Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/1f267b9f-4eb6-3e46-9931-27afe99a04ee.roa
File:                     1f267b9f-4eb6-3e46-9931-27afe99a04ee.roa (raw, json)
Hash identifier:          RsyZVBDR0qe1Xc2xIU7EqDX9rp6LHSoF3kUHJRhvQLY=
Subject key identifier:   3C:3E:C8:3D:2F:D1:0A:65:4F:B6:BD:71:C1:CF:E1:3F:7A:06:AB:7F
Certificate issuer:       /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial:       010D0C9F43285847C8D9E528497368311CEB0200
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/1f267b9f-4eb6-3e46-9931-27afe99a04ee.roa
Signing time:             Wed 06 Nov 2024 02:00:28 +0000
ROA not before:           Wed 06 Nov 2024 02:00:28 +0000
ROA not after:            Tue 04 Feb 2025 02:00:28 +0000
asID:                     9009
IP address blocks:        2607:740:1d::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c8:d9:e5:28:49:73:68:31:1c:eb:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
        Validity
            Not Before: Nov  6 02:00:28 2024 GMT
            Not After : Feb  4 02:00:28 2025 GMT
        Subject: CN=6005b8fb-ab8e-44db-b35c-a23a63846803
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4c:b4:91:08:5c:6f:7a:a9:7d:b3:b3:5d:18:
                    fa:ab:19:75:38:0c:57:d6:5c:92:75:8f:eb:91:7c:
                    5e:3c:81:e1:0d:ca:87:2b:e2:a1:c7:d8:d5:cf:c5:
                    21:d5:a7:bd:84:0e:11:1f:e2:ee:b6:4a:b3:f7:7a:
                    3a:96:8b:a1:da:76:45:05:8e:78:1d:ad:fb:37:5f:
                    f5:2e:9b:cb:bb:7b:bf:a3:10:08:52:91:b0:ac:81:
                    05:cf:26:8a:01:84:0d:a4:e1:00:2e:6e:6b:f0:a2:
                    df:bf:d6:90:d1:e5:06:a4:4f:99:05:04:7e:22:49:
                    c2:00:00:30:1d:63:e4:9e:3b:05:a0:69:43:2d:57:
                    26:28:70:92:cc:2b:f1:c9:0a:d6:33:76:2c:1a:9d:
                    6d:c0:ce:e4:5f:7f:c1:00:1a:ac:37:51:78:48:35:
                    5c:a4:7c:5e:f2:da:0c:26:01:c6:57:0b:e0:11:3a:
                    1a:a7:a7:75:e3:6b:71:ba:9f:49:5f:b1:16:12:46:
                    e0:6b:69:ec:af:58:81:ff:ca:1b:7c:7c:1e:a0:9d:
                    d2:7a:ad:77:63:5c:2c:fe:b2:d2:78:00:d8:56:dd:
                    6f:66:a9:39:23:04:19:be:6a:4b:ff:a1:e5:19:09:
                    99:5a:bf:6c:b2:75:ad:5d:e3:46:4c:c3:12:8f:82:
                    77:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:3E:C8:3D:2F:D1:0A:65:4F:B6:BD:71:C1:CF:E1:3F:7A:06:AB:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/1f267b9f-4eb6-3e46-9931-27afe99a04ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl

            X509v3 Authority Key Identifier:
                keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:740:1d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:ab:0e:90:a2:63:bd:0b:4e:bd:0b:2f:bc:43:5c:2c:fa:78:
         37:3c:dd:96:60:7a:87:87:d0:59:25:48:48:87:a9:21:ae:b7:
         04:a9:4b:a2:f8:d1:87:71:26:b6:36:04:28:1b:67:7d:68:f0:
         01:03:ce:80:04:4c:b9:54:3c:26:8b:ae:89:7f:ac:66:d1:75:
         29:56:b3:28:29:f0:aa:4c:2f:7c:cb:2c:3b:b3:02:54:08:27:
         f3:d8:f7:8b:ad:b0:8b:cb:b7:01:43:9c:a4:24:d1:de:4e:80:
         af:6e:27:79:e0:0a:94:35:2b:40:92:58:00:f3:5b:59:ea:c3:
         c0:f4:2c:f0:93:44:e4:6c:f5:bb:b0:91:b3:77:0e:12:de:e9:
         36:63:ed:98:f1:96:8d:d9:48:28:ca:dd:ff:34:f3:18:9d:2b:
         83:af:f7:4b:32:15:f1:6b:08:f0:a2:78:fc:dc:d2:aa:14:20:
         7c:22:70:0a:46:d5:27:ba:a3:44:3a:62:3e:65:1d:3c:c8:92:
         27:9f:e1:b3:d7:77:89:55:a5:cd:cc:6f:61:97:be:be:d5:9c:
         f6:06:5e:e0:56:42:c9:07:b0:b2:5a:0b:18:01:83:45:c4:dd:
         71:d0:2e:e6:3a:d7:8b:c5:4c:15:1c:a4:8e:3a:4f:25:3d:9e:
         76:29:39:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:55:06 2024 by rpki-client on console-ams.rpki-client.org