Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7/5bf9e334-dc7e-3b55-8aff-c525713a2347.roa
File:                     5bf9e334-dc7e-3b55-8aff-c525713a2347.roa (raw, json)
Hash identifier:          2WMG49UR+Bq7hOYrqE/lPO0mt1cAbEZj8jE7SvQQRf8=
Subject key identifier:   EA:D8:0D:BD:06:D2:CE:7F:CA:B0:0D:73:5A:8E:43:DF:C1:11:E2:D6
Certificate issuer:       /CN=de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7
Certificate serial:       010D0C9F432858477230F0778A527C668ED75F60
Authority key identifier: B0:5C:9D:61:87:E0:4C:3D:C2:68:B3:7C:B8:CE:51:99:8C:88:A8:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7/5bf9e334-dc7e-3b55-8aff-c525713a2347.roa
Signing time:             Sun 06 Oct 2024 01:00:31 +0000
ROA not before:           Sun 06 Oct 2024 01:00:31 +0000
ROA not after:            Sat 04 Jan 2025 02:00:31 +0000
asID:                     20388
IP address blocks:        2604:ce40::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7/de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7/de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:72:30:f0:77:8a:52:7c:66:8e:d7:5f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7
        Validity
            Not Before: Oct  6 01:00:31 2024 GMT
            Not After : Jan  4 02:00:31 2025 GMT
        Subject: CN=9d070707-7d06-4cd7-84ae-4805805107a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:49:2c:20:26:a6:40:2e:63:c7:57:ff:39:d2:
                    a4:bf:27:13:6d:60:2c:11:1e:ab:8e:3e:60:13:2d:
                    21:3e:1b:a7:50:86:16:27:72:57:73:b2:59:72:eb:
                    97:a4:55:3b:80:38:d0:a2:15:cc:55:5b:6c:92:c6:
                    86:b0:f1:d0:c3:78:12:b4:84:04:91:fe:dd:63:20:
                    d9:13:74:2d:09:c4:b8:fe:1a:5b:05:29:a4:bd:56:
                    77:75:7c:5f:68:00:f6:69:37:d5:b2:75:d0:07:19:
                    65:e4:46:7b:0c:83:b2:c4:4e:a3:39:ac:9a:62:56:
                    94:dc:57:62:86:32:1c:45:a7:1d:4a:c9:b6:ad:84:
                    9f:7b:11:1c:97:84:33:cc:45:96:22:37:fc:ef:73:
                    96:dd:cb:27:b1:6b:c5:b8:7a:1a:bf:a4:6c:c0:e5:
                    8a:bd:32:3c:94:16:b0:be:36:dc:24:e2:ac:9a:8c:
                    dd:6e:ba:66:d7:5c:20:0b:e5:d1:2a:9a:c3:ad:44:
                    b9:e3:b7:c9:26:fe:54:88:71:72:52:39:95:8b:38:
                    ef:6d:55:c5:2c:3e:16:b3:17:00:08:fd:94:87:c9:
                    72:ce:94:79:45:6c:71:e3:1e:42:8d:a4:1c:63:44:
                    44:a9:94:ae:e4:f5:f1:18:4b:40:1a:b2:16:9c:0c:
                    87:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:D8:0D:BD:06:D2:CE:7F:CA:B0:0D:73:5A:8E:43:DF:C1:11:E2:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7/5bf9e334-dc7e-3b55-8aff-c525713a2347.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7/de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7.crl

            X509v3 Authority Key Identifier:
                keyid:B0:5C:9D:61:87:E0:4C:3D:C2:68:B3:7C:B8:CE:51:99:8C:88:A8:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:ce40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:4f:e4:3e:0a:ff:27:a0:10:ed:13:72:a1:45:a9:65:45:5d:
         6f:6c:eb:1e:2c:a7:7f:fa:3a:2d:39:53:94:53:8c:01:64:a1:
         49:a7:9f:45:76:66:3a:5d:b0:0b:bd:fd:ba:8d:e2:89:8b:d8:
         92:15:d7:4f:4b:85:c9:ab:cf:ae:81:bb:78:29:6c:97:2e:b0:
         e0:2e:7a:0f:08:f7:c8:bf:54:b8:e6:2d:6d:b6:c6:cf:2b:84:
         a1:51:3c:f4:0a:fd:b4:18:28:1b:e2:b8:2b:d3:db:8b:4f:d1:
         73:e8:66:93:53:ed:bb:dd:72:41:07:24:6b:e7:b0:f9:5b:81:
         e6:90:b1:0b:8b:14:85:63:75:13:dd:f6:ab:2e:aa:e5:aa:c7:
         0c:6c:32:5f:5a:d2:a2:4e:98:52:58:30:7f:bb:b3:7c:8c:37:
         09:65:1c:07:91:42:9a:08:03:e0:44:ba:2a:26:0e:7f:db:2a:
         49:ec:83:64:94:10:40:67:07:4a:c2:3d:06:63:8c:36:ac:05:
         69:f2:33:9b:d9:22:9f:ef:8f:87:84:cb:89:47:7c:e8:b3:05:
         16:18:7b:46:9b:a1:0f:d1:c3:9e:fe:be:ea:74:cd:12:21:19:
         1e:43:31:fa:01:f7:a9:0a:c2:d7:a5:ea:c9:c9:7f:70:c6:64:
         6b:ec:de:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:26:57 2024 by rpki-client on console-fra.rpki-client.org