Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f345059f-2ab8-4c1d-b4fb-177daf3fb761/01a4fa6c-03dd-3f17-be03-a1abe36af9e0.roa
File:                     01a4fa6c-03dd-3f17-be03-a1abe36af9e0.roa (raw, json)
Hash identifier:          na3XTmd4ipSwy6IP6DnVtDQvX4pmva3VUEaCNgSf6Yo=
Subject key identifier:   EF:F3:06:D7:1C:F8:FE:CC:B6:0B:88:8E:2D:62:80:C2:29:9F:0C:24
Certificate issuer:       /CN=f345059f-2ab8-4c1d-b4fb-177daf3fb761
Certificate serial:       010D0C9F432858472C65D28D3F8C824B2BE39E80
Authority key identifier: FE:61:2E:43:24:27:8F:08:AB:7B:98:D3:B9:88:3A:BE:3C:71:98:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f345059f-2ab8-4c1d-b4fb-177daf3fb761.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f345059f-2ab8-4c1d-b4fb-177daf3fb761/01a4fa6c-03dd-3f17-be03-a1abe36af9e0.roa
Signing time:             Wed 11 Sep 2024 01:00:31 +0000
ROA not before:           Wed 11 Sep 2024 01:00:31 +0000
ROA not after:            Tue 10 Dec 2024 02:00:31 +0000
asID:                     3807
IP address blocks:        2620:104:8000::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f345059f-2ab8-4c1d-b4fb-177daf3fb761/f345059f-2ab8-4c1d-b4fb-177daf3fb761.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f345059f-2ab8-4c1d-b4fb-177daf3fb761/f345059f-2ab8-4c1d-b4fb-177daf3fb761.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f345059f-2ab8-4c1d-b4fb-177daf3fb761.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2c:65:d2:8d:3f:8c:82:4b:2b:e3:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f345059f-2ab8-4c1d-b4fb-177daf3fb761
        Validity
            Not Before: Sep 11 01:00:31 2024 GMT
            Not After : Dec 10 02:00:31 2024 GMT
        Subject: CN=469b7471-9fb7-45ab-ab1f-f449968d2e31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a9:70:65:1c:91:1f:63:51:fc:35:82:0c:de:
                    5e:fc:77:eb:59:aa:93:3f:27:5b:7e:e7:f8:19:5e:
                    d2:6a:d5:2e:e5:28:8d:66:03:f3:32:86:04:04:a6:
                    ff:f4:84:2d:0b:9b:de:4d:94:b5:28:89:39:cf:82:
                    78:36:34:2e:0c:26:4f:09:03:2a:02:91:e1:f4:f7:
                    ac:20:20:93:08:d4:01:12:de:7e:b8:1a:83:b7:1e:
                    2f:54:63:d5:81:ce:e6:34:fc:43:8f:aa:14:31:52:
                    4c:33:ee:c0:19:36:3c:21:c8:15:32:1e:5e:dd:e8:
                    0e:6b:4a:aa:78:7f:b8:00:6a:cf:6b:c5:92:32:41:
                    2f:7c:c5:58:a6:c5:ac:01:ad:55:b3:b5:0d:6b:d5:
                    9b:a7:d9:dd:b5:35:39:6b:18:d9:3f:10:b5:11:d8:
                    8c:69:af:98:09:88:05:1b:2e:fc:19:c0:d4:b8:d9:
                    b6:b5:5f:7b:fd:c2:56:ca:2f:76:e0:dd:8c:98:b6:
                    ce:02:07:2a:67:ee:a9:19:55:64:f5:f6:5d:ae:a7:
                    4f:8d:4b:15:83:31:6f:e1:e8:bf:96:ac:0d:18:5e:
                    b2:3b:01:61:83:08:b7:3a:cc:84:78:5d:56:80:01:
                    b5:37:12:76:73:98:98:55:4a:3f:f0:bd:7c:67:4f:
                    ac:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:F3:06:D7:1C:F8:FE:CC:B6:0B:88:8E:2D:62:80:C2:29:9F:0C:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f345059f-2ab8-4c1d-b4fb-177daf3fb761/01a4fa6c-03dd-3f17-be03-a1abe36af9e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f345059f-2ab8-4c1d-b4fb-177daf3fb761/f345059f-2ab8-4c1d-b4fb-177daf3fb761.crl

            X509v3 Authority Key Identifier:
                keyid:FE:61:2E:43:24:27:8F:08:AB:7B:98:D3:B9:88:3A:BE:3C:71:98:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f345059f-2ab8-4c1d-b4fb-177daf3fb761.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:104:8000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:6a:c0:16:bc:6d:08:14:f6:34:d9:cf:64:21:b3:a9:d4:c6:
         bd:c5:01:3a:83:15:22:9b:60:0c:ab:2d:03:e9:02:1b:a8:47:
         38:7b:ed:b7:1a:53:68:d7:fe:e4:c8:be:b4:33:f2:4e:32:c2:
         cb:d3:e5:9e:05:9a:0c:75:f7:20:b7:96:75:09:13:6f:38:59:
         af:80:9e:60:c4:21:19:87:47:80:1d:3f:d4:bb:98:aa:69:be:
         97:b4:b5:f6:c4:c7:ea:7d:61:0d:47:bc:1e:31:b1:68:26:13:
         6f:e5:82:67:7b:7c:70:4b:2d:9e:d8:09:8c:91:25:77:d9:f8:
         d0:39:62:db:c5:90:69:9d:92:00:79:22:77:9f:00:ca:45:0a:
         42:17:be:1c:fe:ce:01:c0:00:e7:81:38:2f:79:ee:3e:3a:45:
         83:53:57:40:02:5b:4d:48:de:ef:36:ad:24:a1:89:3f:58:f7:
         06:aa:ad:f7:5e:8d:ac:ad:45:84:e5:27:f5:30:70:27:95:eb:
         2d:6f:02:21:08:37:1d:8e:1f:c1:50:5a:af:47:2e:5c:b2:5c:
         17:10:a1:e4:c7:f3:46:83:eb:e1:83:8e:7b:51:8c:06:68:02:
         c6:9d:85:b7:1f:a9:e0:b8:bf:ec:93:98:af:4c:06:cc:bf:6d:
         c5:9d:2d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:17:29 2024 by rpki-client on console-ams.rpki-client.org