Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/424f26c4-887b-3d46-80f1-25fad32f836b.roa
File:                     424f26c4-887b-3d46-80f1-25fad32f836b.roa (raw, json)
Hash identifier:          ZVgJxvLri91QfSAvyqaB/CxiK4MK6hJHTv5u1nAf4jc=
Subject key identifier:   91:6D:2F:0B:4C:B8:BF:9C:90:89:41:12:87:B6:4C:AD:BF:95:9D:44
Certificate issuer:       /CN=0aa7836e-22e9-444b-9d13-5d11358bd6ab
Certificate serial:       010D0C9F43285847362B610C93EBEF68071FBA80
Authority key identifier: AA:57:C4:29:E5:6A:1D:D4:AF:56:9E:A4:6D:45:98:0D:26:7D:E9:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/424f26c4-887b-3d46-80f1-25fad32f836b.roa
Signing time:             Sat 14 Sep 2024 13:00:41 +0000
ROA not before:           Sat 14 Sep 2024 13:00:41 +0000
ROA not after:            Fri 13 Dec 2024 14:00:41 +0000
asID:                     397181
IP address blocks:        2604:c840::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/0aa7836e-22e9-444b-9d13-5d11358bd6ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/0aa7836e-22e9-444b-9d13-5d11358bd6ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:36:2b:61:0c:93:eb:ef:68:07:1f:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0aa7836e-22e9-444b-9d13-5d11358bd6ab
        Validity
            Not Before: Sep 14 13:00:41 2024 GMT
            Not After : Dec 13 14:00:41 2024 GMT
        Subject: CN=f57db28a-b643-4e1e-90d9-b0ee24981c0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:91:7f:1d:e9:2a:6d:f9:07:0b:9c:99:e3:96:
                    8e:11:4a:f5:cb:66:91:05:d6:d0:5b:dd:16:4c:5e:
                    23:dc:f8:cd:72:cf:23:6a:bf:6f:a1:2a:da:50:f6:
                    c9:bc:21:93:0c:b3:1f:6e:ff:12:1e:f8:23:3d:d2:
                    ca:cc:6c:fa:1d:e3:66:92:77:79:14:d2:20:5b:4c:
                    3e:a2:b4:15:3d:a9:ef:82:da:f1:26:d1:5d:78:34:
                    4e:1d:00:94:8b:25:67:39:21:62:bc:e2:63:b2:99:
                    56:0e:67:c9:26:a0:a1:58:2b:ee:a4:ff:91:1e:22:
                    81:0c:e3:65:4f:f8:65:5b:20:cd:67:a2:c0:7c:99:
                    e2:37:74:d0:ea:62:31:4c:cd:75:95:0c:20:54:42:
                    ec:7c:e8:15:9e:9f:56:f8:19:2f:c4:87:ae:2a:d9:
                    82:e8:c6:69:b4:49:7d:ac:35:f5:6c:ac:8f:5e:bd:
                    7c:46:85:7c:4e:bb:fd:e2:5a:da:bd:e5:e8:49:44:
                    f7:7e:a7:57:af:b9:26:e3:91:17:39:38:0d:9f:98:
                    00:bf:53:bb:15:22:ec:9f:a0:e3:e0:d1:ab:1e:c2:
                    5c:56:35:e6:bd:40:26:a0:16:dc:6a:97:8b:41:16:
                    aa:49:e5:b0:3b:e4:93:8d:59:c0:dc:92:82:46:50:
                    1f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:6D:2F:0B:4C:B8:BF:9C:90:89:41:12:87:B6:4C:AD:BF:95:9D:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/424f26c4-887b-3d46-80f1-25fad32f836b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/0aa7836e-22e9-444b-9d13-5d11358bd6ab.crl

            X509v3 Authority Key Identifier:
                keyid:AA:57:C4:29:E5:6A:1D:D4:AF:56:9E:A4:6D:45:98:0D:26:7D:E9:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:c840::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:5f:4b:8e:b3:cf:74:ee:29:b0:b4:7b:a3:64:da:fb:cd:5d:
         d6:94:be:d3:3f:f6:5c:0b:66:3a:db:49:c3:39:8e:0b:36:10:
         3d:7a:77:79:c2:61:71:4c:df:29:8c:9e:04:2c:f4:f4:06:b7:
         9f:88:d2:ba:7f:c9:f5:b3:51:e7:ac:8f:3a:ff:d0:55:e2:42:
         12:c8:2d:a8:f1:b8:ac:52:0e:1a:17:08:05:cc:49:8f:1b:b6:
         2b:77:de:09:1b:74:14:bd:05:00:0c:b6:f6:40:7c:be:d2:4a:
         08:00:75:30:b6:d5:b9:f4:f2:c7:74:fb:a1:0b:f3:4a:a2:ba:
         93:cd:80:d4:af:18:3b:fb:ab:78:38:64:16:2d:a8:3a:5f:21:
         78:f1:21:34:9e:71:f1:8e:86:f5:72:ba:fb:ff:fe:bb:99:f0:
         fb:39:e0:e6:97:0b:52:6c:96:9c:aa:cd:10:04:25:c4:fb:1f:
         ab:f6:a5:bb:7a:cf:e3:45:17:c3:09:58:53:b3:59:41:43:26:
         a3:a9:25:c5:56:69:4a:fe:d3:70:3c:f4:fe:27:b7:17:93:64:
         c4:95:36:00:3f:ad:29:a0:8d:54:20:e5:e6:e6:ab:17:9e:3f:
         a5:4b:3a:2e:39:92:e6:48:3b:67:a4:78:e8:33:6e:c5:8d:26:
         f5:2b:43:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:48:12 2024 by rpki-client on console-ams.rpki-client.org