Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/ead2489b-efca-3bfd-b550-11e65c8377cd.roa
File:                     ead2489b-efca-3bfd-b550-11e65c8377cd.roa (raw, json)
Hash identifier:          bJ0m23hqUiScAb5scTUsley6k+zCUbLWhGsoLLUFmOU=
Subject key identifier:   4C:DB:51:23:C0:77:BA:5E:98:B9:2F:DA:1A:B1:75:44:C2:87:F7:BE
Certificate issuer:       /CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d
Certificate serial:       010D0C9F4328584789EBFD1050C73EE045F73380
Authority key identifier: D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/ead2489b-efca-3bfd-b550-11e65c8377cd.roa
Signing time:             Mon 14 Oct 2024 13:00:47 +0000
ROA not before:           Mon 14 Oct 2024 13:00:47 +0000
ROA not after:            Sun 12 Jan 2025 14:00:47 +0000
asID:                     393885
IP address blocks:        2604:4a00:9000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:89:eb:fd:10:50:c7:3e:e0:45:f7:33:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d
        Validity
            Not Before: Oct 14 13:00:47 2024 GMT
            Not After : Jan 12 14:00:47 2025 GMT
        Subject: CN=6811068d-2817-4811-af6d-1dae410f4921
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:45:25:37:d9:2d:c7:38:73:26:40:97:04:f2:
                    b2:60:07:e8:90:b7:17:2f:c4:ff:d0:f6:05:42:fc:
                    72:8c:4f:f3:7e:7f:71:26:b7:c5:a0:44:37:15:8b:
                    31:69:13:92:d1:d2:4d:b8:9a:00:58:3c:03:81:f4:
                    97:37:61:4e:c4:75:6e:3d:fb:c1:f8:8f:03:5c:60:
                    88:70:93:5a:ce:a4:95:1d:8c:6c:60:e1:cf:00:61:
                    dd:37:79:26:6f:8a:b9:ad:6e:21:74:fa:be:3b:1a:
                    bb:1a:54:e1:2f:d9:1a:5e:3c:31:e6:2a:77:5a:b0:
                    d5:63:63:6a:56:0e:29:80:76:9d:ed:59:38:de:90:
                    7f:b6:83:6a:af:40:2f:5a:a7:4f:9b:70:10:ca:b2:
                    e4:36:d2:c1:ed:f9:69:04:bc:ec:00:3e:4d:20:64:
                    62:8e:2d:98:e2:66:a7:b9:46:c5:74:48:d2:79:62:
                    28:78:ab:22:ad:66:19:4a:fb:7a:03:d9:6b:a3:cc:
                    1f:d3:2a:20:45:53:ec:9a:d7:10:31:82:1e:43:9d:
                    a5:a8:78:ff:1a:83:8a:02:d2:3a:9a:0a:e0:93:04:
                    7c:42:40:8d:f7:3e:ef:ac:e5:63:c1:36:a2:66:4b:
                    dd:0f:54:05:f4:35:ea:05:b1:e4:d9:a5:bd:8e:a3:
                    da:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:DB:51:23:C0:77:BA:5E:98:B9:2F:DA:1A:B1:75:44:C2:87:F7:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/ead2489b-efca-3bfd-b550-11e65c8377cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl

            X509v3 Authority Key Identifier:
                keyid:D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:4a00:9000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:d3:94:14:71:b0:6f:aa:d5:c2:70:de:8c:66:65:fd:16:ff:
         8d:f0:72:09:0f:62:21:ff:1a:84:d5:70:08:f5:bb:0e:bb:e3:
         a3:3f:a5:8b:fd:6d:ee:40:f8:da:9b:1b:16:a4:83:58:75:61:
         eb:09:52:f7:8a:55:8b:af:0c:ba:92:b5:43:ac:81:a9:32:47:
         0c:57:26:cc:d1:bf:9b:32:a1:43:1d:bb:67:bd:63:5f:4a:7a:
         b0:12:b9:58:97:af:ce:4c:e5:6c:5f:f7:85:54:39:0b:99:6f:
         55:f6:33:4f:47:73:1c:1d:f0:93:76:d9:d7:51:0a:9c:0e:1a:
         f4:62:89:03:70:0d:59:cf:db:3d:5d:0d:40:6b:43:2b:37:f7:
         f5:44:0d:45:b2:8c:5f:94:65:39:16:fc:1a:a7:46:25:1d:bf:
         37:ce:4f:d7:18:11:e6:17:94:96:3b:5a:c3:6e:5d:5e:26:7f:
         65:f6:92:b0:a7:fd:52:22:e1:11:3c:f6:3c:3d:6a:92:6c:b6:
         e2:ee:63:5a:c4:6a:83:c9:52:0a:53:b4:99:28:63:70:17:12:
         36:3a:32:a7:c3:8e:f0:38:76:0e:13:04:16:80:f8:69:10:78:
         04:31:8e:d7:d5:af:4d:ec:7e:1b:c3:22:ee:f2:02:e6:52:36:
         96:eb:df:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:30:30 2024 by rpki-client on console-fra.rpki-client.org