Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1786b8ab-4949-4959-b26b-aaad20b28698/7aa82a3c-b900-3515-999b-3f371863fb0c.roa
File:                     7aa82a3c-b900-3515-999b-3f371863fb0c.roa (raw, json)
Hash identifier:          ldlTxPZj5BWrJXWCShY+uVs+s9bVBGO6fXK9ElPNCxo=
Subject key identifier:   4D:AD:AD:87:50:7B:A1:D0:D9:9E:B4:CA:B4:AC:C4:82:B9:35:BF:F7
Certificate issuer:       /CN=1786b8ab-4949-4959-b26b-aaad20b28698
Certificate serial:       010D0C9F4328584722A0777564585E3FAEC86C00
Authority key identifier: E5:C0:98:4B:BF:62:F3:EA:E8:A5:A5:5D:EE:E8:D8:5A:96:12:ED:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1786b8ab-4949-4959-b26b-aaad20b28698.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1786b8ab-4949-4959-b26b-aaad20b28698/7aa82a3c-b900-3515-999b-3f371863fb0c.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     20356
IP address blocks:        2607:640::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1786b8ab-4949-4959-b26b-aaad20b28698/1786b8ab-4949-4959-b26b-aaad20b28698.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1786b8ab-4949-4959-b26b-aaad20b28698/1786b8ab-4949-4959-b26b-aaad20b28698.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1786b8ab-4949-4959-b26b-aaad20b28698.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a0:77:75:64:58:5e:3f:ae:c8:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1786b8ab-4949-4959-b26b-aaad20b28698
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=d91fc2f8-f260-4183-bd7d-3f40fc2f61d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f8:13:ad:d9:88:80:c1:33:06:5a:97:01:45:
                    e8:56:fe:4d:6b:86:65:c4:23:34:bc:06:56:ce:34:
                    2c:ff:a6:ef:0c:9b:44:b6:87:82:6b:28:50:29:af:
                    0b:e6:e8:f8:bc:f4:16:5f:74:f9:1a:39:66:3d:40:
                    d4:29:e9:b1:1e:c1:9c:40:3c:b0:1b:f0:b3:11:db:
                    3c:4d:5b:fe:a8:ac:d3:c6:80:e8:8c:a9:d0:90:e7:
                    5c:65:36:18:eb:8f:10:f8:0a:25:58:6d:1b:f4:a2:
                    a6:e8:78:7e:80:fa:0a:dd:05:ee:96:28:5d:03:a8:
                    3e:2e:77:70:ab:3c:4d:06:fb:4a:d5:bd:96:7d:18:
                    14:70:21:34:df:05:71:61:9b:7e:e4:dd:bb:53:9c:
                    e1:87:ed:db:6c:0d:f6:55:e1:e9:6d:b4:2d:f4:49:
                    97:04:4d:b5:b7:e3:f0:8c:03:31:8d:f4:3c:c0:73:
                    44:9e:71:cb:36:b8:82:04:39:85:de:16:d8:57:74:
                    1d:9b:c3:40:c6:27:a8:64:07:94:10:8a:a2:9c:c6:
                    f4:9c:42:2e:9e:b1:6d:b0:ef:b4:78:f1:32:19:99:
                    27:25:61:a4:2c:c6:a2:ba:93:81:9a:89:16:83:1a:
                    98:c2:b5:ee:e6:60:1b:67:ff:bd:f0:8c:0d:4e:9f:
                    f2:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:AD:AD:87:50:7B:A1:D0:D9:9E:B4:CA:B4:AC:C4:82:B9:35:BF:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1786b8ab-4949-4959-b26b-aaad20b28698/7aa82a3c-b900-3515-999b-3f371863fb0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1786b8ab-4949-4959-b26b-aaad20b28698/1786b8ab-4949-4959-b26b-aaad20b28698.crl

            X509v3 Authority Key Identifier:
                keyid:E5:C0:98:4B:BF:62:F3:EA:E8:A5:A5:5D:EE:E8:D8:5A:96:12:ED:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1786b8ab-4949-4959-b26b-aaad20b28698.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:640::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:b8:8b:2d:97:0e:5c:03:35:21:70:5a:5d:6a:65:40:27:c9:
         03:46:46:b0:2c:93:9c:68:89:8c:55:54:9f:00:18:c1:5c:91:
         e1:60:7f:71:da:53:8d:23:78:9f:e1:42:6c:01:f7:bd:8c:8a:
         92:56:8d:e9:d0:36:e7:36:96:4e:73:1f:ee:e4:b6:53:71:e8:
         94:8a:e5:65:dd:5f:26:ce:3e:9f:f5:66:c4:a8:f9:08:cd:99:
         ed:c6:22:75:03:ce:d6:bc:80:49:1b:ef:38:42:33:c9:18:cf:
         97:af:64:92:aa:5e:d1:85:fd:1c:de:6b:f0:28:7f:fb:23:d0:
         d3:d2:20:87:51:88:26:f4:db:93:b2:25:d0:d8:28:30:23:a7:
         82:f8:39:ac:6d:b2:e8:f8:3a:71:b1:2c:ff:f2:55:09:0a:a0:
         84:ce:e0:91:63:36:07:67:fd:ad:33:53:df:da:46:b1:cd:d1:
         d4:46:e3:53:42:9d:76:58:34:8d:4c:d4:e2:cb:8a:21:11:29:
         79:0c:df:ee:53:ef:cf:1e:63:b1:e2:8e:90:a8:e2:8e:55:59:
         16:8b:4c:1c:55:18:2f:9d:66:45:50:75:61:03:50:36:12:15:
         a4:c6:ff:32:d1:a8:68:bb:20:32:51:40:4b:66:d7:70:ef:66:
         32:63:7f:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:15:03 2024 by rpki-client on console-ams.rpki-client.org