Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853/698433db-e2ac-3ad0-8d1a-70743069e6d5.roa
File:                     698433db-e2ac-3ad0-8d1a-70743069e6d5.roa (raw, json)
Hash identifier:          ZtqnaQQAQ4yPOoppTxDRHIZdwVrdexUhmSitaRZDMzs=
Subject key identifier:   A3:91:75:80:96:21:A1:1B:15:73:8D:02:F8:9F:E2:69:4B:48:77:75
Certificate issuer:       /CN=5bac54b9-66dc-4956-863d-1804cfb9e853
Certificate serial:       010D0C9F4328584738F5FF4AFBA111FD74AF0300
Authority key identifier: 7F:4A:9A:A7:40:62:CD:6D:BF:70:19:16:CE:FD:9B:2A:27:E6:2E:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853/698433db-e2ac-3ad0-8d1a-70743069e6d5.roa
Signing time:             Sun 15 Sep 2024 13:00:42 +0000
ROA not before:           Sun 15 Sep 2024 13:00:42 +0000
ROA not after:            Sat 14 Dec 2024 14:00:42 +0000
asID:                     399077
IP address blocks:        2606:4dc0:2200::/40 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853/5bac54b9-66dc-4956-863d-1804cfb9e853.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853/5bac54b9-66dc-4956-863d-1804cfb9e853.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:38:f5:ff:4a:fb:a1:11:fd:74:af:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bac54b9-66dc-4956-863d-1804cfb9e853
        Validity
            Not Before: Sep 15 13:00:42 2024 GMT
            Not After : Dec 14 14:00:42 2024 GMT
        Subject: CN=cc3f513c-d442-47c7-95aa-c1f02a0a125c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a0:37:69:16:28:fe:22:04:2f:11:b7:bd:f2:
                    51:a5:88:08:53:fd:80:99:f0:f8:a1:75:cc:40:79:
                    d2:c5:e2:dc:3b:a4:e7:38:6f:a8:21:8a:b3:9f:a0:
                    ef:29:8a:97:d4:fd:f3:34:87:65:9e:8f:5e:81:35:
                    fc:f5:fe:96:86:8f:d5:c8:b3:ea:7a:e7:8e:2e:bc:
                    72:9d:4a:3d:16:2f:d3:8a:96:76:4d:42:98:7c:67:
                    61:18:69:49:54:10:f6:a4:6d:1d:ad:13:df:f6:81:
                    45:c6:85:e3:60:5d:87:b3:c8:22:91:45:dd:89:ec:
                    a5:01:27:19:30:af:24:b1:d3:cf:d5:1a:d1:e3:84:
                    5d:8a:dd:6d:0b:27:c2:85:1d:8e:3b:c2:24:10:c8:
                    60:f6:7d:92:09:73:e4:b3:41:88:9d:54:d6:7d:58:
                    25:73:35:2b:98:8c:eb:f1:54:5f:a7:ff:ff:c2:70:
                    53:a4:2a:a3:5a:53:5e:dd:7a:3c:18:e9:0a:2d:62:
                    2c:b5:04:60:32:f3:c7:1d:9e:6e:e0:b7:6c:2c:86:
                    22:ea:ce:6e:0b:80:2e:f5:e7:94:2f:b4:81:78:0b:
                    f9:10:a0:f1:24:5f:95:ba:c2:6f:9b:6a:ac:76:01:
                    ef:ec:8e:03:51:b3:8d:44:8b:55:1c:f1:15:76:28:
                    40:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:91:75:80:96:21:A1:1B:15:73:8D:02:F8:9F:E2:69:4B:48:77:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853/698433db-e2ac-3ad0-8d1a-70743069e6d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853/5bac54b9-66dc-4956-863d-1804cfb9e853.crl

            X509v3 Authority Key Identifier:
                keyid:7F:4A:9A:A7:40:62:CD:6D:BF:70:19:16:CE:FD:9B:2A:27:E6:2E:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4dc0:2200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:b0:30:8f:e4:28:2a:1e:a0:01:17:d0:8e:0c:d5:35:a4:b0:
         e0:4a:55:0e:c0:45:f3:2d:08:02:99:9a:96:b3:ab:22:31:8d:
         86:7a:92:0e:7b:80:bc:38:c2:75:ac:20:24:62:f6:d4:d1:e6:
         78:5f:20:5e:97:49:b9:fb:3f:84:98:4e:cb:01:7f:b3:79:bc:
         0f:36:b8:13:29:d5:4b:3f:f5:41:61:13:f6:09:30:d2:f5:24:
         fa:76:1e:53:3d:1d:fb:d8:d0:b3:a2:7c:08:65:f1:d6:3c:4b:
         f1:fd:e8:66:f1:6b:c6:80:47:d4:28:f8:8b:96:e8:76:0c:07:
         35:1c:56:f4:3c:a4:27:a9:6e:cb:93:4a:27:78:28:64:e4:0e:
         ac:1a:65:03:db:cb:96:b6:d1:7a:8a:58:75:66:0b:d2:7c:31:
         79:4d:56:40:ab:de:56:29:d2:00:ad:82:6b:15:77:c8:69:26:
         8e:d0:19:8f:e6:e2:d0:e2:38:ec:71:48:3a:26:99:79:ce:90:
         42:c6:0c:db:ce:cb:b5:7b:65:39:4d:bf:c7:28:6d:84:3d:b5:
         d0:74:53:5d:a3:20:47:06:e3:fe:0f:5e:f0:c4:35:9d:b9:f6:
         35:c1:b1:34:ae:0b:ed:24:66:58:0e:a9:f9:53:65:6f:8e:07:
         48:b7:06:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:36:18 2024 by rpki-client on console-ams.rpki-client.org