Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/deeaf205-b8a0-3626-a173-83e81387d177.roa
File:                     deeaf205-b8a0-3626-a173-83e81387d177.roa (raw, json)
Hash identifier:          qTYiL4GMYRnYZFs19u7cauG+Vh/cT6GLMRCYz9cEjAM=
Subject key identifier:   5E:E3:2D:97:4E:ED:DE:86:EF:25:9E:66:45:1C:E9:9B:8B:96:40:E9
Certificate issuer:       /CN=23658315-b56f-46db-89d2-184000d7f7e1
Certificate serial:       010D0C9F432858472405C6B2646EC2A6F0FB78E0
Authority key identifier: E5:87:CC:6D:8E:ED:D7:82:E5:1D:8D:4E:59:77:6B:36:63:34:77:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/deeaf205-b8a0-3626-a173-83e81387d177.roa
Signing time:             Sun 08 Sep 2024 01:00:31 +0000
ROA not before:           Sun 08 Sep 2024 01:00:31 +0000
ROA not after:            Sat 07 Dec 2024 02:00:31 +0000
asID:                     14007
IP address blocks:        2607:f040::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/23658315-b56f-46db-89d2-184000d7f7e1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/23658315-b56f-46db-89d2-184000d7f7e1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:24:05:c6:b2:64:6e:c2:a6:f0:fb:78:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23658315-b56f-46db-89d2-184000d7f7e1
        Validity
            Not Before: Sep  8 01:00:31 2024 GMT
            Not After : Dec  7 02:00:31 2024 GMT
        Subject: CN=f163bf3b-9a9b-4c93-8ce8-564fb3d53eb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:98:da:90:94:d6:50:ca:a6:09:a0:b7:4c:b5:
                    fc:be:35:ed:ef:c4:e4:5b:ac:1e:14:e5:a4:6a:83:
                    8e:a9:44:79:bd:39:b2:a8:88:9c:d8:a2:cd:02:c4:
                    6e:e3:f1:55:15:8d:4e:b2:39:88:2e:5c:4c:bb:ba:
                    2b:e1:c3:d7:48:8d:d5:92:b7:ea:23:bf:9e:35:4b:
                    b8:5b:41:30:0c:ff:63:cd:4d:99:e5:3b:37:c3:d5:
                    6f:6b:f5:9f:93:06:2a:a3:3d:0f:66:1f:e4:ea:71:
                    b3:11:15:2e:e8:40:13:d2:22:f7:6c:7f:02:13:30:
                    a4:c3:95:f2:a7:7c:03:8a:96:e9:20:0d:05:60:65:
                    8f:4e:ed:5d:ae:fa:c8:ed:0a:2f:c5:44:7c:5c:35:
                    2b:0d:fa:99:c2:cf:82:28:cb:ac:6b:53:55:6f:4e:
                    ec:94:fe:fc:31:1e:8f:c3:01:bb:42:54:38:a0:b3:
                    d7:66:71:7a:4f:95:d7:80:ba:53:c7:97:a9:8d:bf:
                    09:c5:ad:d1:47:d8:85:cd:b0:ba:85:c5:35:14:6c:
                    09:cc:13:50:60:85:07:c4:65:dd:48:d1:0e:df:cc:
                    72:95:b2:f1:b8:81:3d:7d:93:ec:9b:f2:e6:a5:be:
                    ca:32:ab:1f:aa:73:30:0c:32:7f:dc:99:5c:6e:ac:
                    d0:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:E3:2D:97:4E:ED:DE:86:EF:25:9E:66:45:1C:E9:9B:8B:96:40:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/deeaf205-b8a0-3626-a173-83e81387d177.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/23658315-b56f-46db-89d2-184000d7f7e1.crl

            X509v3 Authority Key Identifier:
                keyid:E5:87:CC:6D:8E:ED:D7:82:E5:1D:8D:4E:59:77:6B:36:63:34:77:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f040::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:81:6d:fd:42:a0:ff:b5:09:42:af:39:bf:89:84:2b:56:c7:
         c4:ac:b3:55:e1:a1:2e:c0:fd:59:8d:be:d4:8b:59:6f:5e:de:
         eb:81:d2:21:cf:41:4b:3a:37:bc:59:89:3b:ed:37:d3:28:58:
         fa:6d:c0:0e:c9:13:d0:cc:5f:af:91:fd:c4:7a:aa:63:ba:22:
         1f:ae:10:18:95:b9:b6:e1:77:c2:d5:97:22:b3:9e:50:a4:85:
         56:1d:7f:64:3d:23:d2:bb:bb:2f:ad:85:d7:81:fd:49:b1:7a:
         5d:32:1e:6e:52:4b:00:90:88:df:97:3f:8a:72:f2:c5:2c:32:
         a7:fd:a5:22:da:ad:ff:9a:1f:dd:0f:75:af:5d:98:a0:62:46:
         cb:c9:cd:03:8f:6b:c3:27:44:a9:b5:ed:c9:06:93:71:71:ca:
         8d:05:7c:e9:b5:37:ba:8f:05:98:0a:3b:cb:a8:cb:a9:09:e2:
         69:f0:a4:2d:92:c7:41:2b:f4:d2:41:be:06:c8:75:32:c2:3c:
         cb:a3:8a:c3:e9:8a:0f:84:d9:0d:a1:b0:ef:2b:51:9b:e4:93:
         03:47:1c:b5:e5:93:b0:e6:ca:ca:1a:b0:be:ba:f0:14:a5:5a:
         ac:79:90:e2:1a:af:e5:27:a9:58:e1:39:db:49:d4:6f:0f:79:
         41:90:49:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:35:01 2024 by rpki-client on console-ams.rpki-client.org