Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/bbca6172-f0f1-3299-8cdc-f3d17115c85b.roa
File:                     bbca6172-f0f1-3299-8cdc-f3d17115c85b.roa (raw, json)
Hash identifier:          gHLJNNfj4v8HzZHLF6MG/StZCJqhqI7D+FeIKhwsPOs=
Subject key identifier:   6D:70:5C:25:DF:63:D9:C3:32:81:43:D9:A8:94:BD:40:04:F6:1E:C4
Certificate issuer:       /CN=6a30b207-de04-425f-94e9-ee12d4529f56
Certificate serial:       010D0C9F43285847A5D6AD7D0E3CBFD465822C80
Authority key identifier: 4F:F2:3E:B1:27:37:0C:2A:E1:E4:CE:A1:85:CE:AC:EC:21:4B:75:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/bbca6172-f0f1-3299-8cdc-f3d17115c85b.roa
Signing time:             Thu 24 Oct 2024 13:00:42 +0000
ROA not before:           Thu 24 Oct 2024 13:00:42 +0000
ROA not after:            Wed 22 Jan 2025 14:00:42 +0000
asID:                     22828
IP address blocks:        2607:f220:300::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/6a30b207-de04-425f-94e9-ee12d4529f56.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/6a30b207-de04-425f-94e9-ee12d4529f56.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a5:d6:ad:7d:0e:3c:bf:d4:65:82:2c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a30b207-de04-425f-94e9-ee12d4529f56
        Validity
            Not Before: Oct 24 13:00:42 2024 GMT
            Not After : Jan 22 14:00:42 2025 GMT
        Subject: CN=c781e9e8-33f5-4926-a198-a5800c286f40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f8:c5:ff:2d:0b:b4:b7:ca:45:56:72:35:7a:
                    b1:2e:01:fb:33:22:61:b6:3c:e1:c4:dd:d7:fb:f9:
                    80:0b:33:9e:b3:3a:06:2f:96:b8:1b:17:3d:52:c7:
                    dc:80:20:28:a1:b5:8a:dc:3a:35:b6:7a:20:35:8e:
                    46:20:3d:7e:b4:2f:b0:61:d7:7f:2d:85:43:2d:62:
                    be:58:70:e4:a3:c0:41:78:c6:09:e7:37:86:c9:9c:
                    d9:70:5c:8b:27:72:22:79:83:27:6c:f6:9a:3c:30:
                    25:2d:70:ea:73:dd:ca:64:fe:33:b7:c0:f3:ab:79:
                    ff:b4:27:05:30:5b:a7:8b:a3:88:e9:2c:31:45:d5:
                    6b:f7:ad:5b:87:af:ce:21:d1:cf:ba:52:49:d2:7f:
                    7f:7c:08:c2:96:98:0e:fb:e8:32:04:d2:58:c3:19:
                    6d:93:0a:d8:f3:ea:1b:79:33:de:9f:92:29:a3:fc:
                    97:d9:ed:38:24:27:57:26:d4:ea:71:d9:36:a3:de:
                    df:42:8a:66:1f:c3:df:d4:db:a4:53:69:39:7c:60:
                    17:22:53:f7:8b:6a:30:81:3f:9a:ed:35:d0:3c:ea:
                    2b:df:7e:41:64:44:90:27:6f:54:89:4d:d6:37:54:
                    3e:64:80:c8:3c:70:de:68:5b:4b:10:58:74:4f:71:
                    f1:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:70:5C:25:DF:63:D9:C3:32:81:43:D9:A8:94:BD:40:04:F6:1E:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/bbca6172-f0f1-3299-8cdc-f3d17115c85b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/6a30b207-de04-425f-94e9-ee12d4529f56.crl

            X509v3 Authority Key Identifier:
                keyid:4F:F2:3E:B1:27:37:0C:2A:E1:E4:CE:A1:85:CE:AC:EC:21:4B:75:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f220:300::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:16:7e:8e:d8:ff:6a:3e:22:02:97:24:36:80:10:c3:61:a5:
         a7:1e:38:8f:32:c7:13:57:ba:02:e2:f1:1c:c6:15:a5:de:cc:
         69:99:47:55:de:c4:fe:04:ee:f2:de:4c:8e:1e:de:c1:57:da:
         9d:d7:91:17:7d:fa:bf:ca:30:9c:0d:52:e2:67:e9:7b:83:f2:
         d3:17:f0:ab:20:b9:ae:56:41:e5:70:63:c5:2f:1e:ab:10:d6:
         40:a9:e8:ea:f7:64:75:69:4b:ee:96:04:49:eb:10:c8:d7:4b:
         fe:92:30:59:e9:73:f8:e9:34:1b:1d:b0:b5:34:fa:d7:5a:52:
         9a:21:77:f8:23:dd:b1:a3:23:b4:9d:41:a5:9c:b1:35:df:77:
         59:7d:f6:55:46:16:16:20:26:79:8b:1e:8d:df:64:d6:49:22:
         f5:a0:7d:c0:fa:41:10:a7:1d:c4:a8:bd:64:99:d5:a7:53:b2:
         5f:7b:1e:3d:13:e9:f8:59:d6:7e:5c:6a:82:35:e7:0b:5c:88:
         e1:9a:52:f1:47:00:69:13:99:03:a5:8c:9c:4d:0a:d2:17:fd:
         7b:cf:90:0d:70:4b:b2:da:c8:45:16:f0:c0:55:a5:e3:fa:ac:
         ef:4e:e7:b3:fd:55:2f:44:48:42:33:99:aa:4a:11:bc:e4:d0:
         b6:1b:1e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:05 2024 by rpki-client on console-fra.rpki-client.org