Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/e062dbf9-e39f-3cd8-af8e-ed425d95313b.roa
File:                     e062dbf9-e39f-3cd8-af8e-ed425d95313b.roa (raw, json)
Hash identifier:          QMu1ncl39C+Wyj8jk7gTLSSjHakx8ht3PmQiNyOU88g=
Subject key identifier:   91:27:25:08:03:E6:D5:62:83:D8:2F:9C:14:EE:84:45:E9:09:68:2A
Certificate issuer:       /CN=ab3688e8-3425-4e58-a239-949508a9f6dd
Certificate serial:       010D0C9F432858474F010CE57268D2C8F9A47000
Authority key identifier: 48:68:72:45:64:2E:EE:B7:D1:4C:89:AA:BF:91:87:19:4D:93:99:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/e062dbf9-e39f-3cd8-af8e-ed425d95313b.roa
Signing time:             Mon 23 Sep 2024 10:30:56 +0000
ROA not before:           Mon 23 Sep 2024 10:30:56 +0000
ROA not after:            Sun 22 Dec 2024 11:30:56 +0000
asID:                     3573
IP address blocks:        2610:b0:41d8::/47 maxlen: 47

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/ab3688e8-3425-4e58-a239-949508a9f6dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/ab3688e8-3425-4e58-a239-949508a9f6dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4f:01:0c:e5:72:68:d2:c8:f9:a4:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab3688e8-3425-4e58-a239-949508a9f6dd
        Validity
            Not Before: Sep 23 10:30:56 2024 GMT
            Not After : Dec 22 11:30:56 2024 GMT
        Subject: CN=282d8e45-1600-4c28-a008-7e067e6967fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:c1:94:42:1c:6f:7e:8c:37:43:0c:7c:8b:3c:
                    20:3f:87:47:0b:ee:60:b2:3f:ce:56:ff:15:4c:07:
                    ea:d5:ba:d3:53:13:87:3a:b8:3b:fd:21:af:f4:ee:
                    fa:f1:08:9d:20:c7:d0:b1:b9:d9:ed:8d:88:6e:52:
                    3d:b3:5c:06:47:42:7f:42:2f:2b:ac:7a:9f:fd:28:
                    66:a6:2e:0b:1e:24:17:b2:cf:f3:b0:4e:44:6d:83:
                    e3:7f:41:d0:31:4c:2d:c5:8e:33:8f:78:4a:35:3c:
                    02:ca:cd:46:11:79:c5:e0:7c:e6:0e:3c:87:ed:95:
                    53:1e:18:b0:22:23:03:d0:c1:bd:0d:5c:9a:6f:23:
                    2c:1b:3f:c5:86:3f:ba:31:0a:3e:1f:f1:4c:1e:73:
                    fd:33:27:08:89:47:5a:2e:a4:70:12:02:97:0d:3b:
                    45:2b:23:58:3c:7b:f5:8c:a8:95:d8:bc:2e:26:ef:
                    15:62:f1:09:a7:97:83:01:2b:ca:3a:73:35:2a:71:
                    4b:bd:9e:7f:18:9a:20:7e:42:af:e7:a4:64:b7:9c:
                    63:00:78:81:dc:b0:41:11:bd:1f:e3:e8:53:76:0d:
                    55:11:fd:d4:2f:e7:18:65:82:96:d2:48:a1:14:2e:
                    5e:f6:54:ae:c2:5c:eb:52:6d:b1:58:d1:b3:7d:19:
                    7e:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:27:25:08:03:E6:D5:62:83:D8:2F:9C:14:EE:84:45:E9:09:68:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/e062dbf9-e39f-3cd8-af8e-ed425d95313b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/ab3688e8-3425-4e58-a239-949508a9f6dd.crl

            X509v3 Authority Key Identifier:
                keyid:48:68:72:45:64:2E:EE:B7:D1:4C:89:AA:BF:91:87:19:4D:93:99:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:b0:41d8::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:65:d2:0a:b0:63:77:b8:41:ef:9e:ea:a0:3b:55:55:ef:87:
         4d:3c:7b:0a:42:32:09:61:04:9b:7a:da:b5:92:e3:5c:73:95:
         6c:41:f5:31:40:1c:1c:59:4d:23:cc:d4:9e:f3:05:05:82:d2:
         b6:01:3f:bb:c4:b6:16:42:3d:58:71:d7:ae:6d:ab:bc:e5:ed:
         9d:bd:aa:72:97:7e:bd:ef:6a:6a:e8:6f:a7:fa:64:eb:ef:74:
         e3:5d:c0:93:51:ea:3e:2c:4d:88:59:1e:14:57:f5:0b:d7:80:
         71:ad:ca:22:06:9f:e7:c0:e9:db:c1:2e:27:f0:72:19:9c:4d:
         e3:d1:34:51:b3:ea:1f:91:0b:65:ee:d4:9f:70:10:00:2b:0c:
         8c:70:02:89:36:c2:58:70:a3:65:a6:b0:58:1c:b3:58:fb:2d:
         13:b3:f8:2a:d5:84:e2:5e:a7:5a:39:50:71:46:63:46:6a:f2:
         5d:b2:d4:f5:7f:39:f9:ae:95:3a:8b:f6:2e:cf:83:47:d8:82:
         19:74:5b:ef:c7:d7:57:e3:69:23:1d:12:9a:b3:f3:12:ac:ea:
         3a:fe:25:97:23:92:3a:6f:ad:b7:1d:87:0d:cd:8b:8f:1f:e0:
         52:05:08:af:01:39:c2:8f:12:21:74:30:4b:2b:45:8d:5a:22:
         9d:7d:e8:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:34:57 2024 by rpki-client on console-fra.rpki-client.org