Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/94468bc3-3532-4788-950a-08cd97f124e9/a21fdbff-d1fd-3080-a4c6-a86d6081a023.roa
File:                     a21fdbff-d1fd-3080-a4c6-a86d6081a023.roa (raw, json)
Hash identifier:          NwhLHBx8hM7BBmK0mFj0uGmp39dXxxZ1t++hCJNgUOE=
Subject key identifier:   CD:47:33:30:0D:17:3F:EE:CD:CB:98:48:E9:3A:B0:E1:B4:CE:48:E4
Certificate issuer:       /CN=94468bc3-3532-4788-950a-08cd97f124e9
Certificate serial:       010D0C9F432858474DE601DD7B945A1702D60B80
Authority key identifier: C7:EF:7E:0C:8D:4E:2A:91:B5:9C:90:61:7D:B2:44:35:50:4E:D5:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/94468bc3-3532-4788-950a-08cd97f124e9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/94468bc3-3532-4788-950a-08cd97f124e9/a21fdbff-d1fd-3080-a4c6-a86d6081a023.roa
Signing time:             Mon 23 Sep 2024 01:00:31 +0000
ROA not before:           Mon 23 Sep 2024 01:00:31 +0000
ROA not after:            Sun 22 Dec 2024 02:00:31 +0000
asID:                     397423
IP address blocks:        2607:8cc0:2333::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/94468bc3-3532-4788-950a-08cd97f124e9/94468bc3-3532-4788-950a-08cd97f124e9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/94468bc3-3532-4788-950a-08cd97f124e9/94468bc3-3532-4788-950a-08cd97f124e9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/94468bc3-3532-4788-950a-08cd97f124e9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4d:e6:01:dd:7b:94:5a:17:02:d6:0b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94468bc3-3532-4788-950a-08cd97f124e9
        Validity
            Not Before: Sep 23 01:00:31 2024 GMT
            Not After : Dec 22 02:00:31 2024 GMT
        Subject: CN=f7e3efc1-b9fe-4ea0-8c05-326a5319520a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:16:55:b7:71:63:aa:ee:99:3f:21:0e:2c:9d:
                    e2:28:ca:98:fe:55:e2:08:79:93:23:63:f5:8d:ad:
                    1c:be:de:7a:65:5a:66:0d:50:51:27:be:ac:ef:7e:
                    e4:eb:f2:75:ee:ef:27:9f:87:df:39:5c:02:0a:41:
                    b3:2f:92:35:b0:68:55:5d:6b:b9:20:53:ed:13:42:
                    34:84:a2:36:97:5d:a1:ed:51:37:f7:b7:6d:d5:1b:
                    be:11:e0:6a:19:01:b1:45:99:5b:12:49:e1:3e:1d:
                    f9:9e:e8:71:45:9c:82:9f:f5:66:d6:70:06:d6:d1:
                    29:67:69:ba:ea:43:99:2b:ea:55:3e:fe:65:66:da:
                    39:1f:fd:0e:aa:95:8f:16:34:8e:ca:e0:39:a8:26:
                    ff:57:20:01:94:39:a3:dc:61:30:e7:06:0c:b3:ce:
                    c7:de:4b:5b:e9:09:a4:dc:68:f0:19:f7:1d:fa:9d:
                    7e:5d:7c:55:71:89:f8:a8:b7:9f:46:3d:55:eb:fe:
                    5c:5b:23:cb:4b:0f:86:ce:78:24:70:fe:83:7f:df:
                    ad:e8:76:3a:bc:92:65:d8:11:53:bf:45:13:15:47:
                    75:38:ce:f8:50:94:5e:4b:f2:74:06:34:f2:6d:b2:
                    94:eb:9d:e2:9e:bc:ea:58:82:86:9a:fd:7d:94:25:
                    a0:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:47:33:30:0D:17:3F:EE:CD:CB:98:48:E9:3A:B0:E1:B4:CE:48:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/94468bc3-3532-4788-950a-08cd97f124e9/a21fdbff-d1fd-3080-a4c6-a86d6081a023.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/94468bc3-3532-4788-950a-08cd97f124e9/94468bc3-3532-4788-950a-08cd97f124e9.crl

            X509v3 Authority Key Identifier:
                keyid:C7:EF:7E:0C:8D:4E:2A:91:B5:9C:90:61:7D:B2:44:35:50:4E:D5:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/94468bc3-3532-4788-950a-08cd97f124e9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8cc0:2333::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:7d:ab:33:6b:6f:a8:44:a0:5b:12:b3:61:44:fe:78:a5:cc:
         9c:d1:14:a8:6a:c4:66:83:a2:e2:34:7c:aa:a8:b4:b7:d5:2f:
         d1:f5:74:b7:76:fb:93:6a:32:ef:f2:72:e2:fc:ad:70:07:1f:
         ad:32:23:3c:9d:dd:a3:7a:b1:f6:64:1a:10:1c:c9:be:28:03:
         e2:76:58:ab:dc:3e:6b:0c:e1:83:93:fd:3c:dd:42:6b:6d:d2:
         e9:b1:88:02:d5:3f:43:56:20:6a:a4:22:0a:16:60:50:f8:7c:
         2c:b3:1f:f0:27:a9:56:72:d5:e5:28:9f:ed:0d:71:ab:66:eb:
         f0:06:d8:9e:eb:dc:76:dc:7c:30:d9:92:e4:7b:e2:45:7a:06:
         d2:91:b7:cd:0e:9c:36:07:da:58:ee:f5:92:59:ae:2f:e9:f7:
         55:22:9c:34:e9:73:40:45:1e:2a:03:27:d5:7d:de:78:42:ab:
         36:0e:5d:45:de:f4:90:89:8f:7a:11:af:17:e6:fc:ec:ac:4c:
         f7:21:8f:dd:6f:36:39:20:0b:0b:ef:ee:93:d4:44:13:c7:31:
         43:53:40:e7:88:07:96:5d:a7:73:c7:ee:70:97:b0:f0:a5:b5:
         79:5b:f7:65:5d:2a:9d:1f:9f:a5:8c:84:b8:b5:16:96:77:29:
         5a:2b:bd:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 17:22:02 2024 by rpki-client on console-fra.rpki-client.org