Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/435c5779-0e0b-4ca5-9213-6edddad9bc55/c6fbade2-d0ec-39aa-878b-06d96fdcd6b8.roa
File:                     c6fbade2-d0ec-39aa-878b-06d96fdcd6b8.roa (raw, json)
Hash identifier:          pbWT0+8aEU9lki9B7l/+2nzkpWpTMl1MMFiAimbTZoY=
Subject key identifier:   EA:1C:BF:9A:42:3C:80:3C:93:69:7F:06:69:FE:6E:A7:1A:D3:86:D0
Certificate issuer:       /CN=435c5779-0e0b-4ca5-9213-6edddad9bc55
Certificate serial:       010D0C9F43285847CA3F82BB3FADB63E5AAF8C00
Authority key identifier: DB:A6:6E:42:9E:45:12:61:0C:B6:F4:21:58:35:BD:86:01:15:06:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/435c5779-0e0b-4ca5-9213-6edddad9bc55.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/435c5779-0e0b-4ca5-9213-6edddad9bc55/c6fbade2-d0ec-39aa-878b-06d96fdcd6b8.roa
Signing time:             Wed 06 Nov 2024 14:00:41 +0000
ROA not before:           Wed 06 Nov 2024 14:00:41 +0000
ROA not after:            Tue 04 Feb 2025 14:00:41 +0000
asID:                     54665
IP address blocks:        2604:4a80::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/435c5779-0e0b-4ca5-9213-6edddad9bc55/435c5779-0e0b-4ca5-9213-6edddad9bc55.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/435c5779-0e0b-4ca5-9213-6edddad9bc55/435c5779-0e0b-4ca5-9213-6edddad9bc55.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/435c5779-0e0b-4ca5-9213-6edddad9bc55.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ca:3f:82:bb:3f:ad:b6:3e:5a:af:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=435c5779-0e0b-4ca5-9213-6edddad9bc55
        Validity
            Not Before: Nov  6 14:00:41 2024 GMT
            Not After : Feb  4 14:00:41 2025 GMT
        Subject: CN=31232c4c-eda9-4292-9e2f-f805ff7c9aaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:a2:ce:12:f0:92:43:77:e7:6a:1b:a4:33:83:
                    6d:a6:34:03:85:f6:f3:bd:4b:c4:09:7b:b9:cd:ce:
                    77:f6:ce:9d:8c:08:e2:b4:f8:cc:13:25:b7:73:84:
                    4d:a9:a0:20:91:39:c8:34:41:38:5d:cc:36:c7:6b:
                    c5:fe:22:2b:a5:3a:2c:4d:ad:32:bd:03:29:47:87:
                    b1:98:00:53:a8:a5:9b:12:6a:53:2d:a6:9f:12:0c:
                    52:0d:cb:4e:a0:f4:27:5c:f1:ad:b9:22:c5:3c:e9:
                    7a:94:b4:35:7f:29:85:5c:a5:b2:cf:c1:7d:2c:bc:
                    9c:e2:96:0d:dd:c6:a4:0c:db:15:af:76:b8:40:92:
                    91:f7:93:bf:6b:b0:b0:42:d2:8f:a1:45:cf:b2:a6:
                    9e:71:14:dd:ef:63:e9:81:fc:d6:12:f5:f8:76:33:
                    d5:02:2e:eb:bd:d5:ba:4b:89:1a:de:3f:b3:15:1c:
                    93:a5:1e:9c:f7:51:35:9a:be:89:0e:4d:28:88:68:
                    49:b2:d1:96:b9:a3:9d:51:7f:46:35:a0:ef:43:e1:
                    8e:15:75:d2:f6:e4:7a:93:e6:5d:13:4d:49:2f:7c:
                    a2:55:4a:75:d2:49:46:5b:bd:90:40:60:da:24:e3:
                    cc:fb:1f:20:5c:38:cb:52:f7:80:e1:5f:f7:4e:8c:
                    98:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:1C:BF:9A:42:3C:80:3C:93:69:7F:06:69:FE:6E:A7:1A:D3:86:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/435c5779-0e0b-4ca5-9213-6edddad9bc55/c6fbade2-d0ec-39aa-878b-06d96fdcd6b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/435c5779-0e0b-4ca5-9213-6edddad9bc55/435c5779-0e0b-4ca5-9213-6edddad9bc55.crl

            X509v3 Authority Key Identifier:
                keyid:DB:A6:6E:42:9E:45:12:61:0C:B6:F4:21:58:35:BD:86:01:15:06:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/435c5779-0e0b-4ca5-9213-6edddad9bc55.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:4a80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:54:41:4d:47:f7:a2:5b:4a:3b:d9:ea:8e:b8:58:43:15:9f:
         ef:76:0d:22:9f:a4:31:db:2f:7c:ae:a4:ca:32:83:38:9b:3c:
         74:4b:c2:4b:4c:8e:d9:61:30:86:26:f1:80:c9:24:30:72:14:
         0c:14:e3:88:79:af:49:ac:b1:93:e2:18:69:83:f0:1b:10:90:
         4f:13:5f:18:36:90:0b:44:e2:ba:61:65:60:24:ef:bd:07:16:
         95:34:be:11:1e:ca:89:78:ae:0c:91:0a:db:3b:fe:b6:79:b3:
         67:45:75:d9:d5:c4:cb:a2:2c:82:2a:2d:83:db:f1:3e:cd:e0:
         f4:13:eb:47:2b:d9:9e:3b:ca:68:19:cd:f5:84:e7:fa:32:5f:
         e7:04:ae:86:e1:4e:54:3c:ae:86:d4:fc:b7:a6:76:5b:12:70:
         a1:3e:b5:88:c7:27:b6:8c:48:48:d0:b2:d3:8b:d9:37:78:a8:
         90:18:f8:df:b1:ff:14:bb:37:f9:ea:30:db:17:78:7c:8f:ea:
         60:a5:53:21:62:94:10:b5:4a:5a:f6:80:67:be:5e:f9:2f:2a:
         8c:58:b8:5f:a1:eb:56:fa:14:6c:7a:d9:41:60:0b:bf:23:8b:
         2b:27:c5:36:34:a7:86:ef:a6:ec:9a:70:bf:0a:5a:20:8e:c2:
         8d:66:61:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:26:28 2024 by rpki-client on console-fra.rpki-client.org