Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/92ecd3af-616b-30b8-8f04-b100fd223035.roa
File:                     92ecd3af-616b-30b8-8f04-b100fd223035.roa (raw, json)
Hash identifier:          ZyW4euL/JVLN51uMlIm76dTADiYXX+oUcpMW1SlBG/8=
Subject key identifier:   B7:D9:06:FF:CE:40:93:C0:76:85:FC:7E:12:BE:0A:F0:A6:F4:06:B6
Certificate issuer:       /CN=cd8deff7-6be9-4d16-8349-9f6439775b0a
Certificate serial:       010D0C9F432858471A406C3FE2A47A05F27F0658
Authority key identifier: CE:14:25:01:6D:C5:67:B9:24:32:56:F1:DC:CA:9A:A3:B7:DD:74:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/92ecd3af-616b-30b8-8f04-b100fd223035.roa
Signing time:             Wed 04 Sep 2024 13:00:41 +0000
ROA not before:           Wed 04 Sep 2024 13:00:41 +0000
ROA not after:            Tue 03 Dec 2024 14:00:41 +0000
asID:                     2728
IP address blocks:        2605:7b80::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/cd8deff7-6be9-4d16-8349-9f6439775b0a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/cd8deff7-6be9-4d16-8349-9f6439775b0a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1a:40:6c:3f:e2:a4:7a:05:f2:7f:06:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd8deff7-6be9-4d16-8349-9f6439775b0a
        Validity
            Not Before: Sep  4 13:00:41 2024 GMT
            Not After : Dec  3 14:00:41 2024 GMT
        Subject: CN=cf3af1cc-b140-42d1-9cc5-ff68caaba3f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:8e:6f:11:4c:f2:6b:1a:ef:19:29:a3:a0:fb:
                    72:e4:c5:b7:39:ec:cc:07:5a:84:8f:bc:b5:e3:17:
                    b9:eb:55:c8:9f:17:85:16:50:c3:b7:c3:ce:68:74:
                    b3:da:97:3f:0e:12:14:40:0e:ab:10:f3:3f:15:eb:
                    62:32:a9:ee:ca:cd:70:38:a1:8d:cf:95:83:e1:48:
                    97:28:b7:f8:cd:32:92:29:d5:eb:dd:9e:88:aa:7c:
                    91:96:c9:43:78:42:96:1d:d7:65:34:c7:d1:a1:76:
                    f1:ee:29:62:b0:b2:bd:16:15:d2:54:de:fd:f2:92:
                    0e:a2:60:ac:1e:a8:06:6f:a2:be:17:99:90:fa:71:
                    73:51:96:4d:48:f2:97:01:43:5b:62:10:33:af:92:
                    e6:cb:05:b5:5c:2f:05:b2:86:34:24:29:0d:41:66:
                    12:9c:5d:52:5e:fc:bf:d1:c1:f1:eb:ad:7f:29:06:
                    d2:1d:a6:5a:a4:01:44:92:0f:80:7a:69:06:17:4d:
                    c2:80:d5:13:0f:58:b7:61:fc:fd:79:7c:c7:c8:90:
                    e5:53:1d:e5:c2:30:1e:31:39:a7:48:be:9d:f1:34:
                    2b:a1:12:f3:66:db:a0:ef:2d:95:ce:2f:e1:69:7e:
                    5b:0a:82:ad:27:c8:8d:55:b4:27:f4:7e:84:03:ec:
                    1f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:D9:06:FF:CE:40:93:C0:76:85:FC:7E:12:BE:0A:F0:A6:F4:06:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/92ecd3af-616b-30b8-8f04-b100fd223035.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/cd8deff7-6be9-4d16-8349-9f6439775b0a.crl

            X509v3 Authority Key Identifier:
                keyid:CE:14:25:01:6D:C5:67:B9:24:32:56:F1:DC:CA:9A:A3:B7:DD:74:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:7b80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:ed:28:d4:31:48:fd:85:7b:06:27:9f:d0:20:c0:b3:f6:c0:
         1a:59:f6:11:88:ae:3e:7f:1d:97:e1:3a:f2:df:40:ec:5c:96:
         f2:34:99:dc:69:1c:c2:dd:93:3f:c6:ec:74:3e:dd:02:31:bf:
         58:20:5f:f0:70:1d:13:f0:1c:51:af:6f:94:1c:88:cb:cd:0d:
         d3:cf:da:e1:ef:58:78:a8:64:12:6b:02:da:74:0e:42:4b:9d:
         2a:e0:7e:24:3f:29:35:88:ec:94:81:e3:b1:1a:89:d9:89:b2:
         7c:1c:24:61:2a:52:6a:d1:6b:41:25:f4:ee:f0:56:eb:da:91:
         e6:26:48:da:49:77:82:84:19:7d:a5:da:cf:24:8b:b6:2c:68:
         7e:77:af:38:1b:82:5f:f0:6c:ac:4a:97:ac:63:56:a9:fe:c2:
         45:8c:4e:71:6b:fd:f5:a1:11:d7:e1:df:6c:66:df:bd:f2:56:
         5a:eb:6f:ee:4a:b9:8e:5e:65:b5:42:b5:1d:92:15:e3:75:1c:
         f2:67:d7:4f:bb:53:ae:ea:85:1c:26:cb:b5:7c:0d:10:b3:14:
         9d:ee:4f:2e:2f:e0:e2:5e:6f:82:66:58:e2:61:91:8f:d0:37:
         6a:11:ad:35:f8:2c:67:08:3e:fb:ba:38:ea:6d:28:96:5d:27:
         9f:11:d9:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:55:04 2024 by rpki-client on console-ams.rpki-client.org