Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8461abaf-8773-4e40-ad91-9135219be7a4/ab4ae19a-1bc3-3ce7-b813-35939fcb77e6.roa
File:                     ab4ae19a-1bc3-3ce7-b813-35939fcb77e6.roa (raw, json)
Hash identifier:          IiqporGDutUHOHvzAxp9ZdxgH47HoMs5pHHf8lU2Gc4=
Subject key identifier:   EB:A3:A7:9B:D2:8B:07:CC:24:5B:2F:A1:E8:7D:69:0D:81:59:29:B6
Certificate issuer:       /CN=8461abaf-8773-4e40-ad91-9135219be7a4
Certificate serial:       010D0C9F432858477D5BA1FB3B8E49BE7130D980
Authority key identifier: 1A:BA:E0:13:0C:54:22:7E:8D:CE:29:E4:73:98:C4:65:1E:5D:DF:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8461abaf-8773-4e40-ad91-9135219be7a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8461abaf-8773-4e40-ad91-9135219be7a4/ab4ae19a-1bc3-3ce7-b813-35939fcb77e6.roa
Signing time:             Thu 10 Oct 2024 01:00:33 +0000
ROA not before:           Thu 10 Oct 2024 01:00:33 +0000
ROA not after:            Wed 08 Jan 2025 02:00:33 +0000
asID:                     7324
IP address blocks:        2620:c::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8461abaf-8773-4e40-ad91-9135219be7a4/8461abaf-8773-4e40-ad91-9135219be7a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8461abaf-8773-4e40-ad91-9135219be7a4/8461abaf-8773-4e40-ad91-9135219be7a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8461abaf-8773-4e40-ad91-9135219be7a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7d:5b:a1:fb:3b:8e:49:be:71:30:d9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8461abaf-8773-4e40-ad91-9135219be7a4
        Validity
            Not Before: Oct 10 01:00:33 2024 GMT
            Not After : Jan  8 02:00:33 2025 GMT
        Subject: CN=06123402-74bc-446b-942d-8d70ff3148f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d6:74:3d:be:33:dd:02:35:80:c4:55:69:b3:
                    c0:69:4f:18:ca:93:99:35:e7:16:14:76:9b:23:61:
                    e5:d6:1e:e9:c6:4b:a5:d7:97:0b:5c:7b:41:d5:a4:
                    81:2c:e8:c0:9b:fc:95:bc:b3:23:2d:76:58:a3:6b:
                    cc:0c:91:99:f7:3b:5e:4c:97:60:6b:b4:43:16:cc:
                    68:a2:7a:50:d7:03:95:4e:fe:76:25:c2:68:87:40:
                    b5:68:ab:2f:13:fb:a6:da:fd:46:83:bc:f4:c5:85:
                    fe:cd:c4:31:90:8e:cc:38:52:ee:f5:1b:f5:4a:98:
                    9e:55:47:6e:28:c7:41:39:80:8b:32:be:63:33:76:
                    6f:17:9d:32:fb:6c:7a:0e:10:1a:8f:8b:6b:65:60:
                    f2:7d:49:39:30:96:0a:98:8e:c3:d9:37:47:5a:37:
                    af:06:f9:69:f3:4e:e6:75:89:9e:63:23:24:c8:17:
                    1c:6e:e3:4a:9a:a3:1b:52:22:76:83:0c:b6:97:42:
                    9c:e8:b6:aa:c5:5d:3d:34:7b:34:14:0e:ec:f4:a1:
                    ce:38:f1:e0:0b:81:06:79:51:f5:28:9e:5e:da:d3:
                    9d:21:9a:c4:24:de:24:d3:69:7e:a5:b0:b4:0d:d1:
                    e7:71:7a:04:cb:2d:67:ee:bf:76:2b:4c:10:6f:4a:
                    b7:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:A3:A7:9B:D2:8B:07:CC:24:5B:2F:A1:E8:7D:69:0D:81:59:29:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8461abaf-8773-4e40-ad91-9135219be7a4/ab4ae19a-1bc3-3ce7-b813-35939fcb77e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8461abaf-8773-4e40-ad91-9135219be7a4/8461abaf-8773-4e40-ad91-9135219be7a4.crl

            X509v3 Authority Key Identifier:
                keyid:1A:BA:E0:13:0C:54:22:7E:8D:CE:29:E4:73:98:C4:65:1E:5D:DF:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8461abaf-8773-4e40-ad91-9135219be7a4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:c::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:40:5c:8a:2a:0e:cc:89:f1:3c:d6:7c:27:9e:b2:cb:e6:f7:
         21:e3:8e:19:a0:ef:9f:8a:db:f5:80:d2:24:ff:96:32:d7:1a:
         f5:7c:0c:76:58:f6:09:0b:62:53:50:90:96:05:97:4e:c3:2d:
         c7:fd:56:86:cb:b7:10:e4:30:7a:63:d4:88:eb:3b:a5:4b:ef:
         26:ce:33:1a:c3:f7:31:e6:2e:53:d8:da:e4:da:3e:5b:0e:65:
         d8:51:bc:26:4d:ba:07:56:5e:73:e5:27:15:ce:85:dd:46:d9:
         a8:4b:cf:83:c5:3e:05:a2:d3:e0:af:11:bd:65:12:df:31:94:
         b9:e7:51:2f:bc:25:49:5b:25:96:aa:ac:6f:15:34:d8:44:58:
         81:5d:3b:cf:9c:82:68:67:0b:2a:0a:5e:6f:07:b7:63:ba:3f:
         62:8f:f0:3e:5f:7a:f0:f0:9b:91:ec:12:4a:06:b4:fa:72:6a:
         c3:c8:1b:f7:12:95:45:eb:73:7c:ca:37:63:7c:93:59:6b:ba:
         5b:c6:82:c3:37:48:98:00:ff:73:e2:63:71:1d:b4:2b:19:e6:
         29:52:af:81:b8:b7:97:69:36:71:37:19:1c:2e:a3:6e:98:95:
         c0:0f:c7:14:9f:28:4b:84:9b:b8:db:c4:d5:84:f1:b6:68:17:
         08:1e:e4:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:05:46 2024 by rpki-client on console-fra.rpki-client.org