Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/a1c1cd8d-cf72-36a6-a480-8fc9b46e58f9.roa
File:                     a1c1cd8d-cf72-36a6-a480-8fc9b46e58f9.roa (raw, json)
Hash identifier:          cGGciFTCxXmvynAFssjz0CIjnJ06fr1f55vLE8qqOoA=
Subject key identifier:   49:21:EC:AE:89:C2:00:8E:47:C8:88:6B:29:B8:E0:43:75:DC:57:B6
Certificate issuer:       /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial:       010D0C9F43285847CA3F77279AF7B090967DF300
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/a1c1cd8d-cf72-36a6-a480-8fc9b46e58f9.roa
Signing time:             Wed 06 Nov 2024 14:00:41 +0000
ROA not before:           Wed 06 Nov 2024 14:00:41 +0000
ROA not after:            Tue 04 Feb 2025 14:00:41 +0000
asID:                     9009
IP address blocks:        2607:740:2d::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ca:3f:77:27:9a:f7:b0:90:96:7d:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
        Validity
            Not Before: Nov  6 14:00:41 2024 GMT
            Not After : Feb  4 14:00:41 2025 GMT
        Subject: CN=ad26d9a2-6c58-43c4-aaba-8cd12c14867e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:22:c0:7a:bd:ed:08:a6:a8:39:08:35:ac:0b:
                    fa:41:95:10:12:40:ee:7a:40:9c:f4:2b:0b:66:4d:
                    e2:a9:b4:6e:01:e4:d1:c6:12:3d:27:8c:0a:8b:94:
                    28:d6:6e:9d:8d:84:39:9d:ca:be:4f:87:57:2b:0e:
                    34:1c:00:5e:f9:8e:b4:80:af:c6:4e:9f:88:09:20:
                    6f:64:b8:96:cb:cc:53:49:11:40:63:83:c6:6e:a8:
                    87:b8:1a:91:c2:4d:3e:a6:30:30:5e:fd:28:a3:44:
                    58:ce:2b:2d:e5:0e:fa:a3:10:af:04:fd:77:cc:25:
                    62:12:c3:ee:1a:d0:03:30:e3:3f:90:d7:3f:2d:4d:
                    b5:03:1d:3e:62:db:b0:49:c8:ec:8d:ad:47:e8:dd:
                    0d:78:96:4d:22:02:ba:3f:16:35:58:27:c5:76:1c:
                    0a:42:33:f1:93:64:40:d2:57:0c:c4:34:fb:77:33:
                    23:36:48:cd:12:0c:26:44:81:2d:b0:bb:cf:3e:cd:
                    c1:c7:ae:9b:4c:06:5a:3f:13:8a:b4:ab:ce:16:54:
                    72:80:db:20:33:75:e2:15:a5:91:1a:8f:89:59:50:
                    1f:8c:3b:15:19:74:7a:56:30:fb:19:28:3d:0e:77:
                    03:68:57:8c:20:a5:48:74:9b:cd:41:fd:bc:3c:dc:
                    ca:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:21:EC:AE:89:C2:00:8E:47:C8:88:6B:29:B8:E0:43:75:DC:57:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/a1c1cd8d-cf72-36a6-a480-8fc9b46e58f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl

            X509v3 Authority Key Identifier:
                keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:740:2d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:d4:c1:d7:bd:30:c8:e4:bb:d2:3b:81:eb:da:c0:34:a2:35:
         1d:1f:6c:21:a3:af:40:7f:73:a0:ca:82:08:2a:21:99:24:81:
         f7:cf:14:6b:4c:96:54:2d:54:f6:9e:6f:23:e8:0a:26:af:b1:
         14:2e:ac:e9:55:f3:aa:39:3e:e7:15:b9:31:f9:47:61:12:59:
         44:24:e8:80:49:ed:db:d4:09:80:d8:d1:4d:cf:a1:87:a9:35:
         48:fd:b3:3c:ef:c3:37:8b:a0:8c:f3:a8:2a:47:f4:4a:62:bf:
         42:45:e5:6b:50:c8:39:74:e8:d1:1c:e1:6d:bd:99:fe:0d:9c:
         0c:3a:38:1d:96:df:27:29:de:fa:b4:d2:57:4f:02:ee:f6:5f:
         25:c8:8f:48:10:7f:64:e4:ba:5b:40:05:aa:56:ef:53:65:31:
         c6:64:e6:d9:ab:ea:4d:78:71:18:af:67:f8:e8:54:f6:07:2d:
         20:b9:10:6b:f2:6f:31:2e:1e:ee:38:ef:0b:d0:99:fd:04:94:
         44:0f:7d:83:91:0e:88:13:b1:ae:d7:4e:a8:07:df:74:2c:d1:
         10:97:cb:79:e8:df:a6:11:46:16:89:79:a8:f2:1c:62:da:71:
         19:d8:82:ce:f7:50:5b:fc:a0:ad:ff:a1:6f:a6:17:fc:ff:5a:
         39:01:90:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:30:00 2024 by rpki-client on console-fra.rpki-client.org