Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442/a3127224-4fed-317e-abb6-66f5e61dbf1c.roa
File:                     a3127224-4fed-317e-abb6-66f5e61dbf1c.roa (raw, json)
Hash identifier:          VH3qfIlT0Y11sTM9hH0g4gl8oxG5X35Pe1mh/RP6Skw=
Subject key identifier:   4B:DC:FA:25:8A:E8:8E:15:3A:84:63:94:EF:BA:AB:93:77:25:E1:12
Certificate issuer:       /CN=233d8eef-51df-487b-9edb-f16ba403f442
Certificate serial:       010D0C9F43285847537B5471F859DD8BBC167C40
Authority key identifier: 56:85:06:EA:8A:34:47:B6:12:B1:A2:1F:DE:DD:5A:7B:60:81:6F:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442/a3127224-4fed-317e-abb6-66f5e61dbf1c.roa
Signing time:             Wed 25 Sep 2024 01:00:31 +0000
ROA not before:           Wed 25 Sep 2024 01:00:31 +0000
ROA not after:            Tue 24 Dec 2024 02:00:31 +0000
asID:                     395766
IP address blocks:        2607:3380:1100::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442/233d8eef-51df-487b-9edb-f16ba403f442.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442/233d8eef-51df-487b-9edb-f16ba403f442.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:53:7b:54:71:f8:59:dd:8b:bc:16:7c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=233d8eef-51df-487b-9edb-f16ba403f442
        Validity
            Not Before: Sep 25 01:00:31 2024 GMT
            Not After : Dec 24 02:00:31 2024 GMT
        Subject: CN=5241bc11-6797-420d-b676-94b8d7ba4564
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:71:89:de:2a:f7:fd:e5:74:50:a1:f2:b7:95:
                    4a:33:8b:5b:5a:4f:c0:12:be:14:f1:c1:81:29:56:
                    e2:0a:f9:7c:5d:03:45:16:28:5e:9f:dc:13:13:e1:
                    1c:8c:37:21:98:c2:f7:10:5e:7e:af:b8:bb:d4:c9:
                    3f:b4:fb:f3:96:35:20:69:75:01:67:a7:e1:0f:23:
                    a6:1a:7d:43:6a:3e:35:3d:a4:48:39:5c:15:f7:0f:
                    af:10:d2:0e:8a:d7:22:b1:60:78:26:76:01:99:ea:
                    5a:b4:75:5f:e5:81:fc:01:b7:37:e6:1f:e9:b1:d8:
                    b3:2c:c8:77:b4:63:05:68:48:82:3d:67:2e:7f:b9:
                    5c:c3:83:16:56:29:ff:73:b1:99:1c:1e:4b:47:1a:
                    82:80:8e:25:ea:bf:41:0b:07:5b:66:67:15:a4:af:
                    43:58:51:47:b4:1a:6d:6e:b2:20:30:c0:ad:eb:53:
                    20:c4:e5:a7:f7:1c:15:6c:8e:a9:1b:f4:f6:37:01:
                    6d:46:f0:ed:be:21:99:8b:c2:8b:de:19:60:d0:2b:
                    26:30:a9:f2:16:f5:a3:5a:c7:2c:4c:86:56:6d:bb:
                    a4:81:c6:2f:4d:d0:a5:98:0e:91:4f:b5:58:87:7f:
                    23:d0:fc:8e:cf:74:f5:8b:62:80:4e:83:ef:e4:39:
                    de:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:DC:FA:25:8A:E8:8E:15:3A:84:63:94:EF:BA:AB:93:77:25:E1:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442/a3127224-4fed-317e-abb6-66f5e61dbf1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442/233d8eef-51df-487b-9edb-f16ba403f442.crl

            X509v3 Authority Key Identifier:
                keyid:56:85:06:EA:8A:34:47:B6:12:B1:A2:1F:DE:DD:5A:7B:60:81:6F:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:3380:1100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:54:2f:0f:97:49:76:12:60:7d:92:02:b6:4a:d1:f6:6c:3b:
         f0:58:9b:c1:70:26:cb:dc:e9:04:49:b1:4d:37:45:c9:da:c9:
         c9:90:fd:49:f1:17:c5:2e:36:6a:b5:9a:c0:b7:d5:de:ea:33:
         70:b1:20:13:07:3c:cb:da:54:54:0d:ac:a6:d9:c8:40:98:4a:
         ac:56:67:05:4a:e9:f0:1e:02:87:b0:d3:9d:ce:f1:e1:8d:b6:
         b7:76:92:29:b8:f6:59:83:85:f1:a5:a2:28:6d:46:2b:f1:da:
         16:c1:18:b5:a1:6f:03:e3:0d:4d:a2:5e:7c:f3:df:bd:8b:a7:
         9d:3b:5a:1a:d3:b9:23:b3:c7:1e:50:94:61:71:9c:91:e3:42:
         c7:37:83:9e:72:23:3f:2f:bc:4a:73:38:1a:df:2a:98:f1:05:
         50:b9:d2:9f:cf:cf:cc:fc:60:e8:82:ff:d6:da:02:46:63:ec:
         38:f8:72:e8:92:2d:b2:25:32:5a:3e:28:a0:e0:f1:1d:2d:a7:
         5e:99:80:12:fc:57:31:99:71:8b:17:bb:86:9a:94:f9:e1:91:
         f5:89:c7:70:8e:14:8c:37:a0:55:bb:c5:48:9d:f7:c3:cc:01:
         43:fd:9a:7a:7f:d5:0b:ac:a3:88:2e:6e:b1:2d:de:2d:44:01:
         71:98:65:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 14:56:58 2024 by rpki-client on console-fra.rpki-client.org