Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61/dec6e365-7207-39e3-b761-dd444c1dc0b3.roa
File:                     dec6e365-7207-39e3-b761-dd444c1dc0b3.roa (raw, json)
Hash identifier:          Wqe6AEn79RKLiadypu0QIQmrLZvJIgO4OS8zoo6fyEE=
Subject key identifier:   5A:67:AD:69:D8:91:78:19:9F:56:14:85:CE:71:B0:FF:6C:A8:8B:8F
Certificate issuer:       /CN=a9d8715f-6d4a-4b9f-93ff-8eb251588f61
Certificate serial:       010D0C9F43285847CE6F3CAB64860BA1FBD78C00
Authority key identifier: A6:25:D6:7E:3C:AB:C9:7A:58:9A:30:A3:BB:F5:E1:BC:A6:5B:0F:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61/dec6e365-7207-39e3-b761-dd444c1dc0b3.roa
Signing time:             Fri 08 Nov 2024 02:00:27 +0000
ROA not before:           Fri 08 Nov 2024 02:00:27 +0000
ROA not after:            Thu 06 Feb 2025 02:00:27 +0000
asID:                     39937
IP address blocks:        2607:5240::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61/a9d8715f-6d4a-4b9f-93ff-8eb251588f61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61/a9d8715f-6d4a-4b9f-93ff-8eb251588f61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ce:6f:3c:ab:64:86:0b:a1:fb:d7:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9d8715f-6d4a-4b9f-93ff-8eb251588f61
        Validity
            Not Before: Nov  8 02:00:27 2024 GMT
            Not After : Feb  6 02:00:27 2025 GMT
        Subject: CN=75e288f0-b30b-4e97-9409-2a9b29f4f78f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0b:c8:82:05:43:7c:8f:a6:3e:32:db:29:3c:
                    35:6f:b6:27:ca:99:92:15:d9:4f:1d:9c:51:76:6d:
                    14:2f:84:57:43:79:93:03:90:9c:db:d7:53:be:57:
                    8f:c3:bb:cf:2c:7c:72:57:09:ff:c6:39:fd:0f:23:
                    d0:3d:13:ca:e9:c5:84:3b:2b:1d:d8:5f:97:ab:4b:
                    81:79:22:5d:35:fe:97:60:a6:4b:d4:66:6f:58:e2:
                    93:ab:21:7e:89:e5:34:c2:de:59:c6:d0:e6:cc:fc:
                    78:ca:9e:a9:94:92:09:3f:3b:0e:b7:ec:00:fe:01:
                    89:5c:d3:f5:49:58:e2:1a:80:d1:a8:ad:75:d1:87:
                    00:de:d3:cf:65:f9:fd:6a:60:d3:22:27:fb:f6:94:
                    75:51:26:05:62:14:c7:57:d6:4c:2f:8f:d3:ff:32:
                    03:5d:0f:6e:8a:f2:c2:d1:e8:3f:8b:2b:0f:13:8e:
                    d5:4a:80:6e:fe:95:3d:32:52:20:cb:3b:68:cd:88:
                    78:20:98:26:28:6c:77:1d:6f:e8:db:b2:07:ca:d2:
                    09:2d:0c:f6:23:10:c4:b3:fb:53:d6:0f:cf:ef:e4:
                    ee:3b:57:70:3c:e0:4b:07:6b:96:38:fa:fc:23:f7:
                    a4:86:8c:1b:48:6d:6a:67:4b:73:5a:c5:58:d8:3b:
                    2a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:67:AD:69:D8:91:78:19:9F:56:14:85:CE:71:B0:FF:6C:A8:8B:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61/dec6e365-7207-39e3-b761-dd444c1dc0b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61/a9d8715f-6d4a-4b9f-93ff-8eb251588f61.crl

            X509v3 Authority Key Identifier:
                keyid:A6:25:D6:7E:3C:AB:C9:7A:58:9A:30:A3:BB:F5:E1:BC:A6:5B:0F:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:5240::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:bd:1d:26:48:fd:52:66:a2:14:77:29:72:63:b6:04:72:52:
         4e:ee:1a:fe:a5:41:7f:81:47:c2:97:37:50:09:81:64:5e:61:
         32:8e:23:59:80:6b:d1:c2:93:09:fe:62:57:a3:34:2d:5d:ac:
         47:43:13:6c:29:f6:29:fa:1c:d2:a6:4c:66:8a:9f:33:85:a5:
         87:49:7c:a0:1c:c4:c5:8b:31:17:d3:93:f0:02:0b:c8:74:40:
         bf:65:e8:56:8f:03:2f:4d:92:8d:b0:97:a0:d3:9d:0c:43:6f:
         17:8a:5b:50:d5:57:ea:94:cf:e7:a1:71:63:95:cf:b5:09:d2:
         a8:08:7e:14:7c:79:fe:ae:0c:28:d2:ba:bb:46:4f:79:18:94:
         26:9d:11:03:b7:5d:4d:af:2a:c6:fa:c2:f1:37:bc:64:bc:be:
         15:03:db:0c:43:68:15:1c:b7:81:8d:ed:26:5e:1a:c0:ad:06:
         11:ac:3c:d7:68:1f:c1:e4:83:cb:64:f0:cc:1c:7a:05:d2:3c:
         50:66:d8:cf:da:de:2d:62:2a:cc:51:d3:9d:e5:60:aa:7f:ca:
         a4:ab:32:50:ca:79:a0:5f:f3:1b:64:d1:ad:08:23:61:66:d6:
         f3:ee:46:ce:78:ad:8a:53:ff:a5:88:76:06:9c:bf:fd:5c:a5:
         9d:66:ef:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:22:06 2024 by rpki-client on console-ams.rpki-client.org