Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/ccf4e2b3-5f2c-3a13-a442-f37431ad72e9.roa
File:                     ccf4e2b3-5f2c-3a13-a442-f37431ad72e9.roa (raw, json)
Hash identifier:          dkM16tpePOnSvTvEvrDjk9Zg/4YZnKd3ABAU32jGT9E=
Subject key identifier:   5C:52:1A:91:D8:C4:86:1A:31:13:64:10:66:64:96:65:9C:FA:97:33
Certificate issuer:       /CN=4d80daa5-79dc-4c2a-8879-248a3f3e339c
Certificate serial:       010D0C9F43285847529BF368A4FCDD34FBE9CC80
Authority key identifier: 45:24:B4:3E:8E:13:30:ED:D5:96:0D:39:A0:C5:0D:3D:96:C0:56:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/ccf4e2b3-5f2c-3a13-a442-f37431ad72e9.roa
Signing time:             Tue 24 Sep 2024 17:30:27 +0000
ROA not before:           Tue 24 Sep 2024 17:30:27 +0000
ROA not after:            Mon 23 Dec 2024 18:30:27 +0000
asID:                     14618
IP address blocks:        2607:d540::/42 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/4d80daa5-79dc-4c2a-8879-248a3f3e339c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/4d80daa5-79dc-4c2a-8879-248a3f3e339c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Oct 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:52:9b:f3:68:a4:fc:dd:34:fb:e9:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d80daa5-79dc-4c2a-8879-248a3f3e339c
        Validity
            Not Before: Sep 24 17:30:27 2024 GMT
            Not After : Dec 23 18:30:27 2024 GMT
        Subject: CN=06eeb204-aac3-46b3-be9e-839e57045004
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:49:64:01:cf:1a:b0:b9:7a:72:27:a9:84:cb:
                    58:dd:68:7a:f4:c1:d5:d6:b3:37:82:1d:99:9b:2f:
                    bd:99:25:5b:3c:02:d9:68:47:ca:68:eb:84:ca:fa:
                    f7:26:06:64:f7:17:ef:70:d5:db:4e:19:10:e7:87:
                    2d:36:37:22:b6:88:55:db:64:4e:3b:7c:05:d8:33:
                    69:70:5b:0c:bc:47:f3:b1:34:98:b6:e3:49:e5:74:
                    f5:45:bd:4a:c4:35:df:8c:a2:92:ed:3c:20:5c:b3:
                    5b:83:ab:7a:03:2c:36:50:db:e5:78:38:30:ed:d0:
                    07:e3:d9:30:6e:4b:9d:6d:64:42:39:df:7f:27:07:
                    9e:f3:8d:96:cf:be:c9:8b:de:de:1b:d7:35:f9:51:
                    ca:ba:07:24:9f:c0:d2:2b:c9:45:2b:d3:7f:fd:bd:
                    73:ef:6c:06:7e:be:22:34:31:c7:89:56:cb:5c:fe:
                    d7:72:7e:b4:39:1a:b1:1c:61:a5:70:f0:73:07:62:
                    a2:95:19:04:a8:fa:57:91:90:e6:19:19:6f:53:aa:
                    ef:c1:48:99:29:59:6c:e3:03:bd:7b:b0:1b:1b:8e:
                    ad:b3:8d:c7:ac:01:33:1e:72:2a:1e:16:16:5f:90:
                    4f:20:30:4b:45:58:bb:52:a5:d5:e9:f3:85:b9:6c:
                    43:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:52:1A:91:D8:C4:86:1A:31:13:64:10:66:64:96:65:9C:FA:97:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/ccf4e2b3-5f2c-3a13-a442-f37431ad72e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/4d80daa5-79dc-4c2a-8879-248a3f3e339c.crl

            X509v3 Authority Key Identifier:
                keyid:45:24:B4:3E:8E:13:30:ED:D5:96:0D:39:A0:C5:0D:3D:96:C0:56:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:d540::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:76:f2:09:30:6e:cc:8f:30:3a:c7:14:2a:76:62:ac:e0:b5:
         8f:b1:35:d0:a1:a6:e9:da:cd:34:63:8c:bc:0b:45:c3:5e:ec:
         1a:59:68:0f:be:a6:c9:46:48:0e:ba:11:ae:e5:e1:d2:45:16:
         de:bc:c9:45:41:f5:05:a5:ca:23:72:62:0b:d1:25:5d:cf:da:
         95:27:94:bf:5d:bf:a8:a6:6a:92:62:32:af:eb:3a:56:f1:38:
         9e:8c:ad:9e:2c:ef:5b:7d:ae:d7:2c:0f:a3:2c:bf:32:e7:71:
         ba:27:0b:44:cd:67:3a:5b:83:2d:3e:5b:00:f5:5d:1c:5f:65:
         aa:7f:90:de:6f:1b:bf:28:d7:0a:95:85:21:31:b9:fe:78:b3:
         e6:2e:fb:ea:65:8b:3f:03:28:f5:16:0c:04:d2:02:21:b4:b3:
         7c:d1:88:6d:bb:c2:2a:28:48:5b:07:d3:ee:02:01:27:43:93:
         c7:36:99:08:3e:8d:50:4d:39:7e:e9:4c:27:41:b2:9c:19:93:
         03:e0:32:48:c2:48:1e:53:a6:78:1d:e7:53:a7:57:b1:b3:fc:
         fe:ea:76:63:5b:13:ec:d4:65:b2:24:da:d5:ee:c1:fd:74:8f:
         b3:89:ff:dd:fb:a4:4d:ff:ef:ad:77:15:fc:17:0c:18:31:f7:
         0f:bd:97:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 16:05:48 2024 by rpki-client on console-ams.rpki-client.org