Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/297768e8-9a41-36b4-bfa4-cbd33ddc9ae4.roa
File:                     297768e8-9a41-36b4-bfa4-cbd33ddc9ae4.roa (raw, json)
Hash identifier:          Q4S8050d84RkG1BF4RbrAd55MpPgnb/P9E9EwGtLKNY=
Subject key identifier:   6D:D8:F7:BE:1D:E0:EE:1B:BF:2C:B6:10:72:65:16:BA:16:57:99:5B
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F43285847CBA48063CC06A5971AB18140
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/297768e8-9a41-36b4-bfa4-cbd33ddc9ae4.roa
Signing time:             Thu 07 Nov 2024 02:00:28 +0000
ROA not before:           Thu 07 Nov 2024 02:00:28 +0000
ROA not after:            Wed 05 Feb 2025 02:00:28 +0000
asID:                     62651
IP address blocks:        2604:fc80:1000::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cb:a4:80:63:cc:06:a5:97:1a:b1:81:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Nov  7 02:00:28 2024 GMT
            Not After : Feb  5 02:00:28 2025 GMT
        Subject: CN=b2c7f170-8afb-4528-a90d-beda6f0273eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:e5:ce:82:3c:6b:82:b2:8c:06:e4:58:9e:23:
                    d3:96:39:bc:3d:30:2e:73:19:2a:7f:e1:b6:5f:f5:
                    35:2c:92:ea:80:eb:e5:fc:b5:e8:f6:90:ba:d8:d8:
                    16:4f:82:d6:4f:c8:d9:88:7f:19:c4:2d:e3:b5:9f:
                    0c:72:83:15:91:7d:82:36:43:35:9c:c1:3d:ff:27:
                    4a:73:a6:3a:7c:79:f9:74:33:08:03:fe:36:8a:cc:
                    f4:4e:af:a4:fe:5e:82:e7:1d:75:95:1b:54:b4:b4:
                    1a:a9:57:87:9d:de:a6:a6:33:28:81:8e:2b:0d:ac:
                    ff:fc:d4:96:11:9d:ab:d4:d0:95:a9:ab:8d:27:ff:
                    47:d4:27:97:ea:29:c8:24:44:a1:6a:c8:6b:46:cc:
                    d8:6f:b6:31:16:bc:f0:bd:77:ea:de:ed:5d:81:db:
                    78:64:22:72:c1:e5:36:f8:eb:bb:af:c8:f0:3e:c6:
                    d3:3f:1b:8e:7f:b0:a0:8f:9c:d6:9a:37:96:88:36:
                    5d:80:9e:60:71:1a:34:13:a4:25:ca:b0:64:f1:15:
                    70:6d:71:18:16:21:11:00:72:0c:fc:9d:fc:ab:e9:
                    6b:71:dc:80:08:a3:42:ba:20:ea:20:65:5f:5e:3a:
                    1e:7e:be:78:0e:ac:ef:67:12:a9:ff:7c:e8:d1:8e:
                    c1:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:D8:F7:BE:1D:E0:EE:1B:BF:2C:B6:10:72:65:16:BA:16:57:99:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/297768e8-9a41-36b4-bfa4-cbd33ddc9ae4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:fc80:1000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:db:e5:4e:95:f0:77:6f:0f:43:e2:86:17:4b:11:09:ed:ed:
         14:78:70:d5:4e:b5:4e:fe:65:67:d4:1b:a3:cd:42:cc:1f:70:
         99:d8:43:76:a8:59:3b:9c:49:3a:b7:03:5b:68:ce:35:3c:bc:
         d3:71:94:ec:08:6c:73:57:59:02:79:f0:88:27:42:87:54:93:
         51:01:a4:65:96:a9:42:c6:42:da:fd:4e:fd:f1:5a:2b:b2:65:
         0e:f6:89:76:06:1e:41:5e:c9:8a:31:e9:28:f1:67:bb:4b:ee:
         c0:9f:40:d1:78:ca:47:28:53:d7:aa:b1:18:62:59:08:08:60:
         f0:66:91:92:6b:3b:02:d7:7f:3a:94:77:a8:16:89:e7:e8:13:
         9f:07:c6:4d:cd:6f:82:3d:b1:bf:33:d3:bd:fb:3a:c9:ca:27:
         ac:03:67:34:50:32:47:48:ad:ff:a5:b5:10:ae:81:ca:53:d4:
         87:0c:c7:13:65:5f:7f:dc:0a:56:a5:9c:62:58:68:40:02:94:
         7c:75:d5:27:f4:3f:4e:c0:4c:28:0d:14:13:b5:c9:d5:03:03:
         a7:5a:86:96:f1:6e:88:0e:62:ec:aa:7b:c0:24:f1:b7:9f:c1:
         64:7d:26:64:48:ac:b5:b9:9e:28:5a:a6:70:17:60:ed:9d:c1:
         2b:3a:41:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:39:37 2024 by rpki-client on console-fra.rpki-client.org