Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/0811663f-279f-3f18-b2dc-2a75f82f5225.roa
File:                     0811663f-279f-3f18-b2dc-2a75f82f5225.roa (raw, json)
Hash identifier:          pI80Xb6aedElPYfzwNE3ivGIxlC6Mwj9n2XMisZi4tQ=
Subject key identifier:   F0:82:57:87:31:E7:92:DA:20:C6:46:70:D2:34:F7:BE:FC:C0:F6:DE
Certificate issuer:       /CN=93caa9fe-d081-4e18-ad66-499a9209945e
Certificate serial:       010D0C9F432858477230F4DCF913C5FF2CE81800
Authority key identifier: 34:AE:DE:0F:3E:91:29:37:B5:0B:37:66:2F:72:4F:BF:62:3C:FB:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/0811663f-279f-3f18-b2dc-2a75f82f5225.roa
Signing time:             Sun 06 Oct 2024 01:00:31 +0000
ROA not before:           Sun 06 Oct 2024 01:00:31 +0000
ROA not after:            Sat 04 Jan 2025 02:00:31 +0000
asID:                     398471
IP address blocks:        2607:2240:d000::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/93caa9fe-d081-4e18-ad66-499a9209945e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/93caa9fe-d081-4e18-ad66-499a9209945e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:72:30:f4:dc:f9:13:c5:ff:2c:e8:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93caa9fe-d081-4e18-ad66-499a9209945e
        Validity
            Not Before: Oct  6 01:00:31 2024 GMT
            Not After : Jan  4 02:00:31 2025 GMT
        Subject: CN=8f8c46d9-899e-4762-a531-6e717692bd65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:fe:fc:9f:51:87:bb:d3:07:ba:a2:40:37:40:
                    e6:92:c5:37:0b:9a:9c:ce:39:02:d6:54:14:31:ff:
                    28:1d:1d:d9:43:c4:af:c9:ae:e2:87:a9:45:59:60:
                    f1:b1:ec:b3:af:61:d8:c0:7f:24:03:52:ef:a5:7c:
                    f8:8a:5b:df:b6:18:b8:aa:1c:19:e6:ff:9f:dd:ee:
                    08:23:e2:1c:19:5b:eb:bc:0d:3c:87:ea:cf:f1:c7:
                    62:57:2d:f6:76:32:73:1a:5e:b6:c2:cf:66:c0:71:
                    41:84:48:6c:93:a7:5a:e0:c4:64:36:c3:b5:02:1e:
                    fc:e6:8d:57:0b:b8:09:66:53:e2:4a:b7:d8:ea:1c:
                    29:2c:17:7b:bd:1a:12:6c:27:2b:55:01:7c:84:a0:
                    54:1f:44:73:79:cc:f3:f8:db:27:6d:e5:4e:df:08:
                    24:f7:d2:28:f7:18:c4:d1:fc:4c:e5:4d:35:fb:16:
                    f7:11:e4:11:9c:8c:af:e8:69:43:93:06:85:a8:4d:
                    73:a9:b1:5a:f6:7a:21:b2:86:63:26:66:00:75:f6:
                    b0:c8:64:6d:c3:cb:14:5a:25:74:0b:81:de:99:98:
                    5b:c9:d9:47:5e:e0:40:d2:52:f3:d0:0c:95:4a:a9:
                    f1:53:84:cd:22:2d:63:7e:b4:1e:79:10:d2:3c:0e:
                    a6:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:82:57:87:31:E7:92:DA:20:C6:46:70:D2:34:F7:BE:FC:C0:F6:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/0811663f-279f-3f18-b2dc-2a75f82f5225.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/93caa9fe-d081-4e18-ad66-499a9209945e.crl

            X509v3 Authority Key Identifier:
                keyid:34:AE:DE:0F:3E:91:29:37:B5:0B:37:66:2F:72:4F:BF:62:3C:FB:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:2240:d000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:e0:90:c2:7a:ff:5b:43:72:98:8f:d0:c3:cc:89:2e:14:a4:
         27:ec:e1:70:0c:2c:3b:79:6d:db:a5:f2:45:23:d8:e3:5d:ee:
         52:f3:c4:3e:14:1d:5b:fd:af:7b:b3:51:a5:0c:06:dd:b1:dc:
         94:0d:31:de:ec:77:55:3a:f5:0b:7d:e3:78:00:0f:33:d1:93:
         f5:e7:78:64:45:ee:ba:58:f5:27:10:86:44:89:ff:81:c9:69:
         9f:28:43:6a:e3:4f:a4:e5:fc:2b:5b:aa:27:8e:6c:70:b9:d9:
         17:49:98:d0:e6:d5:6a:07:a7:90:3b:be:48:6d:44:a0:27:e6:
         19:cb:da:d2:12:46:b8:b1:85:ca:00:2f:5a:09:52:0f:30:a1:
         fe:4f:3a:ca:75:d3:90:40:a8:2e:f0:bd:ff:2b:6a:cb:3a:7c:
         6e:54:d3:15:54:a6:ff:79:28:e4:1b:e6:19:22:4c:e1:75:b8:
         27:f3:22:53:25:2b:f1:37:ef:da:f6:f0:43:b0:7a:a3:15:26:
         ca:82:82:94:99:7c:eb:a5:65:65:92:d3:27:fa:c7:fc:9d:90:
         f3:eb:50:23:f9:68:bf:88:d1:d7:dc:ae:ef:e5:b6:9e:70:ba:
         68:0b:cb:b2:89:35:68:d8:e7:cc:ec:05:7f:b1:f8:38:f1:4d:
         90:2f:22:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 20:11:23 2024 by rpki-client on console-ams.rpki-client.org