Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/c843aaab-85c5-30c7-9477-d534aad80663.roa
File:                     c843aaab-85c5-30c7-9477-d534aad80663.roa (raw, json)
Hash identifier:          wFnjjY9VBgjOT+r+J4zazn7+CvIZ1bQHn4admkNEkvI=
Subject key identifier:   14:88:EE:74:A2:94:A8:6E:92:9C:16:42:58:8D:A4:66:A2:34:76:42
Certificate issuer:       /CN=9c69b321-69bc-41c4-a6e1-3491dbfc2544
Certificate serial:       010D0C9F432858478CB689A58AB379A20A803220
Authority key identifier: 1E:39:9B:D6:55:34:98:11:7A:EF:34:5A:1F:EF:2F:27:0A:BD:29:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/c843aaab-85c5-30c7-9477-d534aad80663.roa
Signing time:             Tue 15 Oct 2024 13:00:47 +0000
ROA not before:           Tue 15 Oct 2024 13:00:47 +0000
ROA not after:            Mon 13 Jan 2025 14:00:47 +0000
asID:                     23470
IP address blocks:        2605:9880:200::/42 maxlen: 42
                          2605:9880:300::/42 maxlen: 42
                          2605:9880:400::/42 maxlen: 42

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8c:b6:89:a5:8a:b3:79:a2:0a:80:32:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c69b321-69bc-41c4-a6e1-3491dbfc2544
        Validity
            Not Before: Oct 15 13:00:47 2024 GMT
            Not After : Jan 13 14:00:47 2025 GMT
        Subject: CN=009b6bf9-0da9-496f-b2e2-66ad2f6a386d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c7:f2:7f:cc:d9:a1:ad:24:a2:aa:48:44:d9:
                    3a:04:30:ab:58:53:d6:e0:df:77:a3:5e:60:a9:c7:
                    67:a4:9f:1a:84:2e:ab:2e:e3:3b:5f:00:47:c9:fe:
                    49:3b:c9:dc:4e:c1:44:a9:66:d6:39:c5:9d:ca:7d:
                    f5:91:10:eb:d3:74:27:9c:5a:a5:4a:ef:8a:2c:b0:
                    92:78:26:50:69:39:51:df:c5:af:b6:85:55:72:81:
                    ae:55:42:58:a4:20:04:de:10:f1:64:2a:59:8f:42:
                    d4:9e:f6:8c:ca:51:7e:9c:0b:aa:8d:72:78:60:7f:
                    73:26:de:98:9f:99:0e:ca:66:29:e3:a2:f6:84:f2:
                    d3:ac:c5:74:25:2a:3b:72:96:2d:38:20:dc:4a:3b:
                    fd:34:1c:25:f1:63:6f:a8:29:94:7d:e2:63:81:d9:
                    a0:ac:ab:70:74:b0:f7:ad:b3:58:e8:a9:c4:d4:cf:
                    fb:4a:91:46:6d:27:65:df:16:3b:4c:de:a9:62:45:
                    80:77:a3:f4:e8:5a:fb:68:d0:40:d2:98:62:f4:b6:
                    60:6b:41:08:5c:4d:53:4f:dc:18:a4:ba:fc:41:ba:
                    2b:ff:83:5c:a5:e8:16:c9:32:2f:11:15:3c:4f:a0:
                    27:9e:d0:2d:df:2b:e8:c7:46:04:a3:d1:3f:ce:b5:
                    48:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:88:EE:74:A2:94:A8:6E:92:9C:16:42:58:8D:A4:66:A2:34:76:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/c843aaab-85c5-30c7-9477-d534aad80663.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.crl

            X509v3 Authority Key Identifier:
                keyid:1E:39:9B:D6:55:34:98:11:7A:EF:34:5A:1F:EF:2F:27:0A:BD:29:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9880:200::/42
                  2605:9880:300::/42
                  2605:9880:400::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:02:76:a3:23:ca:9e:b2:49:50:31:aa:8b:b3:c0:4b:f1:40:
         b6:87:f0:fc:41:c7:6b:69:a6:23:94:1d:9e:ea:d6:59:d2:77:
         63:9e:cc:29:f6:c4:88:a2:de:b8:68:b1:8c:1e:50:6b:b0:60:
         19:ba:cc:04:bc:41:30:f2:e0:d2:de:6d:ea:d2:91:fd:47:d7:
         b8:67:55:86:ff:b5:6a:02:23:09:bf:ae:c6:be:25:de:75:3c:
         9e:43:10:b9:b2:4a:78:21:0f:6d:ae:7f:32:76:83:b5:18:a0:
         81:9b:d2:d3:60:3b:ee:27:de:ae:c8:33:c7:41:f4:92:cc:e1:
         63:7a:80:24:dc:d3:85:a4:24:33:69:eb:01:e9:f8:f7:1f:c9:
         ee:1a:9f:67:c8:fe:df:0e:6e:49:45:f0:cc:e8:e1:5a:05:f3:
         3e:19:76:1d:9b:6a:56:6b:cb:ed:37:97:a1:ef:48:ad:fd:fc:
         11:f5:e6:ab:70:b7:5f:65:4a:0d:62:2a:18:11:cb:70:86:13:
         04:61:39:ff:56:c6:15:32:94:50:b3:42:16:75:0b:91:d5:e0:
         1c:26:3b:64:bd:0f:29:14:a8:08:54:95:98:d6:e8:2f:17:53:
         bb:12:bf:29:c1:64:89:65:e5:31:24:f0:df:ef:2e:f4:0e:5f:
         20:db:44:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:05:40 2024 by rpki-client on console-fra.rpki-client.org