Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e61fabb-95c6-4ab3-a1ec-b077e850f010/244878e0-1aaa-3f0d-ae99-b7a9d9c41963.roa
File:                     244878e0-1aaa-3f0d-ae99-b7a9d9c41963.roa (raw, json)
Hash identifier:          YEdJNaxje+VMKxjRSoJTebXcCzzXdIEsuiAc+eRBZ0o=
Subject key identifier:   38:73:49:61:B6:D1:17:9F:D8:5B:3E:90:4E:32:6B:14:DC:C2:64:98
Certificate issuer:       /CN=7e61fabb-95c6-4ab3-a1ec-b077e850f010
Certificate serial:       010D0C9F43285847802655C2C308BCA673265940
Authority key identifier: E8:97:9D:55:E3:53:AB:EF:00:F2:13:00:A9:2D:D2:DA:F3:14:93:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e61fabb-95c6-4ab3-a1ec-b077e850f010.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e61fabb-95c6-4ab3-a1ec-b077e850f010/244878e0-1aaa-3f0d-ae99-b7a9d9c41963.roa
Signing time:             Fri 11 Oct 2024 01:00:31 +0000
ROA not before:           Fri 11 Oct 2024 01:00:31 +0000
ROA not after:            Thu 09 Jan 2025 02:00:31 +0000
asID:                     1638
IP address blocks:        2620:114:5000::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e61fabb-95c6-4ab3-a1ec-b077e850f010/7e61fabb-95c6-4ab3-a1ec-b077e850f010.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e61fabb-95c6-4ab3-a1ec-b077e850f010/7e61fabb-95c6-4ab3-a1ec-b077e850f010.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e61fabb-95c6-4ab3-a1ec-b077e850f010.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:80:26:55:c2:c3:08:bc:a6:73:26:59:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e61fabb-95c6-4ab3-a1ec-b077e850f010
        Validity
            Not Before: Oct 11 01:00:31 2024 GMT
            Not After : Jan  9 02:00:31 2025 GMT
        Subject: CN=5e789a7b-705f-475b-b89d-a24dd49c9460
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d1:f3:3c:ee:35:6f:e4:6a:68:d0:aa:fe:cf:
                    7a:07:c8:d1:2d:e2:ab:9b:49:81:23:32:d6:56:ba:
                    d3:4a:09:c2:68:80:7f:6f:5e:9d:f7:59:78:5c:96:
                    6d:35:84:b1:91:33:82:d2:29:4c:c6:4b:0b:95:a3:
                    ec:f3:77:83:67:1c:7c:4e:58:a2:4c:c6:0b:dd:69:
                    eb:cd:47:41:c3:b9:d7:c2:a3:1c:2c:42:a9:97:7c:
                    6f:9a:f0:34:4e:39:94:49:28:88:36:be:42:da:11:
                    cf:72:5d:93:0a:74:da:f8:eb:05:63:58:ec:3b:9a:
                    96:4d:31:3d:1a:fa:d4:e3:ad:39:0c:ed:e2:68:72:
                    e5:a5:9c:ec:b8:fb:9e:e8:cd:3c:a3:18:1c:7d:76:
                    77:4c:ef:e3:92:cb:f4:79:2f:bd:fe:c0:37:72:2b:
                    42:4b:93:9e:37:d4:53:3c:fa:c8:2d:dc:26:1d:f5:
                    83:e6:44:2a:08:b2:83:55:c6:d5:f5:01:bf:ad:e8:
                    32:ec:9a:44:f1:af:3e:c8:83:e2:f8:87:b9:dc:1c:
                    ad:07:6c:d6:20:55:c3:89:94:6a:fe:e1:39:3c:54:
                    f6:98:e6:93:89:6e:4c:57:07:3c:f4:6c:31:70:f5:
                    7c:0b:51:cc:d9:4e:1d:8f:35:8b:15:0f:fb:d3:33:
                    b6:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:73:49:61:B6:D1:17:9F:D8:5B:3E:90:4E:32:6B:14:DC:C2:64:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e61fabb-95c6-4ab3-a1ec-b077e850f010/244878e0-1aaa-3f0d-ae99-b7a9d9c41963.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e61fabb-95c6-4ab3-a1ec-b077e850f010/7e61fabb-95c6-4ab3-a1ec-b077e850f010.crl

            X509v3 Authority Key Identifier:
                keyid:E8:97:9D:55:E3:53:AB:EF:00:F2:13:00:A9:2D:D2:DA:F3:14:93:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e61fabb-95c6-4ab3-a1ec-b077e850f010.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:114:5000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:4f:97:ac:d8:e0:c6:1b:a7:12:d7:1c:43:5e:62:44:32:1f:
         6c:b1:3e:d0:40:ce:e8:af:38:ec:df:2e:0f:31:42:70:6b:0a:
         55:2b:66:1d:2c:fc:9f:32:08:bd:30:f7:ab:76:01:d0:ac:7b:
         91:31:39:f4:e2:7f:13:ed:f3:4c:06:40:8b:50:aa:49:bc:36:
         23:4c:da:4f:36:e3:7e:1f:8b:a0:9e:61:cf:40:5f:0e:de:2e:
         ec:5c:15:bf:11:66:6f:aa:b2:ca:1f:a6:0b:a4:d9:54:b8:64:
         5e:cd:61:2e:e0:b8:59:61:01:cd:26:2d:35:6f:56:33:4d:63:
         aa:8a:82:99:a2:f9:21:ce:9b:69:20:c7:aa:e0:e3:c4:0a:f1:
         92:f2:13:1d:c9:c1:9f:99:36:d9:77:4a:03:de:83:c5:b3:b0:
         05:c3:89:fb:99:60:a0:ba:0e:31:ea:f2:78:92:89:fb:f3:87:
         cb:c5:70:ab:38:53:18:c1:1f:6a:01:78:a0:a0:f7:cf:fc:77:
         06:e9:ab:fb:12:cf:45:54:26:aa:21:75:98:5d:47:be:36:6c:
         8f:19:26:c0:6a:a1:53:b0:52:8f:2e:fc:08:f0:c1:89:20:62:
         6f:1e:f1:3f:4b:61:84:6d:a0:f1:ff:32:7f:d0:67:d8:4a:c0:
         14:8f:ca:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:35:22 2024 by rpki-client on console-fra.rpki-client.org