Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/df6816a7-143c-392b-bc92-0828868a384a.roa
File:                     df6816a7-143c-392b-bc92-0828868a384a.roa (raw, json)
Hash identifier:          YHH1suDuIXQBfsxb8n98AshTRFVe+EUl/F7q7fAiOio=
Subject key identifier:   51:2E:66:8A:E3:D1:17:01:81:0A:0D:8E:E2:D8:3E:7C:F3:59:6B:CE
Certificate issuer:       /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial:       010D0C9F4328584795169025F1815FFD9038A860
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/df6816a7-143c-392b-bc92-0828868a384a.roa
Signing time:             Fri 18 Oct 2024 13:00:41 +0000
ROA not before:           Fri 18 Oct 2024 13:00:41 +0000
ROA not after:            Thu 16 Jan 2025 14:00:41 +0000
asID:                     11290
IP address blocks:        2001:18c0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:95:16:90:25:f1:81:5f:fd:90:38:a8:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
        Validity
            Not Before: Oct 18 13:00:41 2024 GMT
            Not After : Jan 16 14:00:41 2025 GMT
        Subject: CN=a1edf926-c2d2-4079-b7c8-c691c7dee025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d7:9c:0a:4b:66:77:fb:12:b2:c6:4d:f1:dd:
                    40:d0:28:3c:25:5f:e3:92:c7:90:47:9d:f0:29:58:
                    b5:c6:af:ad:30:0a:9b:9a:11:40:c5:ec:a7:1a:6e:
                    76:91:4e:d2:53:f6:c7:b6:92:24:4e:05:fd:27:b1:
                    d5:1b:4b:e4:f4:05:dd:34:5b:9d:e6:1a:f5:03:96:
                    57:84:06:91:02:c8:e1:cf:72:64:b2:08:30:a7:99:
                    c2:39:e2:02:c8:76:83:20:a8:22:66:a1:f5:f3:0f:
                    78:77:f2:50:50:59:4d:9f:1e:0d:3b:c8:d7:9b:d2:
                    02:c8:e8:1c:c0:6d:ff:a7:01:bb:b9:ee:22:4c:e7:
                    f5:5f:4b:72:26:8e:e1:5b:2d:b3:80:35:5f:98:01:
                    44:19:82:07:67:3e:84:9a:e0:f7:ff:bf:d2:80:5f:
                    83:5a:21:5b:ba:67:3d:3a:d0:cb:3a:c8:b2:a8:33:
                    46:96:0a:9c:d0:ae:e2:37:09:37:fd:f0:f0:c7:0d:
                    30:46:0c:fa:c7:69:36:e2:cb:3c:91:f3:0d:36:36:
                    e6:2c:0e:ae:ab:8a:7f:d2:22:66:15:ec:f2:e5:49:
                    24:3e:6b:9c:2b:9e:3d:9a:fa:7c:17:23:0b:36:19:
                    d9:b2:06:73:35:ed:7c:f6:bd:c1:ed:82:92:84:f4:
                    7c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:2E:66:8A:E3:D1:17:01:81:0A:0D:8E:E2:D8:3E:7C:F3:59:6B:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/df6816a7-143c-392b-bc92-0828868a384a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl

            X509v3 Authority Key Identifier:
                keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:18c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:e8:8e:58:aa:94:25:b2:22:ca:45:9e:b4:ef:08:19:cf:68:
         34:d2:bd:ff:62:83:6a:37:f6:b0:7e:01:69:de:42:cf:df:65:
         d5:d4:40:b5:da:04:84:6d:97:d4:9f:bc:18:94:49:45:46:d4:
         b3:71:67:95:9b:50:1a:8c:3b:d1:ea:33:6c:9f:29:fa:ee:bc:
         27:3a:a7:e4:ac:ef:b9:92:c8:ff:1a:7d:98:6d:8b:1c:ed:8c:
         89:49:0c:dd:a4:41:ca:cd:b5:9a:74:47:08:5d:7e:af:be:51:
         a7:e0:95:a8:ee:a4:5f:d7:0c:59:a4:79:95:6f:25:d0:09:b9:
         59:58:eb:00:c8:71:8d:40:27:66:84:f8:e7:1e:44:85:b0:ce:
         19:39:cf:d3:44:d8:c8:a5:aa:db:15:a2:fa:7c:3a:70:4c:9b:
         f6:47:58:fb:d7:a3:0a:ad:0e:7f:6c:bb:c0:50:fe:fc:c6:cd:
         b9:20:20:6b:b0:dc:cf:c3:f4:a4:a0:9a:89:fb:b7:1d:19:69:
         30:25:54:77:8f:e1:c7:be:aa:52:73:92:86:a1:35:46:aa:f6:
         aa:e8:78:cd:8a:56:74:d6:5d:a1:5e:ac:35:87:cf:f6:6c:c0:
         f4:0e:7d:30:71:d4:78:69:19:06:9a:dc:20:f7:e6:9f:77:4c:
         a9:90:c1:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:07:04 2024 by rpki-client on console-fra.rpki-client.org