Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/91d52f3f-e91f-3c81-b4d3-214bc9fb0605.roa
File:                     91d52f3f-e91f-3c81-b4d3-214bc9fb0605.roa (raw, json)
Hash identifier:          VCmgFIe2n05sNe6mxAKoJvylkg4dHs0HsptgNl72CBE=
Subject key identifier:   3B:C8:D1:A0:25:C7:31:9C:CC:6B:1A:57:57:8A:E5:87:6F:40:EF:2B
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F43285847CFD4D6B3F3EDC09CA2713100
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/91d52f3f-e91f-3c81-b4d3-214bc9fb0605.roa
Signing time:             Fri 08 Nov 2024 14:00:39 +0000
ROA not before:           Fri 08 Nov 2024 14:00:39 +0000
ROA not after:            Thu 06 Feb 2025 14:00:39 +0000
asID:                     396982
IP address blocks:        2604:a940:300::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cf:d4:d6:b3:f3:ed:c0:9c:a2:71:31:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Nov  8 14:00:39 2024 GMT
            Not After : Feb  6 14:00:39 2025 GMT
        Subject: CN=e7c7c908-dedf-48fe-b8e6-9729f99274de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:09:f2:db:e3:93:8b:82:04:0a:ed:e2:3f:27:
                    0f:c6:43:39:44:8b:2d:99:b5:3d:f4:43:89:1b:a7:
                    fd:a1:fd:2f:58:62:d8:33:66:30:32:e8:aa:6d:87:
                    20:5a:37:c4:5d:45:61:8c:4d:e7:1b:83:85:60:6d:
                    99:71:b2:a3:0e:d4:a1:7c:5d:e6:da:16:fc:a4:6a:
                    19:b9:f9:ec:b0:f4:03:b9:a7:10:f8:f0:6a:9b:7f:
                    c7:f1:11:12:05:9e:ca:74:50:fd:ba:f6:47:ab:b0:
                    e3:08:32:8c:2f:ec:87:85:c0:34:d1:63:37:2b:0d:
                    32:7c:ce:89:d4:56:88:36:0b:ad:5c:bc:44:03:20:
                    67:78:77:fc:7a:9b:ae:05:5e:94:ba:8c:c3:ab:75:
                    6f:9c:22:39:79:f5:97:b5:89:0c:ef:32:e9:56:e7:
                    8d:28:cc:81:b9:90:4b:7c:ae:b7:ee:7a:d9:d0:44:
                    e0:e9:df:cd:e5:56:fc:f8:d8:dc:27:1c:fe:34:10:
                    2d:27:c3:a2:49:2a:4a:d1:6d:b5:41:a8:cf:eb:1b:
                    04:c7:af:41:09:6b:57:c2:70:f0:21:d7:d2:0f:75:
                    14:f5:0a:3f:2e:45:1c:ea:10:29:01:66:b2:0a:5d:
                    3f:d2:c8:b8:36:87:9b:00:93:79:af:d3:34:28:6a:
                    9d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:C8:D1:A0:25:C7:31:9C:CC:6B:1A:57:57:8A:E5:87:6F:40:EF:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/91d52f3f-e91f-3c81-b4d3-214bc9fb0605.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:a940:300::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ce:86:bb:32:dd:03:36:13:09:e3:2e:8c:23:09:2a:6f:c3:3a:
         81:63:a6:ca:7f:6f:ee:97:d4:ef:30:0a:c2:a4:89:1a:93:4f:
         84:85:62:cf:fb:fb:6c:49:e9:0c:f8:e2:c0:46:7d:0b:05:19:
         bd:6a:0a:0e:a8:45:05:b9:af:ab:07:1d:53:d1:42:9f:98:8e:
         e9:d4:f3:8a:99:aa:3b:c5:5d:bc:f4:e8:65:e6:5e:82:4f:46:
         bf:d3:6e:cc:78:b6:70:aa:03:ae:d8:ac:22:0f:48:8c:f9:2b:
         46:5c:76:93:ea:aa:5e:92:dd:84:55:dc:70:38:31:8b:48:90:
         cf:03:42:c6:38:89:3e:10:db:3b:2e:09:50:99:b7:c9:c9:59:
         2f:59:58:d7:de:86:c6:11:10:21:98:e1:c4:6b:d3:5f:37:5d:
         8b:a5:8f:f8:14:69:9b:78:6f:fc:ba:2e:70:69:01:2e:21:c0:
         de:20:80:0c:d2:14:e6:14:7d:5e:2e:e5:77:67:b3:2b:e9:fe:
         ca:ea:1d:bb:af:88:da:79:1c:d1:6f:97:35:60:e6:13:64:ba:
         d0:e7:87:8e:ce:92:1e:ed:5a:8e:d1:1a:ee:02:0d:d9:c6:1b:
         26:b7:5d:4c:71:bf:8a:05:2f:01:23:d2:c0:b5:f5:6f:c1:a2:
         6c:c9:c9:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:48 2024 by rpki-client on console-fra.rpki-client.org