Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebba3357-d18c-4593-b6d3-ba177a37e8d8/193919ca-2ce4-39d9-a122-7206cce219df.roa
File:                     193919ca-2ce4-39d9-a122-7206cce219df.roa (raw, json)
Hash identifier:          w15UKWQJvnehXSs0vXo/pU57ndmH/khykU0xGjJofRs=
Subject key identifier:   18:38:B6:BB:D7:54:8D:F1:DA:4D:9E:E8:7A:1E:08:CE:74:29:28:E0
Certificate issuer:       /CN=ebba3357-d18c-4593-b6d3-ba177a37e8d8
Certificate serial:       010D0C9F432858474DE60418D97F8CAFF9A90300
Authority key identifier: 87:0C:7F:E1:A3:2E:F0:64:BF:84:3A:66:18:82:4E:BA:69:9A:33:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebba3357-d18c-4593-b6d3-ba177a37e8d8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebba3357-d18c-4593-b6d3-ba177a37e8d8/193919ca-2ce4-39d9-a122-7206cce219df.roa
Signing time:             Mon 23 Sep 2024 01:00:31 +0000
ROA not before:           Mon 23 Sep 2024 01:00:31 +0000
ROA not after:            Sun 22 Dec 2024 02:00:31 +0000
asID:                     395719
IP address blocks:        2604:2940::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebba3357-d18c-4593-b6d3-ba177a37e8d8/ebba3357-d18c-4593-b6d3-ba177a37e8d8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebba3357-d18c-4593-b6d3-ba177a37e8d8/ebba3357-d18c-4593-b6d3-ba177a37e8d8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebba3357-d18c-4593-b6d3-ba177a37e8d8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4d:e6:04:18:d9:7f:8c:af:f9:a9:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebba3357-d18c-4593-b6d3-ba177a37e8d8
        Validity
            Not Before: Sep 23 01:00:31 2024 GMT
            Not After : Dec 22 02:00:31 2024 GMT
        Subject: CN=3c360279-3e35-49ef-a403-44916d5a62cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7e:be:42:98:c6:88:38:87:b4:43:0e:03:cf:
                    eb:74:b4:a3:40:59:5f:89:12:3e:f4:a6:f3:cb:8e:
                    19:e6:e6:76:9c:12:b0:4c:6a:f9:36:29:89:7a:d2:
                    26:c3:28:38:15:3c:6d:8a:3d:88:d7:65:e5:44:10:
                    10:4c:9b:98:82:86:8c:9a:ff:b5:23:d3:ec:f0:20:
                    73:89:bb:38:e1:97:1e:99:15:ac:9f:e9:0c:bd:82:
                    bd:95:fc:65:45:99:a0:94:34:c2:ae:e7:96:d1:9d:
                    7a:b7:76:b3:76:ca:f6:50:4a:fc:d6:8a:73:c2:2d:
                    13:e2:35:b4:46:1b:8b:d9:6f:77:1b:82:b3:b1:25:
                    b1:b2:86:2e:f8:35:2d:27:7b:32:b2:2b:1e:9d:e6:
                    3c:37:46:b1:1f:4a:83:17:87:82:5d:62:b7:b1:74:
                    1e:ed:db:b3:7e:2f:8e:bd:5b:59:2b:6b:c8:fe:8c:
                    b9:bd:84:a0:c7:33:45:08:32:9c:fd:13:51:42:ee:
                    21:8f:aa:2b:2d:46:7f:6f:b6:6e:7c:56:3f:73:9e:
                    8c:f0:b9:f8:5e:87:24:ea:dd:05:2f:d4:8b:10:43:
                    de:c4:83:ea:9c:8e:1d:2d:cd:39:86:23:c4:57:43:
                    71:d1:43:a4:77:f9:33:aa:a3:c7:82:5d:08:d8:80:
                    a8:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:38:B6:BB:D7:54:8D:F1:DA:4D:9E:E8:7A:1E:08:CE:74:29:28:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebba3357-d18c-4593-b6d3-ba177a37e8d8/193919ca-2ce4-39d9-a122-7206cce219df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebba3357-d18c-4593-b6d3-ba177a37e8d8/ebba3357-d18c-4593-b6d3-ba177a37e8d8.crl

            X509v3 Authority Key Identifier:
                keyid:87:0C:7F:E1:A3:2E:F0:64:BF:84:3A:66:18:82:4E:BA:69:9A:33:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebba3357-d18c-4593-b6d3-ba177a37e8d8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2940::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:16:58:b9:bc:2f:44:75:1a:e3:9a:94:61:32:00:4d:ab:f3:
         f9:9f:77:47:87:e0:37:23:b3:f2:3d:0f:14:db:8e:db:03:dd:
         92:d8:dc:7e:19:f8:7f:e8:c0:48:9c:f6:a9:55:0f:ae:7e:56:
         a5:8d:09:d9:dc:4e:42:68:23:53:e8:60:06:43:79:01:87:4a:
         29:05:3b:59:a0:f3:63:cd:f2:95:d8:32:f2:84:fa:be:65:71:
         e1:a6:f8:bc:e1:22:b6:7a:a1:29:25:f2:e1:a0:54:5f:de:58:
         4b:a4:24:55:3c:4d:ef:03:87:69:af:b1:5d:dd:e0:d2:cc:a2:
         d1:0f:3a:c2:2b:08:b9:5b:54:cf:f3:1b:db:11:a5:ea:e8:18:
         8a:b2:46:64:66:ba:a9:5b:64:50:eb:2d:a8:20:f6:01:bc:08:
         c7:43:be:3f:e5:f3:b9:05:a9:38:ab:2c:0e:04:d4:1e:07:bb:
         64:2d:5f:51:56:91:f3:63:31:e5:3f:0e:8c:6b:51:af:c2:4a:
         1d:26:76:77:c1:9f:ee:29:67:25:07:53:a4:d7:0a:8f:38:ff:
         69:a2:d2:00:cc:81:61:cf:93:4f:8e:76:b4:ca:c4:25:0a:8e:
         2e:e3:dd:c0:93:82:01:fa:7c:e2:f6:80:26:a7:c2:0c:b5:cc:
         a4:c4:83:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:23:34 2024 by rpki-client on console-fra.rpki-client.org