Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/5d009bc0-f95f-3fc9-9179-4427d37e9302.roa
File:                     5d009bc0-f95f-3fc9-9179-4427d37e9302.roa (raw, json)
Hash identifier:          IspAgIWxodAynyzH0gD5YRJrWMj57Zx1OW5/NuYO+n0=
Subject key identifier:   17:F3:9B:39:7C:FF:45:3A:29:52:15:D5:03:CF:41:87:C8:2E:C0:1C
Certificate issuer:       /CN=e347687c-d80d-46e2-b30e-10ae68d8e1ee
Certificate serial:       010D0C9F43285847792BADE83BFA4038226D28A0
Authority key identifier: 71:A2:33:D4:28:7E:31:F5:37:E1:22:FA:52:79:C2:EB:06:25:D5:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/5d009bc0-f95f-3fc9-9179-4427d37e9302.roa
Signing time:             Tue 08 Oct 2024 13:00:40 +0000
ROA not before:           Tue 08 Oct 2024 13:00:40 +0000
ROA not after:            Mon 06 Jan 2025 14:00:40 +0000
asID:                     14618
IP address blocks:        2602:80f:9000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/e347687c-d80d-46e2-b30e-10ae68d8e1ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/e347687c-d80d-46e2-b30e-10ae68d8e1ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:79:2b:ad:e8:3b:fa:40:38:22:6d:28:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e347687c-d80d-46e2-b30e-10ae68d8e1ee
        Validity
            Not Before: Oct  8 13:00:40 2024 GMT
            Not After : Jan  6 14:00:40 2025 GMT
        Subject: CN=1bf2c9e3-4429-4439-acde-a87a3761be7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:33:d8:4a:d5:dc:d1:fd:f9:b4:b8:f1:06:c3:
                    79:c7:fc:b6:74:72:c6:72:47:d8:67:18:7d:ec:b2:
                    df:03:61:0b:04:f7:5d:ef:ae:6f:d5:fe:5d:30:6e:
                    cd:7b:ae:3f:aa:cd:fd:26:9a:9c:22:10:cf:48:48:
                    5a:06:39:05:74:84:22:02:cc:84:dd:87:ce:d6:c3:
                    e7:07:ec:fe:c5:65:49:fb:51:37:ec:7d:4a:1e:f9:
                    82:5b:c0:47:f4:6b:2c:05:6f:63:d3:e9:ab:b8:87:
                    6c:82:25:d6:ab:42:37:b8:7a:0f:5c:f1:2d:64:82:
                    92:3c:1c:87:2f:b1:8b:7d:fe:1c:39:13:7e:1e:f1:
                    ab:90:84:96:83:4a:7c:bf:1e:09:88:88:d5:25:f9:
                    b5:67:cd:f7:0c:59:77:8b:fc:62:39:05:f9:c1:de:
                    65:7c:32:9a:b0:b0:43:6e:95:6c:de:1e:7e:08:01:
                    a2:fa:45:ba:a1:72:34:c6:9a:ee:dd:f8:ec:c5:de:
                    d8:76:7d:3e:54:45:0e:4c:c3:a3:a1:8d:24:a6:b5:
                    12:72:bb:88:ee:7d:7f:cc:b7:5f:7a:9b:76:2d:ce:
                    0d:f6:30:b2:6e:fa:b1:99:c8:ac:75:60:61:93:6c:
                    95:1b:fe:e1:3a:e0:6d:5b:c2:ba:a4:0e:07:1a:8e:
                    db:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:F3:9B:39:7C:FF:45:3A:29:52:15:D5:03:CF:41:87:C8:2E:C0:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/5d009bc0-f95f-3fc9-9179-4427d37e9302.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/e347687c-d80d-46e2-b30e-10ae68d8e1ee.crl

            X509v3 Authority Key Identifier:
                keyid:71:A2:33:D4:28:7E:31:F5:37:E1:22:FA:52:79:C2:EB:06:25:D5:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80f:9000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:60:c6:7f:0f:17:d9:a9:4d:56:0d:fc:c7:ef:0f:01:22:27:
         74:63:1c:b2:98:05:35:45:ba:01:52:6d:76:b9:59:e4:f3:e0:
         b1:a4:21:d5:d7:5a:f1:db:91:28:be:10:96:37:25:fb:53:88:
         5c:41:0e:59:ce:9d:b8:24:e0:ef:23:87:1e:fb:0f:f1:5c:c6:
         67:9d:cf:1f:92:2c:b7:c5:47:ba:b9:44:7a:90:cb:6f:99:78:
         92:17:13:a8:91:a5:70:b4:e7:90:ea:4c:d5:7a:6a:7f:b0:2e:
         7c:d2:e6:6f:06:c3:2c:8f:db:b3:57:42:f6:06:cd:10:56:0e:
         21:15:c7:58:9c:18:81:c8:48:c6:ab:bd:df:97:e5:99:29:a1:
         bf:22:0d:4c:38:bc:0c:80:16:76:dc:a7:a0:5e:b0:7c:24:e8:
         a2:db:23:ec:a7:50:c7:c3:4f:b9:02:25:b7:0c:f4:59:66:5c:
         30:17:6e:e5:80:89:b9:27:87:a7:52:1e:09:c6:e1:8e:7b:8d:
         9d:ad:56:0c:77:ce:ec:6a:b3:b2:ce:95:7a:09:62:b0:1f:86:
         2e:15:ff:af:0a:d1:10:ca:42:6f:92:25:63:1d:d9:76:bb:24:
         17:53:7b:4a:90:62:ad:66:17:d7:bb:67:ae:65:02:26:4c:54:
         7a:52:8b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 01:16:29 2024 by rpki-client on console-fra.rpki-client.org