Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd/bf0d8f5a-37be-31d2-bc71-22237b74a3e6.roa
File:                     bf0d8f5a-37be-31d2-bc71-22237b74a3e6.roa (raw, json)
Hash identifier:          TDOKWPJtrAYjgvY7ZpgCBe63HxPJXHDYkvocwDQYlfo=
Subject key identifier:   53:A5:78:51:46:D1:67:FC:E3:83:54:A3:F8:F2:4F:E2:AB:8F:E7:1F
Certificate issuer:       /CN=bc3bcc6d-6679-419c-8300-bdebdffc8ffd
Certificate serial:       010D0C9F432858475A763D4A1F8CAA9E9089CC00
Authority key identifier: CC:59:79:C9:D5:F2:E0:6A:F8:9F:25:4F:78:84:1B:76:E3:65:E4:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd/bf0d8f5a-37be-31d2-bc71-22237b74a3e6.roa
Signing time:             Fri 27 Sep 2024 13:00:41 +0000
ROA not before:           Fri 27 Sep 2024 13:00:41 +0000
ROA not after:            Thu 26 Dec 2024 14:00:41 +0000
asID:                     398698
IP address blocks:        2605:eac0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd/bc3bcc6d-6679-419c-8300-bdebdffc8ffd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd/bc3bcc6d-6679-419c-8300-bdebdffc8ffd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5a:76:3d:4a:1f:8c:aa:9e:90:89:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc3bcc6d-6679-419c-8300-bdebdffc8ffd
        Validity
            Not Before: Sep 27 13:00:41 2024 GMT
            Not After : Dec 26 14:00:41 2024 GMT
        Subject: CN=a7409b24-6f48-493d-8026-eed95afc931c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c6:6d:0b:0f:4c:c8:25:44:42:c8:d9:03:b8:
                    32:d5:60:3b:3c:a7:8a:93:9e:74:ed:22:f8:ab:97:
                    63:97:24:bf:2d:b7:fc:ee:57:9d:d9:ab:f8:11:b1:
                    cf:c0:32:b6:27:ed:c1:09:ca:49:c4:d2:45:71:a1:
                    66:1a:53:38:7b:3d:b4:2e:24:bc:d0:79:06:5a:90:
                    0a:73:88:da:fb:3f:e2:3c:c0:ad:74:f2:70:a3:85:
                    69:28:b7:8f:14:34:17:e2:79:48:09:33:f8:50:42:
                    92:91:a7:0d:0a:28:8a:61:4e:5b:4a:7d:8a:17:45:
                    c5:d9:06:dc:4a:d4:48:ad:33:e5:9e:ae:b7:22:e6:
                    f4:9d:44:b9:18:f7:a9:73:e4:9d:b1:64:34:3b:7f:
                    a5:80:6a:b5:b0:af:6e:b9:33:46:be:cd:5c:35:93:
                    34:27:65:a0:80:3b:98:46:f3:a3:d8:68:bb:fc:68:
                    83:33:fc:c6:ed:50:bd:5a:ed:9f:da:ea:c1:5f:42:
                    8a:86:18:c7:0d:23:00:0a:20:ea:e0:75:19:68:a7:
                    42:98:8e:3b:9a:d8:c5:be:b6:72:eb:32:2f:71:9e:
                    17:39:f9:c8:06:2b:f6:3d:f6:93:60:15:65:6a:53:
                    a0:4d:17:04:d6:4b:17:8c:90:25:c0:93:41:10:ee:
                    8f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:A5:78:51:46:D1:67:FC:E3:83:54:A3:F8:F2:4F:E2:AB:8F:E7:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd/bf0d8f5a-37be-31d2-bc71-22237b74a3e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd/bc3bcc6d-6679-419c-8300-bdebdffc8ffd.crl

            X509v3 Authority Key Identifier:
                keyid:CC:59:79:C9:D5:F2:E0:6A:F8:9F:25:4F:78:84:1B:76:E3:65:E4:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:eac0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:52:71:9b:c8:56:66:f4:05:bf:23:5d:66:36:1a:62:30:df:
         69:ce:3a:c5:61:a1:59:a5:f6:51:b5:63:d7:9e:41:ae:2c:6f:
         32:68:cb:88:39:9e:e9:00:6b:66:89:06:d9:c2:e9:0c:66:72:
         ca:46:1a:2c:66:cf:de:a8:2e:9f:a4:cb:68:51:36:15:ec:e2:
         46:c9:cb:13:0f:0a:f6:99:3e:ae:6b:3e:1e:56:62:c7:7f:2b:
         45:97:c5:80:ec:d0:37:92:8e:f5:be:0b:7b:ab:4f:14:d0:91:
         95:68:be:ec:75:c1:45:4f:3e:95:6f:1b:18:04:c9:77:48:f6:
         b2:57:b4:7a:b4:5b:da:db:16:74:ea:b2:76:6a:ef:1c:80:95:
         cf:c2:79:85:90:d4:28:b1:5f:a4:89:f5:25:5e:15:ec:39:8c:
         75:b4:39:54:9c:b9:08:ba:45:c8:78:91:9a:ac:82:fa:12:f8:
         84:dc:0e:24:78:86:34:5f:f5:20:1f:5e:80:34:95:3c:c2:37:
         d7:80:d7:5b:00:1b:4b:57:7f:7e:13:10:bd:2c:42:2d:48:85:
         dd:84:64:14:c6:fd:cf:d9:7e:a2:cb:1c:f5:e7:88:82:b3:2f:
         27:41:98:85:8e:0d:81:8c:a9:8c:b7:22:85:8d:1f:be:57:3a:
         f9:ae:9c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:55:56 2024 by rpki-client on console-ams.rpki-client.org