Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/68250aec-f861-319d-ba5b-6553bba87e15.roa
File:                     68250aec-f861-319d-ba5b-6553bba87e15.roa (raw, json)
Hash identifier:          LRUocsPk0g92cdH7Ew5XYcZoO7eApjxuPnBSp/yLS9o=
Subject key identifier:   0D:9A:CE:6D:16:48:D7:88:EC:E2:74:81:17:DA:16:87:40:FD:94:B4
Certificate issuer:       /CN=9df142df-6de2-47dc-be4f-bf09bdec0551
Certificate serial:       010D0C9F43285847A1A680A347A0ED426E65E9C0
Authority key identifier: F6:9D:59:3D:DA:56:6A:99:BD:86:A9:15:67:C6:BE:60:D7:D9:BC:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/68250aec-f861-319d-ba5b-6553bba87e15.roa
Signing time:             Wed 23 Oct 2024 01:00:32 +0000
ROA not before:           Wed 23 Oct 2024 01:00:32 +0000
ROA not after:            Tue 21 Jan 2025 02:00:32 +0000
asID:                     19229
IP address blocks:        2607:2e00::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/9df142df-6de2-47dc-be4f-bf09bdec0551.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/9df142df-6de2-47dc-be4f-bf09bdec0551.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a1:a6:80:a3:47:a0:ed:42:6e:65:e9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9df142df-6de2-47dc-be4f-bf09bdec0551
        Validity
            Not Before: Oct 23 01:00:32 2024 GMT
            Not After : Jan 21 02:00:32 2025 GMT
        Subject: CN=c8d68220-8e01-43e7-9e3e-9524414087a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ec:1a:fc:d1:e4:20:54:ff:e7:13:32:c8:a4:
                    5a:89:ab:11:1b:b2:49:56:3b:44:ec:62:b7:83:f3:
                    b3:94:8a:28:ad:ca:79:5e:16:1c:9d:3d:66:a5:f5:
                    84:40:83:77:d7:20:83:af:ba:41:ab:2c:40:fe:75:
                    f5:7f:81:f2:5c:15:89:d8:e0:75:00:72:f8:48:4c:
                    4a:cb:02:e9:38:40:5e:df:7f:ce:b6:31:a7:25:09:
                    fe:a7:2e:88:9d:07:11:7d:c6:47:8b:4d:74:c8:60:
                    79:d6:ad:a3:e1:0c:87:86:7b:69:fa:91:61:ba:40:
                    e1:29:5a:71:49:cc:eb:df:e6:fc:fc:19:72:f6:2f:
                    51:4f:0e:6a:49:f4:c7:bd:72:53:4c:ae:6c:62:5f:
                    7c:60:d8:53:69:ee:34:ef:28:e7:51:fa:a1:8a:fe:
                    41:2b:b1:7f:2c:28:93:dc:67:bc:ee:f1:e7:be:41:
                    e3:20:c6:2c:f6:52:bb:25:5e:2c:6a:97:9b:d3:68:
                    16:69:78:43:41:da:cf:f8:3d:90:ea:3a:39:fd:7d:
                    56:f4:c0:90:c5:25:f6:9f:c5:c8:7c:50:7d:a5:8d:
                    a9:b1:ea:01:35:57:f1:f0:12:a2:51:eb:fc:a1:12:
                    55:39:ae:ba:d6:3d:a6:b7:e4:b6:43:d7:97:b3:82:
                    32:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:9A:CE:6D:16:48:D7:88:EC:E2:74:81:17:DA:16:87:40:FD:94:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/68250aec-f861-319d-ba5b-6553bba87e15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/9df142df-6de2-47dc-be4f-bf09bdec0551.crl

            X509v3 Authority Key Identifier:
                keyid:F6:9D:59:3D:DA:56:6A:99:BD:86:A9:15:67:C6:BE:60:D7:D9:BC:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:2e00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:b9:e9:a2:5f:f2:73:fc:a5:44:9e:31:48:1f:c6:fc:d0:d3:
         b6:67:a1:ae:4e:e9:2d:2a:0a:67:41:d7:c3:d1:ff:98:4e:1b:
         c8:f5:cd:49:37:bd:b5:20:e6:de:3d:f4:34:ca:c3:2c:70:56:
         c2:f7:85:fd:ee:9b:8f:2d:36:fb:39:76:8a:4b:6c:b4:c2:30:
         01:d1:f0:d5:e2:c0:66:c7:6e:71:28:1c:0a:d7:93:2e:88:a8:
         4d:2e:7f:b5:b9:b6:34:ff:6a:37:5d:15:1e:e6:70:ce:fe:82:
         46:0d:41:c7:1d:20:b4:45:ad:b7:9a:78:21:98:a5:4c:33:76:
         de:e8:09:a5:b6:2c:7a:81:d0:35:a7:2d:40:9d:f7:b0:08:65:
         f6:0c:ac:f3:cc:db:5a:74:f3:90:b1:59:fe:a9:3a:83:3a:0a:
         8c:79:8e:bb:e9:ff:79:d7:f4:37:a4:b0:14:c6:3b:45:f7:ab:
         b2:17:1c:8e:84:80:30:aa:a7:4f:98:1b:e4:1f:f3:f5:35:93:
         e3:27:f4:f1:53:b2:d2:c0:44:d7:13:4b:fe:b8:29:bf:1a:da:
         fc:01:82:c1:f3:3b:c2:e2:44:60:e5:2e:8f:2b:ad:af:7a:f6:
         c9:4d:02:57:de:56:54:81:04:0e:07:e7:de:39:9d:54:f4:c8:
         50:3e:1d:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:55:55 2024 by rpki-client on console-ams.rpki-client.org