Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2/b4f65a39-964d-323d-9258-8f2f4e975abe.roa
File:                     b4f65a39-964d-323d-9258-8f2f4e975abe.roa (raw, json)
Hash identifier:          s0h4E1klOf8KTXjly219y1osn/A+W/balljch432jR8=
Subject key identifier:   4A:76:51:41:3A:75:46:17:62:89:99:C0:D3:D3:2A:72:49:6D:7E:3C
Certificate issuer:       /CN=cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2
Certificate serial:       010D0C9F43285847A8A14D4C98C9DBCE82A9E720
Authority key identifier: 66:97:7D:A4:1F:C6:17:1B:0A:5F:EE:F7:7A:C7:DC:54:DE:B5:EE:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2/b4f65a39-964d-323d-9258-8f2f4e975abe.roa
Signing time:             Fri 25 Oct 2024 13:00:42 +0000
ROA not before:           Fri 25 Oct 2024 13:00:42 +0000
ROA not after:            Thu 23 Jan 2025 14:00:42 +0000
asID:                     393562
IP address blocks:        2604:640:106::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a8:a1:4d:4c:98:c9:db:ce:82:a9:e7:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2
        Validity
            Not Before: Oct 25 13:00:42 2024 GMT
            Not After : Jan 23 14:00:42 2025 GMT
        Subject: CN=cd882c64-d0c7-4bf2-a3d3-f9a653d5ce84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ca:dd:e7:7a:f3:73:85:e0:c5:0b:35:8d:f3:
                    54:eb:fe:6f:ef:6e:bb:56:53:86:bc:53:61:e1:c9:
                    24:1e:0c:d6:47:05:3a:bf:53:a8:8f:02:1b:04:18:
                    d2:66:6d:6b:c1:ef:69:1a:68:6a:43:30:bf:80:86:
                    ff:0c:a9:43:fd:45:17:1b:ed:6b:db:67:98:b0:46:
                    58:49:1b:35:99:0e:fb:74:9d:3c:dd:85:67:df:d6:
                    8e:37:b2:ea:b7:19:30:47:d6:62:39:58:8a:09:50:
                    1f:a4:96:bc:8b:48:42:37:5f:f4:a5:6e:ce:a6:fd:
                    49:98:11:e4:fc:2e:70:72:8d:e5:83:3a:86:ad:0e:
                    35:19:02:d8:a8:a7:58:91:f6:96:9c:7a:f6:c3:b8:
                    89:34:34:e4:2b:f0:48:a0:94:19:2c:ae:80:e1:c1:
                    2d:f4:f7:da:69:57:ea:4b:20:ff:6f:65:bf:2c:52:
                    8b:1e:83:c3:0a:bb:1e:c4:ad:cb:be:a9:65:c6:2f:
                    e4:ea:1c:b7:f0:59:e9:90:d2:6c:1d:de:c1:d9:86:
                    ad:e8:35:63:f6:05:82:d6:81:29:f4:9c:7a:eb:6b:
                    41:e5:26:69:af:51:04:25:7f:c6:17:b6:91:00:33:
                    2e:05:27:fb:e9:5b:87:e8:06:64:59:b9:00:8b:79:
                    f2:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:76:51:41:3A:75:46:17:62:89:99:C0:D3:D3:2A:72:49:6D:7E:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2/b4f65a39-964d-323d-9258-8f2f4e975abe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2.crl

            X509v3 Authority Key Identifier:
                keyid:66:97:7D:A4:1F:C6:17:1B:0A:5F:EE:F7:7A:C7:DC:54:DE:B5:EE:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:640:106::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:8f:c1:73:a7:54:71:5b:7a:1d:8d:93:37:98:65:99:11:d8:
         4b:ba:9d:00:c5:7c:a7:58:b3:fc:49:4c:80:bc:9e:5e:30:cf:
         1c:6e:3e:a2:4e:e3:02:94:f7:e3:19:63:19:fc:8c:4f:dd:50:
         7e:de:32:17:81:7d:d7:3c:c6:75:70:91:f0:80:a2:f7:bb:fb:
         02:6c:1a:98:bd:9a:a5:ea:c8:ff:30:1c:20:85:f7:7e:2f:6c:
         13:87:2f:b6:49:62:1a:60:73:64:1c:5b:60:02:1e:95:82:fa:
         aa:f1:7d:18:c0:15:a6:f1:8a:c0:a5:4b:98:0a:4d:fd:46:6c:
         e7:04:08:c1:0e:a4:47:d7:00:d3:d0:10:ec:4f:25:5a:3e:2e:
         a1:8d:2c:04:0d:b6:c5:c2:6f:77:c5:e7:ee:92:e0:fe:c0:b7:
         a3:3a:13:7a:e4:89:80:87:a9:b6:70:10:94:7e:34:3d:ea:50:
         12:b5:41:48:9c:25:4f:51:06:67:69:8e:6c:cc:0b:32:dd:3f:
         3e:7f:13:d5:5e:b9:bb:6b:1b:0c:41:2e:e1:13:82:78:6c:5d:
         06:f4:a0:44:31:e7:37:f2:ac:ac:d6:ab:10:bf:66:11:09:f3:
         25:57:2d:d5:0a:5c:86:61:db:15:17:41:40:3a:9e:5b:01:4d:
         11:7d:51:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:01:46 2024 by rpki-client on console-ams.rpki-client.org