Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d48eeb3c-0fe2-3714-b85b-a5fa9fc78aa4.roa
File:                     d48eeb3c-0fe2-3714-b85b-a5fa9fc78aa4.roa (raw, json)
Hash identifier:          0BvxrbK7E6tfQ7pYOkK74I2zQBpbH7haMvW9KCZwRYY=
Subject key identifier:   B7:8E:0C:E2:A1:F9:47:E7:0A:EC:3F:A3:65:AF:AB:1E:74:EB:9B:DE
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F43285847D0ACFE7F40E2F495355FBA80
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d48eeb3c-0fe2-3714-b85b-a5fa9fc78aa4.roa
Signing time:             Fri 08 Nov 2024 21:16:39 +0000
ROA not before:           Fri 08 Nov 2024 21:16:39 +0000
ROA not after:            Thu 06 Feb 2025 21:16:39 +0000
asID:                     62651
IP address blocks:        2604:c980:3400::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d0:ac:fe:7f:40:e2:f4:95:35:5f:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Nov  8 21:16:39 2024 GMT
            Not After : Feb  6 21:16:39 2025 GMT
        Subject: CN=fad6a544-87fa-45dc-9f19-e58c4186b19f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:96:59:4f:d8:19:4a:31:f1:bc:f1:93:98:8b:
                    43:3f:22:13:4b:89:79:67:b7:20:13:34:09:b2:f7:
                    de:93:f3:2f:dd:dc:bf:0e:d9:f3:70:ea:50:c2:60:
                    75:7b:bf:0f:58:f2:8f:0a:f1:dd:a2:82:71:0f:9f:
                    25:8f:30:b7:f2:1e:6f:1c:7e:92:ff:68:b9:24:a5:
                    63:58:06:5d:4e:b3:9d:21:a6:fd:ab:eb:c7:db:25:
                    30:76:b1:08:b4:3c:c6:d3:6a:3e:10:08:67:27:b3:
                    2a:d2:99:b3:a9:f6:bd:57:5d:43:b2:ee:98:d4:e6:
                    14:c7:3d:c8:2b:b6:43:a5:15:99:bc:ad:65:bf:19:
                    b3:26:48:03:66:68:a6:f5:9a:da:53:70:94:61:60:
                    8d:77:16:32:29:3c:b4:9f:df:62:ce:70:0e:d2:68:
                    2e:47:67:12:3d:35:b5:55:90:82:aa:b1:3c:ee:90:
                    01:3f:c0:8d:f9:8a:45:52:b6:37:10:e0:c3:70:64:
                    55:6e:c4:94:c3:2f:9e:4b:fe:51:75:0e:90:e8:1a:
                    8b:06:ef:d7:7d:46:2f:6f:b7:9b:c7:1e:53:4d:57:
                    10:21:1e:2b:67:9d:cf:ee:c5:15:50:f0:28:bd:73:
                    77:d8:72:c0:74:98:f3:ca:03:a6:c5:e1:ee:e1:73:
                    ca:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:8E:0C:E2:A1:F9:47:E7:0A:EC:3F:A3:65:AF:AB:1E:74:EB:9B:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d48eeb3c-0fe2-3714-b85b-a5fa9fc78aa4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:c980:3400::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:85:6d:02:06:db:dd:16:09:26:49:68:3c:2f:c2:c4:21:21:
         9c:00:6e:12:fa:48:60:f9:9a:aa:56:66:4c:ba:66:bb:2b:19:
         b3:f6:ee:80:2a:1d:4f:21:6b:a3:c8:10:50:8c:8d:88:e7:c9:
         5f:82:e1:9a:d5:1f:4c:e3:17:d4:b1:6a:3a:60:1f:24:9e:01:
         4c:34:8f:77:db:2a:09:ec:12:29:52:aa:10:71:77:61:5a:6e:
         16:3b:26:59:94:ff:f6:0e:29:61:e2:89:db:b5:44:cc:b9:e5:
         25:c6:c8:bb:12:af:28:92:ee:06:2c:fc:d9:ca:80:55:6d:25:
         cb:ac:68:da:4a:65:80:2d:ed:9b:c5:59:55:1b:39:8a:f9:f3:
         b4:55:9e:d5:c5:07:5e:4d:f3:0c:66:14:39:48:cb:f1:c5:d2:
         ab:7e:ac:e1:55:8d:92:1f:e9:ed:32:7d:68:06:42:fa:d8:f3:
         5f:93:47:4a:ad:9b:b7:37:df:92:93:ff:3b:77:d3:16:43:13:
         50:94:ee:16:13:25:02:f4:4b:26:21:80:a9:be:c1:9c:88:fc:
         6f:fa:71:5e:2a:19:d0:57:22:24:8a:b9:2e:e9:d1:0c:4a:1d:
         bb:99:50:34:1b:6d:65:f5:0e:58:89:f4:e7:74:f8:2f:27:3e:
         eb:6f:12:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:10:50 2024 by rpki-client on console-ams.rpki-client.org