Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/17e3ed9a-62b9-3885-ade8-7b977c4d47f8.roa
File:                     17e3ed9a-62b9-3885-ade8-7b977c4d47f8.roa (raw, json)
Hash identifier:          PYnzmQHgowj7b8Xi8t7agGkp1sxe+/vKGXdQPM7C8FQ=
Subject key identifier:   FE:9D:7E:92:AD:32:DB:B2:23:F8:53:C6:17:44:8D:19:A5:D4:7D:D1
Certificate issuer:       /CN=65506c68-611f-46ed-9e78-36da39f8ee7d
Certificate serial:       010D0C9F43285847B3CC080F19EE26D5B4F3E900
Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/17e3ed9a-62b9-3885-ade8-7b977c4d47f8.roa
Signing time:             Tue 29 Oct 2024 13:00:40 +0000
ROA not before:           Tue 29 Oct 2024 13:00:40 +0000
ROA not after:            Mon 27 Jan 2025 14:00:40 +0000
asID:                     5769
IP address blocks:        2607:fa4f::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b3:cc:08:0f:19:ee:26:d5:b4:f3:e9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d
        Validity
            Not Before: Oct 29 13:00:40 2024 GMT
            Not After : Jan 27 14:00:40 2025 GMT
        Subject: CN=ab463739-2ad9-41e6-9c01-8d495ee33d71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:19:e7:8c:f1:f2:85:f3:4e:e3:ad:2e:52:6e:
                    70:7d:fe:92:3a:17:03:2d:e2:fd:51:82:ea:1d:e3:
                    86:01:09:c6:a8:46:c1:5e:b8:1a:ed:65:06:71:89:
                    b4:58:b8:b9:7f:73:4a:3b:32:e4:b5:1f:f3:cc:ac:
                    c0:8d:37:0b:b0:0f:3f:66:f0:0c:26:37:2c:ae:f2:
                    28:45:35:05:07:50:5b:99:fb:1e:4b:74:b9:08:98:
                    95:d7:c5:34:b0:47:40:24:89:55:ce:99:eb:fd:5d:
                    5e:38:fe:d9:a8:36:9b:80:91:ef:56:27:b6:e8:91:
                    e8:c8:64:e0:da:ab:8d:43:8b:93:41:e8:e2:fc:fe:
                    97:fb:c4:65:24:d0:dd:63:d7:d9:5c:95:ba:fd:98:
                    18:a5:57:22:73:a6:4b:2b:15:3f:b6:c1:a7:e3:76:
                    d5:a0:25:ae:8b:c0:9e:c8:f9:1e:6f:da:c0:ed:8b:
                    a2:68:cc:03:51:f3:cd:45:2e:e3:42:bc:88:7d:ca:
                    d1:77:9d:4f:86:a0:ba:5a:41:e0:b0:1f:9c:fb:e6:
                    33:a6:37:6d:16:66:5d:a2:79:5a:d0:ae:dc:f8:22:
                    ba:6c:a4:54:eb:aa:98:6d:1a:20:3c:6d:47:f6:63:
                    bb:1b:37:c5:e2:9d:f9:56:26:78:28:d0:29:ed:7d:
                    b0:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:9D:7E:92:AD:32:DB:B2:23:F8:53:C6:17:44:8D:19:A5:D4:7D:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/17e3ed9a-62b9-3885-ade8-7b977c4d47f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl

            X509v3 Authority Key Identifier:
                keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fa4f::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:29:ab:8d:84:96:45:b2:03:14:45:ea:8e:64:96:3f:e3:33:
         b2:f4:58:ad:58:d1:44:14:99:16:2c:8c:14:1a:b7:8d:4e:df:
         e3:4c:a2:d2:f9:d9:69:a8:c6:2b:3f:e6:82:8d:a9:74:b6:2a:
         37:dd:e4:e0:18:ad:4d:4c:c8:f2:93:64:02:ef:a3:ca:7c:da:
         81:e4:a6:63:24:d1:4a:cf:ff:18:5f:5e:2b:bc:dc:69:99:5e:
         61:bd:82:1d:22:06:a4:9e:52:57:bc:e2:84:57:4d:3e:e7:04:
         03:cf:89:c2:ad:67:57:32:6e:28:6a:44:1f:78:11:c8:72:4c:
         da:b4:38:f8:47:31:96:a3:92:4d:ee:c6:d3:83:ad:0b:17:a8:
         8b:82:fc:a2:61:9a:53:b6:44:4b:aa:9c:9e:47:7f:07:29:ac:
         77:1f:59:0a:83:02:e1:b5:db:9e:b8:70:7f:da:1c:6e:38:84:
         43:56:98:71:eb:e7:1c:94:bf:9c:d9:4d:c9:ac:a6:e8:28:b6:
         a1:67:20:aa:27:0c:87:23:b5:81:96:f3:f1:76:50:f7:68:1e:
         28:b2:79:5a:69:c5:73:5a:53:05:36:9f:60:10:72:01:d0:05:
         a6:4f:99:c1:e3:72:3f:97:e1:46:60:98:8f:fe:64:fb:a3:31:
         5b:26:ca:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:36:09 2024 by rpki-client on console-ams.rpki-client.org