Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/70b93b97-7d5a-3cb8-bb34-abcf117d8c28.roa
File:                     70b93b97-7d5a-3cb8-bb34-abcf117d8c28.roa (raw, json)
Hash identifier:          IGNRjfFIQ30fwobs9y3hVz8DhKqcSbDpVLnEq6kHaeA=
Subject key identifier:   B6:D0:28:FF:3F:88:E2:D3:A3:B8:DE:82:64:C1:87:78:C0:64:62:21
Certificate issuer:       /CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf
Certificate serial:       010D0C9F43285847D569FB59C11B0EB10F562000
Authority key identifier: D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/70b93b97-7d5a-3cb8-bb34-abcf117d8c28.roa
Signing time:             Sun 10 Nov 2024 14:00:37 +0000
ROA not before:           Sun 10 Nov 2024 14:00:37 +0000
ROA not after:            Sat 08 Feb 2025 14:00:37 +0000
asID:                     18672
IP address blocks:        2605:bb00:4000::/35 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d5:69:fb:59:c1:1b:0e:b1:0f:56:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf
        Validity
            Not Before: Nov 10 14:00:37 2024 GMT
            Not After : Feb  8 14:00:37 2025 GMT
        Subject: CN=3eeea233-33dc-43cb-a62e-aa7a82466b1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c3:a6:c2:ea:b1:44:e0:48:e2:ad:12:47:cd:
                    cd:b8:b4:40:51:14:ce:f6:df:01:54:30:70:9a:d4:
                    38:97:e8:69:b1:30:b6:f0:98:fd:a5:f1:22:e9:3c:
                    88:28:26:c5:b8:06:1d:bc:f6:c9:20:f7:d8:3e:44:
                    51:04:48:f8:6a:f1:09:fd:76:52:56:b1:b1:4f:6d:
                    f9:58:58:07:95:12:a1:2a:19:be:77:8d:d3:a7:06:
                    dd:32:34:a6:6a:70:48:80:53:d5:22:63:8f:88:27:
                    a5:ba:89:e8:bd:14:23:6a:aa:76:08:e7:17:69:b4:
                    cc:5f:2d:b9:fe:e5:74:b3:4d:60:05:25:8b:f6:07:
                    1e:12:30:3a:46:af:f4:00:ed:75:94:91:c1:1d:bf:
                    49:32:c8:be:e0:76:e6:41:d2:c4:b1:14:cb:9f:b6:
                    9f:67:52:ef:05:09:08:15:6a:8c:8d:da:05:e6:64:
                    6e:e2:2c:0a:ed:6a:bd:b8:35:07:a4:00:e1:33:c6:
                    91:10:9e:5f:1c:84:1b:f0:9e:1e:89:d1:6a:67:82:
                    0a:0b:a1:4f:e8:19:b7:7e:39:56:f8:69:c0:42:61:
                    73:79:fc:e9:c5:d3:52:6a:3f:d1:ee:c3:7d:68:16:
                    01:dd:8b:ea:46:f8:0a:ca:f9:28:8c:ce:32:32:dd:
                    03:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:D0:28:FF:3F:88:E2:D3:A3:B8:DE:82:64:C1:87:78:C0:64:62:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/70b93b97-7d5a-3cb8-bb34-abcf117d8c28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl

            X509v3 Authority Key Identifier:
                keyid:D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:bb00:4000::/35

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:bd:98:5f:08:0a:15:24:9a:e2:7e:ee:20:2f:19:91:3f:24:
         ee:17:54:61:0c:e3:9e:25:08:f7:ec:05:5e:4a:2b:7f:1f:20:
         29:fc:bb:23:f8:fe:3f:22:04:d0:01:92:84:e2:ef:24:0b:e9:
         78:61:47:7c:82:5c:3a:31:29:89:75:ee:7c:bd:c3:66:7a:e0:
         3a:b9:71:c5:d9:4f:75:97:94:fe:3c:a7:2d:ce:d3:ec:91:8b:
         13:e6:37:dd:4c:14:22:e9:79:b3:f7:8d:74:04:65:da:7c:ad:
         7c:b0:4c:aa:52:87:9d:65:cc:46:77:c5:76:ac:cf:c6:c9:36:
         a6:a6:85:eb:1c:41:20:d5:6d:c7:cf:b4:64:c2:84:10:9e:ff:
         e1:b4:e7:4c:9d:c7:b1:76:e2:5b:56:68:ff:06:73:64:82:f4:
         f6:c9:f9:14:a9:fb:f2:fa:78:6f:6d:f3:93:33:e2:b9:3b:a2:
         50:e9:06:c1:d2:29:ee:d3:96:56:42:db:c5:08:d9:d4:12:6d:
         da:45:3f:19:a6:12:60:5b:4d:6e:3a:c3:d2:a0:01:e6:21:81:
         ed:bc:7c:88:15:e4:7d:28:7a:7c:e8:9a:66:67:21:e5:b4:d7:
         9d:8d:56:47:1b:cf:62:30:95:3c:ca:12:20:bc:67:3b:c8:57:
         fb:c9:ad:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:46:20 2024 by rpki-client on console-fra.rpki-client.org