Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/66059507-adf2-3390-af86-e4bb17ea4aa3.roa
File:                     66059507-adf2-3390-af86-e4bb17ea4aa3.roa (raw, json)
Hash identifier:          zjNEiaRP9m/T1Vd35WdtOXN3GqicDg0p8Qh8LxF4txQ=
Subject key identifier:   BB:44:FA:EA:D9:AD:61:15:D4:09:91:3A:B0:03:E7:13:D1:76:BF:7E
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F432858471A406FBB1B16DE586B9A50D0
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/66059507-adf2-3390-af86-e4bb17ea4aa3.roa
Signing time:             Wed 04 Sep 2024 13:00:41 +0000
ROA not before:           Wed 04 Sep 2024 13:00:41 +0000
ROA not after:            Tue 03 Dec 2024 14:00:41 +0000
asID:                     396955
IP address blocks:        2001:468:f00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1a:40:6f:bb:1b:16:de:58:6b:9a:50:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Sep  4 13:00:41 2024 GMT
            Not After : Dec  3 14:00:41 2024 GMT
        Subject: CN=13bcae19-8b77-4771-93d5-de2ff2bfc740
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:04:26:62:f6:04:ed:83:9c:5d:60:a0:ea:86:
                    40:d5:c8:be:ef:74:88:19:5c:88:ba:57:a7:e8:20:
                    ea:a7:20:28:fc:20:d4:95:85:b5:da:4e:95:fa:81:
                    7d:f3:58:61:fc:22:d3:12:81:c3:dd:15:27:3c:30:
                    e7:92:ab:ee:a6:29:e9:e9:e6:b1:42:b7:76:cd:46:
                    0e:32:ce:b8:96:87:2f:81:d2:fb:b0:d9:aa:07:4c:
                    41:b4:1c:17:89:72:42:db:d8:dd:7e:a0:2e:f4:35:
                    7b:87:96:08:7b:8f:82:02:3c:ca:69:fb:57:dc:6b:
                    ea:92:e1:b8:c0:a8:86:48:a9:c4:cb:11:2e:c4:a9:
                    11:11:8d:18:4e:ec:55:ff:7f:96:c8:3f:91:6c:36:
                    60:70:4e:b2:24:b5:2d:09:79:5d:05:60:03:ea:35:
                    2c:2b:6d:cc:08:9c:7c:d0:2a:81:b7:ea:5f:6c:27:
                    16:b6:6a:29:5b:d2:c7:ab:59:22:a8:90:f6:05:f9:
                    90:42:23:20:96:f9:7d:66:43:85:03:ce:94:b0:82:
                    42:e4:4e:30:95:5a:0f:b6:b3:55:cf:51:bf:bf:0f:
                    bc:a4:1b:98:56:44:ba:b5:22:85:b4:7d:e9:f1:7f:
                    23:34:cf:f9:93:00:1b:82:00:ee:1c:11:5c:43:8b:
                    01:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:44:FA:EA:D9:AD:61:15:D4:09:91:3A:B0:03:E7:13:D1:76:BF:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/66059507-adf2-3390-af86-e4bb17ea4aa3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:468:f00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:3c:41:4b:16:1f:bd:8d:64:65:76:5f:cd:9f:53:a2:7f:49:
         79:f7:db:27:54:4b:f4:32:43:60:18:ca:18:48:be:a0:63:85:
         f8:d6:ed:8e:12:fa:1b:66:fc:21:36:37:a4:d1:97:85:96:7a:
         49:f5:79:01:b6:c2:0f:64:cf:87:48:b5:98:7f:53:18:cb:10:
         24:ac:7a:81:43:06:f4:fe:e6:2d:68:82:57:72:10:f1:bd:a4:
         49:25:44:94:12:2a:c1:ec:83:10:29:26:6d:c6:4b:1d:f3:3e:
         e6:d6:52:38:51:c7:15:95:c5:e7:66:4d:73:7e:d9:db:d8:d4:
         57:47:1a:2b:65:52:3f:88:5d:ec:64:4a:43:de:82:38:84:ff:
         eb:fd:44:e5:00:13:56:c3:bb:40:32:51:67:a9:85:4e:86:75:
         08:de:f4:1a:74:54:aa:e1:19:d1:d2:17:42:86:4e:ad:cc:68:
         90:eb:10:7f:99:22:2b:e0:68:95:50:6c:ad:a7:23:f0:16:33:
         ef:10:01:58:1e:91:17:a3:a6:66:ef:3f:2c:0e:72:c4:00:08:
         26:00:74:79:79:70:f6:c0:fc:1f:09:1c:20:66:10:c6:97:7d:
         d8:cc:7f:23:93:52:f1:66:d3:a8:8f:69:30:25:e1:ce:8f:33:
         41:bc:77:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:00:33 2024 by rpki-client on console-ams.rpki-client.org