Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/07f3f16d-c969-315e-823b-5a327ca3860d.roa
File:                     07f3f16d-c969-315e-823b-5a327ca3860d.roa (raw, json)
Hash identifier:          O5CzQZEfIfxfvk20VHXW0cWgGnr7/Q5HvAhZKU/G20A=
Subject key identifier:   82:BE:37:4F:7D:CB:49:25:B5:A3:85:3E:6E:6A:AF:02:31:1A:8D:43
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B126A648BCD61C7CF102700
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/07f3f16d-c969-315e-823b-5a327ca3860d.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     7122
IP address blocks:        2607:ca00:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:12:6a:64:8b:cd:61:c7:cf:10:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=92281429-5ea9-4a64-8d26-79078adc5a4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:19:42:ac:a4:2a:e1:06:a9:49:89:e9:b5:24:
                    6f:88:0f:74:af:2e:a0:ea:10:f0:64:1d:f6:57:5a:
                    1c:e2:a8:80:04:3e:7b:1e:0a:c4:40:65:31:27:66:
                    ff:20:d5:b3:ac:b6:65:d1:e4:2d:03:b2:12:f0:71:
                    e1:47:24:6f:c6:1b:06:58:7c:37:90:45:6a:14:8c:
                    5c:f2:a9:de:79:fd:54:c3:08:eb:92:db:ba:a3:f5:
                    ad:99:5b:e8:31:70:89:b7:cf:fd:7f:dd:2b:5b:fc:
                    bb:e3:94:e6:50:58:5c:df:77:60:c6:8f:01:94:f4:
                    3f:68:99:ca:c8:98:6c:24:f1:4c:5a:10:41:dd:3e:
                    a0:59:de:b2:30:ca:34:68:e2:93:97:1e:8e:07:eb:
                    48:2c:0b:42:c3:60:fa:5c:49:ec:12:b2:92:41:88:
                    38:d9:6d:5c:8a:c8:02:ae:ac:bf:75:ae:62:7e:51:
                    2d:e0:3e:6b:8d:0c:23:01:17:4f:3b:d4:17:32:db:
                    65:e9:87:21:ea:ab:c4:4f:a4:8c:79:45:d1:81:b7:
                    1e:36:1d:ac:ad:38:01:4c:c6:24:2a:8e:3d:91:7c:
                    14:1a:17:bb:4c:9a:89:33:39:c8:78:01:0d:42:b1:
                    c6:fa:bd:b1:10:d9:15:bb:26:55:1b:16:c1:d0:6d:
                    bc:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:BE:37:4F:7D:CB:49:25:B5:A3:85:3E:6E:6A:AF:02:31:1A:8D:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/07f3f16d-c969-315e-823b-5a327ca3860d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:ca00:8000::/33

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:5b:3d:c4:98:2a:14:7b:1d:82:66:00:ac:4c:85:3f:ec:b6:
         58:8d:bf:a3:09:cc:08:eb:97:08:93:b2:ea:02:73:eb:52:c1:
         8c:47:84:ea:77:5c:9a:05:ed:20:5f:38:d3:0a:ab:7a:06:20:
         56:32:69:c3:b5:9c:0a:93:3a:f4:a3:08:6a:10:b6:d6:e0:37:
         1e:b1:55:93:5e:04:f2:35:b1:bf:8a:7e:a5:b3:0e:b8:87:4e:
         0f:55:ec:6d:ea:04:58:16:57:8d:89:5c:e4:dc:2d:c3:49:3d:
         49:e4:3d:72:8d:e9:7e:8c:f0:8a:2a:76:c2:79:b9:2f:a5:0e:
         2c:d4:2f:d9:1a:dc:fd:a5:d6:97:45:88:98:86:8f:0a:c7:19:
         3a:63:ef:91:6d:ef:72:07:d4:78:0f:54:4d:9f:e4:fd:df:95:
         7d:59:a0:92:cc:ca:49:0c:da:9f:4d:b8:3b:df:9a:d1:3d:40:
         d9:f5:eb:85:8a:3f:96:61:24:e4:7b:e7:76:31:df:e6:cb:78:
         f0:b4:48:30:f0:28:7c:3f:42:13:0e:3c:4e:f2:6b:74:7c:21:
         09:41:d4:be:b1:0e:47:15:ad:ff:51:73:dc:b2:33:c7:6e:4f:
         3d:06:c9:e6:24:46:a4:e6:ae:73:49:8a:4d:bc:65:05:eb:99:
         37:fa:c3:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:09 2024 by rpki-client on console-ams.rpki-client.org