Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/67bba3d4-a51f-3aad-a0d8-968b1939e2d1.roa
File:                     67bba3d4-a51f-3aad-a0d8-968b1939e2d1.roa (raw, json)
Hash identifier:          ukUyqI7Cj6LBlMZz0Za098suV7r7ss6A6JQzXBbdADE=
Subject key identifier:   01:1B:11:00:29:C1:F8:AE:FD:51:B8:B3:CF:60:E7:1E:26:95:37:49
Certificate issuer:       /CN=ce1ca5a2-6844-45f3-b01a-cfc88537d6a3
Certificate serial:       010D0C9F432858471E706270F73F0880CB697B00
Authority key identifier: 81:67:C7:EA:BC:99:EF:72:0D:14:8B:4A:C3:CE:5A:1E:1E:4C:35:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/67bba3d4-a51f-3aad-a0d8-968b1939e2d1.roa
Signing time:             Fri 06 Sep 2024 01:00:31 +0000
ROA not before:           Fri 06 Sep 2024 01:00:31 +0000
ROA not after:            Thu 05 Dec 2024 02:00:31 +0000
asID:                     32058
IP address blocks:        2607:4640::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1e:70:62:70:f7:3f:08:80:cb:69:7b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce1ca5a2-6844-45f3-b01a-cfc88537d6a3
        Validity
            Not Before: Sep  6 01:00:31 2024 GMT
            Not After : Dec  5 02:00:31 2024 GMT
        Subject: CN=83ab4fbe-41a1-4650-9467-67246529a025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d2:c4:fb:9a:2c:c6:0a:2a:ac:85:b5:e8:1b:
                    3d:5e:58:62:b6:a8:4b:bb:36:07:74:a3:04:88:fb:
                    01:d0:65:f9:9e:64:4d:96:b4:ef:f2:8c:41:f5:6a:
                    43:85:f2:55:cb:38:c0:dd:64:e5:5b:19:9a:51:46:
                    b4:f0:17:27:21:ba:6c:0b:37:34:49:d3:63:40:07:
                    07:75:b4:f3:b6:a1:07:de:aa:3e:59:8a:79:aa:f1:
                    0c:62:2c:d2:91:50:38:76:67:f0:db:84:87:af:cf:
                    9c:20:41:33:c9:d5:ae:82:2f:cf:ba:3b:a4:d0:bc:
                    30:77:39:49:7d:72:af:1b:00:c2:70:d4:20:8a:67:
                    28:9c:f1:b2:f9:a9:16:63:0e:cc:25:eb:d3:62:70:
                    c2:33:2c:c2:0a:68:5c:8d:3c:62:46:09:cc:80:16:
                    dd:1e:38:a9:7f:30:c2:77:d6:b1:52:68:00:bf:df:
                    92:6b:3d:b2:36:3c:85:b0:04:90:47:3d:c7:86:6d:
                    3d:ee:b8:92:1d:a3:10:b6:fc:79:a0:f8:40:21:97:
                    bc:40:36:41:23:22:61:2f:1f:16:6b:c8:ae:ae:5f:
                    33:bc:2f:11:1d:d4:c7:22:b6:1f:e7:0a:50:0c:1f:
                    f1:7c:c5:fd:e3:8b:d5:61:b0:70:5f:e6:c2:aa:5a:
                    69:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:1B:11:00:29:C1:F8:AE:FD:51:B8:B3:CF:60:E7:1E:26:95:37:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/67bba3d4-a51f-3aad-a0d8-968b1939e2d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.crl

            X509v3 Authority Key Identifier:
                keyid:81:67:C7:EA:BC:99:EF:72:0D:14:8B:4A:C3:CE:5A:1E:1E:4C:35:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:4640::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:a2:c9:67:16:15:33:7f:91:11:79:d8:b3:f3:72:ce:a2:6f:
         9c:1d:da:81:f2:62:eb:4b:47:9f:34:c2:9d:bd:17:af:9f:5b:
         a4:c6:12:32:8e:7e:26:97:ab:89:78:59:4a:5f:e7:b8:e7:40:
         19:fd:cd:8d:13:73:22:05:76:74:14:7e:77:eb:9f:32:d1:0c:
         80:6b:28:4e:c0:72:c3:49:d5:2c:5f:fb:99:04:7b:17:64:e1:
         f0:99:d1:b6:a2:01:12:d1:95:79:48:13:7f:09:14:71:5d:da:
         41:4c:ec:2f:69:a2:73:48:c1:b5:71:95:62:9b:2c:c0:08:ff:
         97:e5:5f:73:5d:b8:1a:5c:19:2f:0b:13:69:65:15:4c:16:96:
         36:0c:e7:af:09:54:6d:74:7c:a9:e0:2e:19:22:3e:85:e8:54:
         33:cd:d8:e1:1d:b1:eb:63:cd:76:90:f7:fb:e1:0d:c4:be:77:
         ed:a7:ff:a5:5d:be:7b:8a:2f:a7:17:e4:e3:7a:8f:b0:ba:bc:
         3c:e0:f0:77:d5:4c:46:d6:68:b8:f8:82:96:50:f0:3f:e8:b2:
         02:64:21:92:4b:e2:d6:19:e0:f5:b8:ba:32:29:97:e6:4f:11:
         4b:fc:c9:28:2e:ce:e3:57:69:02:dd:95:6f:94:43:57:7d:f5:
         47:a9:68:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:39:21 2024 by rpki-client on console-ams.rpki-client.org