Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/9aad5e4e-dbba-3824-8f34-d21bd8ee2f01.roa
File:                     9aad5e4e-dbba-3824-8f34-d21bd8ee2f01.roa (raw, json)
Hash identifier:          bvY47LExkFCoS3zrNk0lOn+Rjm6nNY411uWmh954BnE=
Subject key identifier:   1C:28:20:6B:B0:E4:3A:0F:5A:73:0C:41:58:0E:6A:7D:63:D1:A1:B9
Certificate issuer:       /CN=ecbe2caf-afd0-4edf-a743-b350c23e307d
Certificate serial:       010D0C9F43285847213B1791DE831779784B9100
Authority key identifier: C2:76:72:F8:A3:BA:3C:3B:04:3F:5B:E1:5B:0D:90:5C:D9:3A:58:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/9aad5e4e-dbba-3824-8f34-d21bd8ee2f01.roa
Signing time:             Sat 07 Sep 2024 01:00:31 +0000
ROA not before:           Sat 07 Sep 2024 01:00:31 +0000
ROA not after:            Fri 06 Dec 2024 02:00:31 +0000
asID:                     36734
IP address blocks:        2607:5100::/28 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/ecbe2caf-afd0-4edf-a743-b350c23e307d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/ecbe2caf-afd0-4edf-a743-b350c23e307d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:21:3b:17:91:de:83:17:79:78:4b:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecbe2caf-afd0-4edf-a743-b350c23e307d
        Validity
            Not Before: Sep  7 01:00:31 2024 GMT
            Not After : Dec  6 02:00:31 2024 GMT
        Subject: CN=89f2eb25-d80a-4b34-8e72-ae2481492daf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:65:8b:a9:c8:77:db:66:08:e4:fa:bd:b8:f9:
                    78:21:c2:3b:71:b1:15:70:64:ea:a1:7b:f6:14:be:
                    ae:71:4f:9f:91:81:35:79:d7:3f:c0:95:28:02:9b:
                    ba:02:1d:2b:27:58:de:90:6c:4f:10:c5:de:b5:6a:
                    c9:c1:6c:ce:35:a8:91:73:ce:ac:4a:2a:fd:b8:14:
                    f3:73:3b:35:c2:b2:79:6b:d4:6d:b2:bd:ee:c1:a9:
                    11:5c:87:3e:52:a1:2a:ec:14:79:c9:23:da:9c:f6:
                    00:be:10:91:fc:6a:41:52:42:92:3d:82:89:85:80:
                    4c:2b:b3:42:6f:ed:ae:8e:18:65:ad:54:f2:0e:8c:
                    15:8e:ca:4c:0a:a7:19:17:2e:d8:7a:90:03:51:a0:
                    17:9c:88:86:db:83:f1:9f:01:bc:99:92:1f:9f:7c:
                    5d:aa:f9:2c:3c:5c:a6:09:f9:fd:26:ef:e2:cb:e7:
                    df:b8:92:21:06:4b:0f:e2:76:68:fc:2e:ac:d2:5c:
                    a2:57:5b:99:e5:73:40:15:83:a2:38:39:0d:1b:e8:
                    2a:77:70:5a:d8:e1:63:4e:e3:61:01:62:33:56:31:
                    36:37:ed:14:27:2d:3d:f0:4f:62:db:87:a3:69:21:
                    12:e4:b8:18:a9:56:aa:15:15:08:07:03:04:fc:30:
                    d0:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:28:20:6B:B0:E4:3A:0F:5A:73:0C:41:58:0E:6A:7D:63:D1:A1:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/9aad5e4e-dbba-3824-8f34-d21bd8ee2f01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/ecbe2caf-afd0-4edf-a743-b350c23e307d.crl

            X509v3 Authority Key Identifier:
                keyid:C2:76:72:F8:A3:BA:3C:3B:04:3F:5B:E1:5B:0D:90:5C:D9:3A:58:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:5100::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:62:96:c9:75:8f:45:67:f8:62:dd:d4:f5:fa:a2:0a:cc:80:
         61:4e:06:7c:ff:60:04:a3:ef:61:06:07:87:28:b2:82:5c:54:
         1f:4c:31:f8:20:b5:a2:09:cd:14:39:2f:f0:f5:56:8c:41:33:
         7d:e6:47:9c:fd:58:66:b9:9d:20:3b:48:84:74:34:c2:1e:98:
         f4:9f:77:8e:33:80:37:80:6e:c2:c9:b0:5f:b3:cb:03:22:54:
         ee:7b:d6:4d:70:d9:e7:40:24:40:ef:4f:59:67:53:94:40:79:
         3e:6e:b0:30:94:11:54:9b:ea:27:3f:59:0c:dc:cb:3b:23:c2:
         94:df:1e:fb:74:70:3a:02:07:e8:83:60:62:fa:63:a3:d1:7a:
         a1:d7:94:a3:bb:29:83:f1:88:1b:a7:23:cc:5b:f1:35:97:8d:
         50:3d:05:c3:46:7c:2a:ed:a8:2a:5a:5f:dd:e5:b7:e8:7c:61:
         40:06:5d:8f:12:c2:77:1d:65:aa:13:6a:e3:d8:28:54:63:63:
         d7:90:71:be:a7:00:50:4d:78:00:09:d1:86:ce:84:cf:3f:4e:
         17:46:08:48:c3:05:08:53:11:e8:ac:37:58:44:fb:cd:66:03:
         3e:f9:90:b8:ac:21:35:8d:3a:8e:83:c8:8d:6e:44:be:18:3f:
         e7:19:aa:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:11:39 2024 by rpki-client on console-ams.rpki-client.org