Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e780065-6b4a-42e5-ba6a-2cc340001aa7/31cbd917-336f-36f9-8b83-63114822077b.roa
File:                     31cbd917-336f-36f9-8b83-63114822077b.roa (raw, json)
Hash identifier:          DIXCaA7uMtk239Crz6tSFIz/JuTK5mhbkDwXP+DtrL8=
Subject key identifier:   0A:F2:8A:66:7D:39:82:15:75:B0:6C:9A:3C:C5:B7:66:8E:2E:85:8C
Certificate issuer:       /CN=1e780065-6b4a-42e5-ba6a-2cc340001aa7
Certificate serial:       010D0C9F4328584789EBF59C1E908016B8181D80
Authority key identifier: EA:AC:32:BC:04:72:09:79:83:73:10:B1:70:78:31:B0:9D:CF:46:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e780065-6b4a-42e5-ba6a-2cc340001aa7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e780065-6b4a-42e5-ba6a-2cc340001aa7/31cbd917-336f-36f9-8b83-63114822077b.roa
Signing time:             Mon 14 Oct 2024 13:00:47 +0000
ROA not before:           Mon 14 Oct 2024 13:00:47 +0000
ROA not after:            Sun 12 Jan 2025 14:00:47 +0000
asID:                     22215
IP address blocks:        2607:f558:400::/40 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e780065-6b4a-42e5-ba6a-2cc340001aa7/1e780065-6b4a-42e5-ba6a-2cc340001aa7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e780065-6b4a-42e5-ba6a-2cc340001aa7/1e780065-6b4a-42e5-ba6a-2cc340001aa7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e780065-6b4a-42e5-ba6a-2cc340001aa7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:89:eb:f5:9c:1e:90:80:16:b8:18:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e780065-6b4a-42e5-ba6a-2cc340001aa7
        Validity
            Not Before: Oct 14 13:00:47 2024 GMT
            Not After : Jan 12 14:00:47 2025 GMT
        Subject: CN=13b9669d-5f32-4a6e-90b3-8a0009631efa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:82:7f:3e:7b:d4:73:9a:ea:7c:d1:4e:1a:6a:
                    b9:ed:f7:7f:e6:4e:87:21:72:3a:0c:08:b8:18:03:
                    3c:e6:69:85:99:c0:67:68:c2:d9:dc:03:6f:7b:4e:
                    c3:58:98:ba:62:f6:61:e9:af:c6:4d:86:f5:da:d5:
                    37:45:c0:01:c2:21:69:15:69:94:2b:5e:fd:14:31:
                    6b:80:c5:82:58:d6:85:46:c5:84:03:de:97:fe:10:
                    99:e3:87:88:8c:47:cb:9f:a3:fb:08:21:43:78:5e:
                    44:50:94:39:ee:1f:b1:dc:da:36:c3:be:be:07:4b:
                    7c:61:8b:a8:94:09:4a:34:a8:30:3a:76:07:d2:1a:
                    69:1d:a0:03:32:40:4a:41:18:28:ab:c7:d8:7b:e5:
                    8e:91:17:1b:db:27:3b:a8:cf:71:ff:a3:64:ea:9b:
                    ad:e2:df:2a:91:1b:7b:c9:c0:c9:0b:07:ad:eb:a6:
                    8b:50:c5:74:d1:ac:91:69:3e:f5:f5:51:4b:45:5b:
                    27:8d:13:2f:9b:04:36:19:66:ac:c1:b4:a4:26:df:
                    f6:02:17:31:87:98:bb:83:74:b0:17:77:0f:ea:02:
                    16:11:6a:e2:76:f0:db:eb:1e:4b:3f:12:97:f5:c5:
                    f8:a0:bd:06:c8:44:92:b1:c6:4b:1e:13:1a:d9:b3:
                    24:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:F2:8A:66:7D:39:82:15:75:B0:6C:9A:3C:C5:B7:66:8E:2E:85:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e780065-6b4a-42e5-ba6a-2cc340001aa7/31cbd917-336f-36f9-8b83-63114822077b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e780065-6b4a-42e5-ba6a-2cc340001aa7/1e780065-6b4a-42e5-ba6a-2cc340001aa7.crl

            X509v3 Authority Key Identifier:
                keyid:EA:AC:32:BC:04:72:09:79:83:73:10:B1:70:78:31:B0:9D:CF:46:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e780065-6b4a-42e5-ba6a-2cc340001aa7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f558:400::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:98:08:41:f2:1e:08:2e:a1:41:7c:45:90:6d:eb:16:32:69:
         8b:78:39:51:86:8e:6f:2d:1b:c7:d3:74:a4:99:90:14:3f:cf:
         bb:df:79:19:f4:69:f4:b4:e2:79:35:14:d7:3f:55:a3:70:ec:
         a1:a3:a2:f8:c9:61:e7:8b:ea:03:aa:b8:33:df:94:75:ab:53:
         ce:33:61:1a:b7:b0:df:66:59:57:59:01:74:8a:c1:ca:2b:80:
         af:0a:a1:41:72:76:31:23:c4:56:fc:fb:d3:b9:a9:4e:b5:b4:
         21:b0:74:f5:29:66:7d:1a:91:17:6b:77:86:96:48:89:5a:3d:
         63:0e:0f:ce:23:10:c3:d6:e1:05:61:dd:7b:d0:8e:24:92:3c:
         50:56:bc:a7:bc:91:a6:a8:43:9b:88:5e:8e:67:82:b3:8e:5e:
         52:8b:73:7a:3a:48:48:7e:90:a7:e7:5a:03:e4:4a:5d:5c:6f:
         1a:cc:30:6d:ce:6e:59:aa:bb:f7:29:1c:2d:1b:e5:0e:f9:0f:
         5a:73:ad:95:33:a6:ad:01:e6:31:89:53:8b:c8:b3:87:c9:39:
         1b:b4:a3:f1:e0:bc:28:78:c8:d8:70:9c:e5:94:90:94:ac:7d:
         79:5f:d3:b0:55:f8:b7:8b:70:ab:77:5b:d0:be:04:fe:a4:cd:
         71:2e:bd:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:20:48 2024 by rpki-client on console-fra.rpki-client.org