Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/9d1e2949-725d-30e4-9f53-38bd0e6b7df0.roa
File:                     9d1e2949-725d-30e4-9f53-38bd0e6b7df0.roa (raw, json)
Hash identifier:          65yjzlDGWIB0D94S5sj7LjKpfvEa584FNySLlxYfaVE=
Subject key identifier:   AB:BC:A8:0A:2C:9C:B3:27:1F:35:01:2A:3B:49:BE:A8:0A:45:88:10
Certificate issuer:       /CN=78a3d836-1df8-4303-a944-17cd53d7d04e
Certificate serial:       010D0C9F432858477D5B9BF12871E288436FFB80
Authority key identifier: 89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/9d1e2949-725d-30e4-9f53-38bd0e6b7df0.roa
Signing time:             Thu 10 Oct 2024 01:00:33 +0000
ROA not before:           Thu 10 Oct 2024 01:00:33 +0000
ROA not after:            Wed 08 Jan 2025 02:00:33 +0000
asID:                     0
IP address blocks:        2601:a001::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7d:5b:9b:f1:28:71:e2:88:43:6f:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78a3d836-1df8-4303-a944-17cd53d7d04e
        Validity
            Not Before: Oct 10 01:00:33 2024 GMT
            Not After : Jan  8 02:00:33 2025 GMT
        Subject: CN=8e23105c-5318-4dbe-9956-52f44680b02a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:07:8f:f7:d3:fb:b6:fb:b6:c1:c9:3f:cf:1c:
                    2f:ae:05:03:04:54:c0:c9:4a:e9:3b:bf:3c:18:61:
                    e1:a5:bd:fd:fd:84:3d:ec:2d:ca:6f:50:fb:ca:98:
                    5e:c5:07:1c:70:e7:03:01:b3:8e:bd:6b:9c:17:e8:
                    e3:50:fa:4d:2c:5d:bb:b1:fc:2f:6c:3a:f9:8d:e6:
                    d9:83:5e:e7:7c:f1:d3:d3:f4:11:f4:6e:99:21:d9:
                    39:8f:7e:20:20:fd:48:8f:c1:9f:78:c4:09:eb:42:
                    0f:7a:07:6e:78:e2:97:2b:a0:7e:99:30:7e:e2:4f:
                    da:2e:8e:b9:b6:b7:1b:ff:92:9b:94:6f:88:65:4b:
                    f3:9b:cc:26:a4:c1:77:60:e1:6f:31:b0:4e:29:5a:
                    17:18:ae:16:22:d2:42:08:f7:0c:72:e2:42:4f:c4:
                    26:bf:41:c7:3b:c7:fd:3b:f1:d8:4a:36:9c:c7:7b:
                    98:a3:34:10:94:01:13:08:09:29:f0:2d:dd:da:32:
                    bc:c1:fa:dc:3f:3c:c2:af:d5:b5:75:d5:d4:5c:d9:
                    f6:0d:98:fa:16:67:fd:a8:03:b7:40:6a:68:f8:12:
                    16:60:c7:c1:86:b6:74:f9:f1:f9:65:85:58:3b:4d:
                    09:07:8d:8b:7f:ee:d0:5f:3c:5d:77:02:cf:9c:d9:
                    76:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:BC:A8:0A:2C:9C:B3:27:1F:35:01:2A:3B:49:BE:A8:0A:45:88:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/9d1e2949-725d-30e4-9f53-38bd0e6b7df0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl

            X509v3 Authority Key Identifier:
                keyid:89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:a001::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:1b:b2:68:d6:d8:70:a1:d2:ab:8a:cf:60:43:8a:17:16:b3:
         05:e2:47:48:38:67:60:e4:7e:b2:12:1c:b4:8f:24:69:d1:a4:
         92:de:28:ef:62:af:05:8d:d8:0e:ab:73:2b:99:e9:82:91:a5:
         c5:f5:96:51:7d:22:e0:c7:1d:db:fe:6c:cc:91:1e:ba:ff:0b:
         52:04:74:0a:cc:d1:a9:f3:0a:42:d2:de:e4:9f:6b:2c:10:75:
         7d:a6:e3:d8:e6:41:b6:67:45:8d:8a:c6:3c:88:b2:52:57:90:
         c3:4d:67:5d:63:96:d0:09:ef:46:7f:14:27:70:21:18:8f:bc:
         13:69:ea:17:ea:5b:8f:a7:3e:a0:37:c9:07:a8:5c:52:a0:c5:
         7d:34:e9:ce:a8:df:a8:d6:3f:b3:f2:8e:7a:44:5d:d2:e2:5f:
         4b:b4:4c:59:c7:3f:ef:9b:76:92:a5:5c:12:99:cd:0c:4d:d4:
         7e:4a:4d:dc:ca:3d:df:49:1c:c4:b2:ca:fc:22:15:39:92:64:
         56:a4:be:c4:c9:d6:e8:55:5b:3b:59:86:8e:fb:17:de:93:e9:
         2d:ad:31:4f:e7:0c:53:9b:ba:7f:14:cc:5d:53:d7:a3:7e:03:
         cd:76:b9:9c:87:5d:65:d7:9f:04:52:13:26:c4:18:38:9d:b4:
         b1:e1:94:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:36 2024 by rpki-client on console-fra.rpki-client.org