Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/f1f8f45b-2bec-3b68-9355-111fcc083852.roa
File:                     f1f8f45b-2bec-3b68-9355-111fcc083852.roa (raw, json)
Hash identifier:          9siqmdH1R5dvOPRr5iEfEXOv3B/3ZbBk9G2a/bl6f+s=
Subject key identifier:   D2:EA:D7:A0:13:96:9A:14:86:1A:FF:35:3B:5E:C7:2E:7C:92:B1:9A
Certificate issuer:       /CN=ef710622-7ec4-4bb2-9e87-27c5e5964fae
Certificate serial:       010D0C9F43285847818BC36EDDFC9CD9685D5800
Authority key identifier: 8B:4A:0E:7A:84:48:3D:14:18:BD:AC:31:07:96:0F:68:2A:61:ED:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/f1f8f45b-2bec-3b68-9355-111fcc083852.roa
Signing time:             Fri 11 Oct 2024 13:00:41 +0000
ROA not before:           Fri 11 Oct 2024 13:00:41 +0000
ROA not after:            Thu 09 Jan 2025 14:00:41 +0000
asID:                     54641
IP address blocks:        2605:f400:2::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:81:8b:c3:6e:dd:fc:9c:d9:68:5d:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef710622-7ec4-4bb2-9e87-27c5e5964fae
        Validity
            Not Before: Oct 11 13:00:41 2024 GMT
            Not After : Jan  9 14:00:41 2025 GMT
        Subject: CN=0d742e7c-a43f-41d4-9867-486992a7269e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:08:41:5c:7d:e7:2e:54:fa:f5:63:dd:02:7d:
                    bb:7a:fd:16:d0:d3:ba:ba:ff:7a:ff:d5:42:52:27:
                    6c:9f:77:fc:5a:b3:6a:ed:18:f6:52:58:5e:58:48:
                    6c:de:9f:32:65:b1:3c:0a:c8:4e:fd:f9:96:8b:a0:
                    d8:98:ff:26:e4:36:02:30:f1:08:53:27:ff:28:a5:
                    2c:41:98:45:32:40:45:06:8f:ed:2a:56:27:7c:e3:
                    9e:68:ce:2b:15:6e:06:18:fc:75:90:95:24:f7:c2:
                    be:6a:f4:cb:72:d0:2d:b1:d3:b8:9f:92:68:2a:64:
                    90:c5:05:29:59:13:85:5f:18:9a:fb:d7:e0:7a:09:
                    5f:04:66:d7:d0:44:d2:48:f9:42:45:99:e0:6d:ef:
                    79:32:f7:18:ae:35:ad:c8:2d:f6:5d:71:cc:97:b3:
                    6e:f0:4f:6c:97:69:a4:7f:44:cd:e8:75:94:ed:69:
                    00:0c:cf:9a:68:ae:cf:d9:24:92:d8:87:f8:65:1d:
                    1e:44:66:2c:f6:14:84:7f:14:4f:a3:9d:4b:1d:59:
                    01:d4:9a:5f:e7:85:f7:d7:b8:93:3e:02:cb:fc:b8:
                    8c:86:fa:7f:ea:e8:bf:ce:33:2d:31:64:2b:14:88:
                    e7:eb:54:5c:78:e7:3f:f6:f8:bf:00:29:bb:92:d5:
                    6e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:EA:D7:A0:13:96:9A:14:86:1A:FF:35:3B:5E:C7:2E:7C:92:B1:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/f1f8f45b-2bec-3b68-9355-111fcc083852.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.crl

            X509v3 Authority Key Identifier:
                keyid:8B:4A:0E:7A:84:48:3D:14:18:BD:AC:31:07:96:0F:68:2A:61:ED:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:f400:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:3e:8b:4a:48:b3:07:af:8c:6f:82:30:ba:d8:7c:79:27:a9:
         32:76:31:72:3a:6a:ba:ce:99:7c:28:6e:f4:96:54:b1:33:61:
         af:d6:e5:6a:a7:20:0c:d7:42:27:ba:f4:07:02:95:29:fa:95:
         2c:48:f7:38:bc:87:12:e4:e9:26:41:39:6d:4f:b1:1b:9e:e4:
         2d:6b:ca:7a:8c:94:45:7c:75:72:61:56:91:64:8d:9a:9d:26:
         d2:04:3e:eb:24:b3:b9:ec:56:c5:b7:a5:c6:52:56:e0:d3:50:
         59:9f:d3:1e:0d:bc:15:ce:fc:4f:c8:29:ed:fa:18:f9:b0:fc:
         db:37:2c:6d:ac:2a:e2:ea:65:9f:ee:b7:30:69:b5:85:2e:a7:
         c5:d2:4a:a6:58:c3:4a:12:fe:90:f8:ca:88:e3:c0:da:d8:90:
         f5:74:74:45:7f:74:4d:e9:a8:0b:f9:59:d8:8b:36:7b:2d:53:
         0c:69:76:29:1b:04:72:35:d8:1b:df:02:40:4f:69:8d:1e:a3:
         79:c3:22:6b:b5:99:aa:70:86:40:55:c5:e7:18:5f:1b:1a:be:
         d0:4a:0c:35:63:13:21:be:e8:7b:6a:36:d5:84:2d:04:4d:eb:
         d4:64:01:a9:d9:06:6a:da:a6:8d:cb:ba:44:7a:0a:ef:6f:84:
         69:33:ed:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:41:43 2024 by rpki-client on console-ams.rpki-client.org