Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/acd38b39-740a-4881-b923-26d1a20ffbfe/885afd9a-8d88-38dc-b608-9f0392f4b9e0.roa
File:                     885afd9a-8d88-38dc-b608-9f0392f4b9e0.roa (raw, json)
Hash identifier:          VADxrV5oK/94pRKapV8q1VQrtbcIAswhQ7gayFZlqBM=
Subject key identifier:   EA:04:11:D0:72:EF:6B:2E:30:E9:29:A0:5E:E1:6E:A6:41:85:53:43
Certificate issuer:       /CN=acd38b39-740a-4881-b923-26d1a20ffbfe
Certificate serial:       010D0C9F43285847C1DF55817365B70848935A80
Authority key identifier: E9:0D:0F:ED:47:FD:7A:07:EE:45:AF:63:02:94:4A:39:11:B5:BB:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/acd38b39-740a-4881-b923-26d1a20ffbfe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/acd38b39-740a-4881-b923-26d1a20ffbfe/885afd9a-8d88-38dc-b608-9f0392f4b9e0.roa
Signing time:             Sun 03 Nov 2024 14:00:49 +0000
ROA not before:           Sun 03 Nov 2024 14:00:49 +0000
ROA not after:            Sat 01 Feb 2025 14:00:49 +0000
asID:                     33724
IP address blocks:        2604:240::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/acd38b39-740a-4881-b923-26d1a20ffbfe/acd38b39-740a-4881-b923-26d1a20ffbfe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/acd38b39-740a-4881-b923-26d1a20ffbfe/acd38b39-740a-4881-b923-26d1a20ffbfe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/acd38b39-740a-4881-b923-26d1a20ffbfe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c1:df:55:81:73:65:b7:08:48:93:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acd38b39-740a-4881-b923-26d1a20ffbfe
        Validity
            Not Before: Nov  3 14:00:49 2024 GMT
            Not After : Feb  1 14:00:49 2025 GMT
        Subject: CN=c9f04d44-a262-484f-83b6-9c7221b06daa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:87:eb:10:b4:32:dc:d0:e5:e7:8f:7c:ed:98:
                    4c:77:be:7e:03:44:30:cf:a2:e0:aa:35:14:f9:d0:
                    8a:38:43:3f:39:f3:d0:d1:f1:9c:4c:5d:10:69:a7:
                    1f:94:a0:96:53:b3:79:e6:81:71:e0:b5:eb:46:39:
                    0c:fd:ab:93:14:60:17:8e:75:87:68:87:d5:e2:7e:
                    f1:4f:98:0b:25:57:91:50:86:e7:e7:7d:33:a0:aa:
                    81:c4:d2:2f:b9:54:80:e3:83:4d:6a:cd:db:fb:43:
                    e5:7f:8c:42:8d:65:53:4e:e8:fe:96:e5:d2:12:dc:
                    c2:d7:0f:b0:81:d0:fd:18:af:67:22:be:6b:d1:7f:
                    b3:d4:be:ef:1e:01:21:55:8b:a7:54:3f:2e:25:37:
                    e2:e6:c1:28:22:05:c3:db:9c:17:14:86:b1:15:c6:
                    26:6e:91:23:7a:ae:44:82:86:b9:8a:78:50:2d:05:
                    32:df:d9:fd:84:61:3a:59:6c:6d:24:b1:68:f0:bc:
                    d9:79:a5:32:77:88:d8:af:18:8f:df:9c:d1:43:e9:
                    ca:39:e0:4b:1e:9f:68:9d:bc:15:3f:56:39:e7:aa:
                    e8:90:da:d5:b4:da:2f:99:f0:58:e6:c4:f7:26:90:
                    67:71:c9:72:5c:18:aa:de:d8:bb:ad:59:09:ab:19:
                    f7:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:04:11:D0:72:EF:6B:2E:30:E9:29:A0:5E:E1:6E:A6:41:85:53:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/acd38b39-740a-4881-b923-26d1a20ffbfe/885afd9a-8d88-38dc-b608-9f0392f4b9e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/acd38b39-740a-4881-b923-26d1a20ffbfe/acd38b39-740a-4881-b923-26d1a20ffbfe.crl

            X509v3 Authority Key Identifier:
                keyid:E9:0D:0F:ED:47:FD:7A:07:EE:45:AF:63:02:94:4A:39:11:B5:BB:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/acd38b39-740a-4881-b923-26d1a20ffbfe.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:240::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:77:f4:23:92:07:c7:57:7b:2d:a1:16:1e:3f:3d:a1:59:b3:
         77:6a:4a:8e:65:29:86:bf:0d:d2:21:ee:45:dc:93:1f:38:cd:
         f9:ba:34:b0:10:f0:7f:fb:1b:6f:bd:8f:2a:40:c1:46:a5:12:
         89:97:91:c7:24:de:e5:15:3a:71:6d:a0:8f:32:2f:3e:e7:6e:
         56:35:68:40:18:3f:a5:30:43:50:bf:02:63:4d:0f:53:75:56:
         53:9b:77:b2:11:a8:26:7c:24:c6:64:37:34:d3:44:51:e1:31:
         46:af:2d:c8:83:55:3f:68:0b:5a:46:de:27:c6:97:e8:46:f1:
         fe:ed:aa:66:0f:a1:81:28:12:c0:11:07:5e:c3:c7:c9:cc:df:
         72:d3:99:f7:d3:9f:7f:7a:f2:81:10:fd:7a:d3:9a:f8:92:44:
         38:db:b1:06:11:c2:97:cf:ea:d8:a7:c7:01:74:91:8a:85:9f:
         c2:f2:21:8d:15:cf:f8:4e:8b:23:72:92:9f:18:c6:5e:5c:6c:
         3f:b0:76:8f:d0:16:18:bc:1f:26:b2:a1:f7:3a:c6:87:de:b3:
         4f:a4:12:d3:98:56:d2:7b:69:be:a8:ee:55:c7:e2:97:de:94:
         40:7a:4c:9e:0b:3c:55:eb:e7:f1:94:1b:85:5f:81:de:b4:ec:
         b1:b4:25:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:54:27 2024 by rpki-client on console-ams.rpki-client.org