Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e780065-6b4a-42e5-ba6a-2cc340001aa7/3616c078-9508-3138-ba84-837c4213bf7c.roa
File:                     3616c078-9508-3138-ba84-837c4213bf7c.roa (raw, json)
Hash identifier:          llzPK1TUDfUUjvsdiLYTBjjAr16V3jN9yobLgxZicnE=
Subject key identifier:   C4:42:75:1B:14:57:28:B9:AC:BA:63:B2:C0:AB:76:99:1C:D9:10:BD
Certificate issuer:       /CN=1e780065-6b4a-42e5-ba6a-2cc340001aa7
Certificate serial:       010D0C9F4328584789EBFB2754D6EF1C43155000
Authority key identifier: EA:AC:32:BC:04:72:09:79:83:73:10:B1:70:78:31:B0:9D:CF:46:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e780065-6b4a-42e5-ba6a-2cc340001aa7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e780065-6b4a-42e5-ba6a-2cc340001aa7/3616c078-9508-3138-ba84-837c4213bf7c.roa
Signing time:             Mon 14 Oct 2024 13:00:47 +0000
ROA not before:           Mon 14 Oct 2024 13:00:47 +0000
ROA not after:            Sun 12 Jan 2025 14:00:47 +0000
asID:                     33189
IP address blocks:        2607:f558::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e780065-6b4a-42e5-ba6a-2cc340001aa7/1e780065-6b4a-42e5-ba6a-2cc340001aa7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e780065-6b4a-42e5-ba6a-2cc340001aa7/1e780065-6b4a-42e5-ba6a-2cc340001aa7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e780065-6b4a-42e5-ba6a-2cc340001aa7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:89:eb:fb:27:54:d6:ef:1c:43:15:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e780065-6b4a-42e5-ba6a-2cc340001aa7
        Validity
            Not Before: Oct 14 13:00:47 2024 GMT
            Not After : Jan 12 14:00:47 2025 GMT
        Subject: CN=728b1f4e-bceb-4dc3-8e64-4f9735529bbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:9a:ac:56:a2:96:95:ac:55:20:4a:ef:7d:d9:
                    1b:e6:45:19:11:19:b2:67:77:e6:80:30:b9:3c:1f:
                    6d:70:03:5e:9e:10:92:99:6a:c8:96:a2:e5:a3:e9:
                    5d:a0:2a:49:72:c3:26:b1:ac:7c:0a:c6:4b:92:bd:
                    d4:9a:58:65:ba:36:49:90:a6:04:16:26:25:3f:13:
                    fc:76:1b:29:45:00:a9:05:cc:a0:0f:f9:a7:8a:4d:
                    f2:cd:08:30:1e:bf:88:d7:2d:a1:7b:ea:29:77:a4:
                    ab:ec:bd:40:25:90:83:13:df:b3:2b:e9:9c:ee:35:
                    36:55:ff:8c:ee:06:6f:db:0b:87:2a:ab:b5:d5:4a:
                    51:79:e2:ce:c6:a2:69:b8:d6:9a:e3:be:d9:53:65:
                    a4:e9:7f:e4:20:cb:7f:0d:f8:03:f8:d3:9a:b8:25:
                    c0:56:f7:a2:b5:ff:dc:2f:96:cd:13:cf:c7:bf:3c:
                    70:ea:b7:4d:71:89:88:d5:bc:c6:cd:86:7d:29:93:
                    46:9c:15:18:d4:8b:d0:69:7a:89:c4:61:e3:0a:2f:
                    f7:c6:f8:38:b8:48:9a:67:7f:c0:f0:cf:db:fa:38:
                    a2:94:dc:12:f6:b7:43:81:aa:1c:2c:f6:d1:7c:bf:
                    aa:5f:ae:51:45:06:6c:2f:c5:fd:39:22:37:02:89:
                    98:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:42:75:1B:14:57:28:B9:AC:BA:63:B2:C0:AB:76:99:1C:D9:10:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e780065-6b4a-42e5-ba6a-2cc340001aa7/3616c078-9508-3138-ba84-837c4213bf7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e780065-6b4a-42e5-ba6a-2cc340001aa7/1e780065-6b4a-42e5-ba6a-2cc340001aa7.crl

            X509v3 Authority Key Identifier:
                keyid:EA:AC:32:BC:04:72:09:79:83:73:10:B1:70:78:31:B0:9D:CF:46:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e780065-6b4a-42e5-ba6a-2cc340001aa7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f558::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:c7:3b:fa:26:d9:a6:83:9e:12:ad:8f:d7:77:cb:64:03:1e:
         fe:50:09:2b:cb:9d:eb:9f:8a:89:5b:6c:c8:83:33:c6:84:61:
         c1:01:ce:c6:06:3e:e9:a1:07:de:64:8a:ed:9b:51:af:e6:23:
         ce:b6:48:da:be:4f:02:cc:9f:53:fa:77:89:76:ea:ea:84:c9:
         a2:56:85:ef:4f:31:86:c7:47:9e:65:1c:22:a2:6e:4e:f6:88:
         01:75:f1:55:03:95:b8:fe:a7:6b:22:77:14:a4:17:63:05:f2:
         7b:85:b3:0e:c3:32:82:e7:74:df:cb:e8:67:94:8f:5e:d3:da:
         c9:0f:39:cd:39:4f:50:0c:66:ae:e0:51:fa:46:6e:6f:18:b8:
         0c:e1:b2:28:80:af:11:87:89:89:dd:5a:64:49:2b:ce:9d:51:
         f6:36:9d:b6:f7:87:d8:0b:18:04:5e:99:8e:8e:28:ef:48:37:
         05:73:4f:59:25:16:c5:4a:35:07:b8:1c:07:12:58:16:56:62:
         af:03:fb:93:f2:e1:68:d1:ff:bc:14:8b:30:c7:e8:be:3d:83:
         ef:dd:75:c8:41:b6:9e:3c:cf:e9:31:90:3d:61:2d:55:ea:97:
         0b:00:04:1c:58:20:cb:28:20:c9:39:0d:09:3b:35:f7:be:71:
         fb:e1:66:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:35:22 2024 by rpki-client on console-ams.rpki-client.org