Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086/e2ae5161-09d3-34bc-bd67-1ebef1216bd4.roa
File:                     e2ae5161-09d3-34bc-bd67-1ebef1216bd4.roa (raw, json)
Hash identifier:          R4Y6c88hoK3UlykGxm/mO43AOn3Y6mxqW3lIxcF3LPU=
Subject key identifier:   9A:34:CD:F8:C4:0C:EB:37:4D:A4:7E:2E:9B:5A:4C:B2:90:A2:4A:F9
Certificate issuer:       /CN=c6bc2da7-5b3b-4ff6-8bc2-59c42c901086
Certificate serial:       010D0C9F43285847F2BA36F9A563DCBE9E6382C0
Authority key identifier: 9D:66:1F:9F:23:E7:C7:B2:21:F2:E8:33:6C:7B:CE:AB:65:97:31:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086/e2ae5161-09d3-34bc-bd67-1ebef1216bd4.roa
Signing time:             Thu 21 Nov 2024 02:00:38 +0000
ROA not before:           Thu 21 Nov 2024 02:00:38 +0000
ROA not after:            Wed 19 Feb 2025 02:00:38 +0000
asID:                     18615
IP address blocks:        2607:1c80::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f2:ba:36:f9:a5:63:dc:be:9e:63:82:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6bc2da7-5b3b-4ff6-8bc2-59c42c901086
        Validity
            Not Before: Nov 21 02:00:38 2024 GMT
            Not After : Feb 19 02:00:38 2025 GMT
        Subject: CN=f1295f93-9bfb-4d3c-8564-8f6e068bdf22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:61:1c:e8:b3:f8:b2:2d:91:8c:f2:53:98:8a:
                    99:24:f6:d8:97:63:35:7b:d9:f6:34:6a:11:fc:96:
                    c6:6d:fc:fa:a3:59:d6:8c:6c:50:c5:17:b1:77:d8:
                    80:5c:fc:a9:83:24:82:f6:a6:8d:c3:15:2f:be:5b:
                    8f:cf:fb:97:4d:e5:2b:df:5e:63:4b:4f:5a:17:17:
                    ab:dc:be:5c:42:c0:78:be:05:b9:27:d5:64:ae:c4:
                    cc:4b:a5:3f:48:b2:94:55:42:49:8c:ad:df:05:32:
                    87:ee:7b:4b:f3:d2:c3:3d:b8:2e:12:cc:96:e8:79:
                    60:2f:09:35:5b:a8:04:6d:f2:42:01:82:ab:26:5c:
                    81:f9:2e:a2:b2:89:76:9f:ca:4c:bf:9b:dc:a8:ab:
                    28:1a:75:aa:36:bf:b5:ec:b8:f5:93:d3:d5:fb:ee:
                    69:5d:a9:03:3a:cd:db:ce:d2:92:85:9c:65:a8:b5:
                    ee:46:d2:49:6c:a9:7c:f5:5f:28:b6:1a:ca:fe:7d:
                    1a:7a:d2:92:04:e1:dc:fb:d5:93:22:05:9c:4d:6b:
                    1f:d1:bd:5f:5e:cd:5e:cc:69:b9:97:ac:43:b7:e3:
                    44:c7:f5:2c:5a:8e:48:19:8b:6a:96:e6:45:41:47:
                    48:db:24:63:0f:97:e8:c0:b7:aa:b6:e7:4d:70:72:
                    8d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:34:CD:F8:C4:0C:EB:37:4D:A4:7E:2E:9B:5A:4C:B2:90:A2:4A:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086/e2ae5161-09d3-34bc-bd67-1ebef1216bd4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086.crl

            X509v3 Authority Key Identifier:
                keyid:9D:66:1F:9F:23:E7:C7:B2:21:F2:E8:33:6C:7B:CE:AB:65:97:31:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:1c80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:d3:5a:f8:e3:18:1f:e0:51:2e:1e:92:ec:d6:0a:0f:bd:74:
         10:00:b9:25:5a:27:2c:35:05:d2:0b:e2:94:a5:4d:58:ca:ea:
         c6:25:0f:81:54:d2:5e:8a:01:44:d2:2e:91:6b:b7:fc:88:ff:
         e3:2f:ca:62:9c:9d:33:1a:dd:d3:22:a7:5e:51:34:37:d6:cf:
         3b:b9:9b:bd:35:e0:74:0c:01:82:93:82:ad:41:3b:49:51:f4:
         58:cf:54:ee:f5:ac:45:35:c9:b5:ba:0c:cf:e8:af:29:ae:c7:
         36:d7:63:65:45:de:9a:c8:8f:2e:93:1a:50:86:e5:a0:b3:fe:
         16:3f:7f:c4:ed:86:cf:25:aa:d8:2c:87:39:05:e6:99:d8:b9:
         90:3d:d8:d1:d7:93:d3:6f:a7:49:5f:53:fc:86:a1:a4:d4:a2:
         b6:ac:a9:8f:ca:82:44:de:dd:c9:fe:ea:28:7c:2e:6e:f8:6e:
         49:31:87:d1:b2:7b:a5:72:08:12:3a:de:27:66:93:9a:fe:f0:
         1a:f2:ae:09:8b:d6:25:31:c0:c6:c8:e6:b7:a4:32:7f:f3:36:
         59:52:7a:dc:56:1c:c2:62:20:cb:e9:5e:90:4c:f9:12:cd:7a:
         9e:86:ce:19:30:24:80:36:b2:bc:cc:0b:32:b4:22:2a:95:7e:
         65:4e:73:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:15 2024 by rpki-client on console-fra.rpki-client.org