Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/eca1e3e0-dd49-3b73-b53c-4bd48f84dfd2.roa
File:                     eca1e3e0-dd49-3b73-b53c-4bd48f84dfd2.roa (raw, json)
Hash identifier:          1bqwqiLZh/xrsF107LbcI7fJWPguyeVwfeDXIduPtgc=
Subject key identifier:   BA:4D:CC:03:A9:3F:44:57:FA:DB:80:9C:BD:48:51:C4:23:C0:09:40
Certificate issuer:       /CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Certificate serial:       010D0C9F432858472835FA5E483A83611C6B7940
Authority key identifier: 38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/eca1e3e0-dd49-3b73-b53c-4bd48f84dfd2.roa
Signing time:             Mon 09 Sep 2024 13:00:41 +0000
ROA not before:           Mon 09 Sep 2024 13:00:41 +0000
ROA not after:            Sun 08 Dec 2024 14:00:41 +0000
asID:                     20773
IP address blocks:        2603:5:2100::/40 maxlen: 48
                          2603:5:2200::/40 maxlen: 48
                          2603:5:2f00::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:28:35:fa:5e:48:3a:83:61:1c:6b:79:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
        Validity
            Not Before: Sep  9 13:00:41 2024 GMT
            Not After : Dec  8 14:00:41 2024 GMT
        Subject: CN=542e3aea-2304-4c25-89a1-81cbb72695ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2d:cc:05:67:96:31:1e:62:96:30:d2:4f:68:
                    2a:50:e1:2e:ed:98:d7:9e:cb:5a:db:31:d7:88:f6:
                    36:f9:70:35:65:c9:21:c6:52:39:06:b3:90:eb:6e:
                    b3:15:e1:ee:46:db:a0:cb:86:15:72:45:ea:80:18:
                    69:27:0c:d2:e6:ae:d5:86:3b:69:c7:99:4d:1f:80:
                    3e:02:96:24:23:54:31:1d:cc:9c:81:30:3e:9e:da:
                    76:05:bd:31:b5:e8:ea:94:67:31:9d:24:3e:3a:78:
                    8b:19:c0:90:bc:64:92:9f:7b:65:a4:de:cb:9b:a3:
                    9d:80:fb:2b:9c:7c:f9:46:99:c6:d0:94:6b:a7:1d:
                    cf:23:f1:8c:d8:eb:f1:0d:e6:03:2a:80:09:8d:72:
                    0d:62:08:f2:b4:70:3c:76:63:08:0a:ea:3f:f3:86:
                    38:2b:c5:30:dc:8d:6f:d7:db:c1:91:b7:ae:1c:dd:
                    24:b3:85:0a:6b:2d:e0:f3:aa:e0:66:3c:e0:27:69:
                    b5:8e:8e:b0:7f:eb:fd:5c:46:56:e0:40:8d:42:74:
                    5d:f5:70:be:0c:cb:7d:08:1a:3d:df:de:65:27:85:
                    f2:78:ef:23:d0:72:52:3d:2d:14:2f:77:16:c0:e7:
                    07:8f:f5:f8:d0:8f:49:a6:0a:84:ec:1a:0b:55:8d:
                    49:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:4D:CC:03:A9:3F:44:57:FA:DB:80:9C:BD:48:51:C4:23:C0:09:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/eca1e3e0-dd49-3b73-b53c-4bd48f84dfd2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl

            X509v3 Authority Key Identifier:
                keyid:38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:5:2100::-2603:5:22ff:ffff:ffff:ffff:ffff:ffff
                  2603:5:2f00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:e6:dc:77:56:cc:20:d6:8e:2b:50:b6:a7:f9:1a:72:8d:d3:
         5a:a3:d2:ea:8a:d6:15:15:34:22:85:86:b9:53:8a:7f:2c:3c:
         87:15:07:63:13:2f:28:f2:33:a4:60:f9:2c:c8:dd:54:44:9b:
         6a:9c:75:7a:29:38:52:90:96:b5:64:d9:0a:b5:8b:36:d9:3e:
         c6:e5:ff:b3:57:e7:43:39:28:79:c5:ba:48:63:2d:44:6f:a5:
         25:1e:cc:21:c4:84:db:1a:ee:9e:00:c2:a8:9f:ff:58:d2:21:
         8f:72:70:a9:96:d6:01:d0:db:1d:db:6f:a0:0c:e1:12:74:54:
         1f:2a:0b:b1:45:08:9c:da:ab:12:28:d8:d9:60:e5:dc:e3:51:
         40:17:fe:10:60:ab:c6:24:c1:42:52:21:68:d2:c7:81:13:f4:
         e5:7e:f7:0e:49:0a:81:b8:6e:7b:fa:0a:d3:ec:a6:e3:64:6e:
         32:f3:08:31:81:41:c4:72:5c:8e:e1:d5:f8:53:17:96:01:db:
         39:5e:ab:5c:25:46:66:99:fe:56:9c:59:5e:36:72:b8:39:5a:
         e3:36:d8:5a:8b:75:3d:74:a5:62:11:b7:19:f9:db:6d:c6:fe:
         3e:80:31:44:96:bc:5c:39:e2:41:34:98:ac:f8:c8:6b:43:34:
         92:f6:49:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:28:54 2024 by rpki-client on console-fra.rpki-client.org