Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9b1ca75e-4539-4223-b200-925398eb3409/8d419152-cb9a-3d9d-b08f-c378f5e8aa3c.roa
File:                     8d419152-cb9a-3d9d-b08f-c378f5e8aa3c.roa (raw, json)
Hash identifier:          Sp4CGARlK6BEVPOsL1HtQjk8iQPGNpL9DF3UYGbNQ5M=
Subject key identifier:   F2:BA:2F:24:0B:D7:FC:04:F3:04:33:05:9E:34:BB:92:F7:F9:AE:45
Certificate issuer:       /CN=9b1ca75e-4539-4223-b200-925398eb3409
Certificate serial:       010D0C9F4328584750B0AB8E7557F23BC8DF1800
Authority key identifier: DD:74:9D:1A:2F:AF:94:47:44:4E:AA:33:8B:1B:60:1C:CA:04:0E:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9b1ca75e-4539-4223-b200-925398eb3409.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9b1ca75e-4539-4223-b200-925398eb3409/8d419152-cb9a-3d9d-b08f-c378f5e8aa3c.roa
Signing time:             Tue 24 Sep 2024 01:00:31 +0000
ROA not before:           Tue 24 Sep 2024 01:00:31 +0000
ROA not after:            Mon 23 Dec 2024 02:00:31 +0000
asID:                     16509
IP address blocks:        2607:a940:b000::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9b1ca75e-4539-4223-b200-925398eb3409/9b1ca75e-4539-4223-b200-925398eb3409.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9b1ca75e-4539-4223-b200-925398eb3409/9b1ca75e-4539-4223-b200-925398eb3409.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9b1ca75e-4539-4223-b200-925398eb3409.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:50:b0:ab:8e:75:57:f2:3b:c8:df:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b1ca75e-4539-4223-b200-925398eb3409
        Validity
            Not Before: Sep 24 01:00:31 2024 GMT
            Not After : Dec 23 02:00:31 2024 GMT
        Subject: CN=aaf3dc5b-52b0-4d93-afab-f77bc28bf354
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:0b:a1:63:47:df:bd:98:3a:5b:60:05:ea:f0:
                    70:36:2f:07:84:24:ac:26:04:bd:28:d7:ab:61:cb:
                    a1:88:4e:82:15:52:fb:2d:0a:46:d9:39:ce:e8:08:
                    99:40:43:ac:5f:4e:9d:02:4d:48:b0:2b:c6:40:36:
                    3f:83:f3:d5:a6:65:65:40:77:f9:a3:f8:3c:e0:e8:
                    fc:dc:5d:e4:ef:21:70:2d:6f:bc:31:00:e4:58:e8:
                    29:c8:4a:53:9d:ec:fb:c7:96:72:46:99:ad:ab:e3:
                    d7:a8:e5:78:be:11:71:82:f3:f0:32:23:fd:e1:3c:
                    99:05:55:0c:68:7c:08:cc:11:d9:50:97:e3:c3:8e:
                    43:2e:74:87:6c:b9:e7:fa:76:86:f1:9e:d7:d5:66:
                    e8:4c:f5:83:b4:0d:db:f7:b6:3e:aa:7a:e9:65:22:
                    b2:7f:f0:29:c7:b9:e2:4a:42:ff:f7:6a:aa:ca:95:
                    12:24:64:cb:da:54:45:e2:21:11:17:45:c9:6f:fe:
                    5f:20:6f:f6:e1:0f:9d:4c:31:4f:dd:c2:83:28:4a:
                    fd:db:d1:d5:64:46:c8:fd:cf:5a:6b:57:9d:2d:73:
                    56:e0:d7:bc:23:81:0e:cf:8a:02:30:a8:de:c4:8b:
                    76:0b:d0:9e:16:77:72:67:52:42:33:66:65:c0:f9:
                    af:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:BA:2F:24:0B:D7:FC:04:F3:04:33:05:9E:34:BB:92:F7:F9:AE:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9b1ca75e-4539-4223-b200-925398eb3409/8d419152-cb9a-3d9d-b08f-c378f5e8aa3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9b1ca75e-4539-4223-b200-925398eb3409/9b1ca75e-4539-4223-b200-925398eb3409.crl

            X509v3 Authority Key Identifier:
                keyid:DD:74:9D:1A:2F:AF:94:47:44:4E:AA:33:8B:1B:60:1C:CA:04:0E:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9b1ca75e-4539-4223-b200-925398eb3409.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:a940:b000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:ca:ed:1d:c6:43:f6:b6:ed:e5:91:fe:1b:ed:7c:dd:6c:82:
         f1:85:d1:69:b0:ab:de:c4:d0:09:98:8b:60:d3:ee:36:93:15:
         9e:23:e8:a2:ad:a0:7b:2d:1c:e8:fc:06:cf:53:86:85:9d:71:
         56:c9:0c:d4:5c:e9:d1:44:33:c4:ab:21:ac:99:62:23:46:2e:
         6c:75:9f:88:6e:d4:85:b7:a7:71:f2:f4:ee:6c:6e:2f:13:a0:
         92:04:c4:40:e3:27:bf:39:e3:af:d0:14:3e:c5:df:8d:06:e0:
         c0:4f:b9:c4:fa:64:cd:34:0b:88:51:41:a9:24:59:40:89:fb:
         31:a0:d6:b7:f1:a4:9b:4f:24:ce:73:e6:7c:4c:58:f2:33:cf:
         6c:e6:a8:36:bd:1f:2e:e5:53:74:52:3a:d0:8b:5c:c2:03:c2:
         19:2b:9f:78:24:8b:9a:d1:e1:81:22:bf:0e:cf:cb:00:56:fd:
         48:50:5a:dd:86:c8:40:b5:f6:14:e4:42:0b:9e:65:00:3d:f1:
         04:5a:ce:68:d3:01:42:93:21:8e:55:a0:00:58:8d:9d:45:6a:
         9f:ff:0c:70:c4:3c:6b:bd:12:6c:17:9c:db:de:72:a0:af:de:
         b3:6a:e6:16:bc:03:f5:1e:7d:c1:fa:9c:08:a7:86:ef:26:fa:
         c9:8c:07:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:05:47 2024 by rpki-client on console-fra.rpki-client.org