:35:7d:3d:13:ad:33:c0:a8:b8:b8:
         1d:94:c8:8c:22:c6:98:ed:bc:e0:e0:84:e3:f3:29:ab:67:3a:
         91:81:bb:bb:e1:92:b6:f0:33:60:17:6d:71:71:8e:91:f0:2f:
         c5:b7:f0:cf:03:5f:5d:04:54:08:8e:e3:46:e6:a4:ba:b9:59:
         9a:2e:4b:b8:1f:97:9e:17:6e:2e:ad:05:5f:aa:e5:57:49:99:
         46:30:31:d0:9f:f9:b7:82:21:d1:6d:96:5e:13:41:59:df:38:
         13:eb:57:d8:3e:ce:a0:8f:12:ac:05:43:51:26:6a:df:0b:51:
         37:62:8b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:03 2024 by rpki-client on console-fra.rpki-client.org