Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/c794535d-4f66-3ef7-abd2-35d8f1551d49.roa
File:                     c794535d-4f66-3ef7-abd2-35d8f1551d49.roa (raw, json)
Hash identifier:          FcuBi7dx32nH++P/CSsFsRxG5Y3cPMRBDm7aQ1NHCIQ=
Subject key identifier:   5E:B6:E6:B6:6A:5B:A4:6B:85:DD:E7:11:D5:A2:DE:1F:59:DD:75:C9
Certificate issuer:       /CN=ffdee3f8-e368-45ea-9a0a-033c591b4971
Certificate serial:       010D0C9F4328584733609B4E609BAA2D0F06B140
Authority key identifier: A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/c794535d-4f66-3ef7-abd2-35d8f1551d49.roa
Signing time:             Fri 13 Sep 2024 13:00:41 +0000
ROA not before:           Fri 13 Sep 2024 13:00:41 +0000
ROA not after:            Thu 12 Dec 2024 14:00:41 +0000
asID:                     11650
IP address blocks:        2604:2e00::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:33:60:9b:4e:60:9b:aa:2d:0f:06:b1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffdee3f8-e368-45ea-9a0a-033c591b4971
        Validity
            Not Before: Sep 13 13:00:41 2024 GMT
            Not After : Dec 12 14:00:41 2024 GMT
        Subject: CN=82273588-3990-479f-a758-5e562471baab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:86:8f:38:0d:57:f8:78:45:6c:f6:48:ef:21:
                    a3:ef:46:0c:eb:d9:78:77:87:9f:50:2e:02:12:ee:
                    df:97:bd:50:81:29:83:f9:ec:5a:47:86:01:40:c8:
                    94:69:3d:55:6a:15:d3:de:30:6e:ed:75:db:2a:7f:
                    df:85:09:25:e3:c1:6e:6e:a6:6a:88:8c:74:98:7d:
                    75:fd:be:9f:38:c8:44:ae:dc:59:f5:a5:06:87:6e:
                    8d:f1:41:2e:5c:da:75:a7:d2:fd:86:1d:f0:6d:7b:
                    59:2f:fe:35:8a:de:7b:70:53:a9:e1:fd:65:0f:56:
                    19:68:c4:e4:12:24:3f:73:c9:b1:e4:7b:a6:58:66:
                    25:bd:78:62:58:0e:bb:e8:6a:b8:81:da:c0:1d:4e:
                    c8:f7:45:8e:16:cc:4d:d0:75:a3:89:ee:ac:8c:28:
                    74:5f:0e:ff:95:e4:48:50:e1:02:35:46:b9:56:03:
                    f9:ac:6b:73:04:69:14:3a:07:05:56:eb:ca:ce:c3:
                    1f:af:af:92:54:d2:7d:e3:c7:8c:85:2d:b6:27:9c:
                    35:71:6e:0f:81:51:3e:39:9e:89:f8:81:b6:ee:ee:
                    51:02:42:c4:d8:b7:d6:6f:46:fd:0e:f5:a5:3d:75:
                    f7:0e:ad:6f:69:42:af:c0:6f:19:03:21:9f:92:73:
                    ab:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:B6:E6:B6:6A:5B:A4:6B:85:DD:E7:11:D5:A2:DE:1F:59:DD:75:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/c794535d-4f66-3ef7-abd2-35d8f1551d49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl

            X509v3 Authority Key Identifier:
                keyid:A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:6c:42:45:36:3d:bc:f9:cf:67:b5:fa:7e:d8:5e:33:7a:38:
         57:0b:8b:2c:ee:31:b7:5a:8b:b1:fc:b7:29:6b:cd:a6:53:cc:
         ad:02:dc:ff:80:bd:7e:25:db:2e:29:eb:9f:f6:a1:f6:84:68:
         f1:a6:1f:f1:65:16:bf:e9:6c:5d:33:8a:5d:47:9c:1e:19:9e:
         be:98:32:06:96:f1:e9:50:b5:2b:75:ca:f2:c2:01:09:1f:43:
         fd:c6:e6:8e:15:a1:5b:d1:ed:b6:a1:91:e3:b7:43:22:75:1c:
         af:e6:b7:d7:3c:e0:ac:c9:f6:9b:ac:ac:33:dc:1b:6e:0d:e8:
         8c:b1:8d:97:86:ab:91:36:33:ef:a1:5d:77:e8:90:2f:31:f4:
         d2:3c:ca:98:42:28:ec:15:7a:dc:ab:e6:d6:ec:2d:2e:66:58:
         ba:5d:41:72:e5:41:8a:d7:6c:49:fc:57:50:5a:ec:be:7d:6d:
         a0:f6:50:8a:88:f5:b4:a8:33:d9:e5:19:e1:0e:1b:15:d2:56:
         a0:89:19:b1:5c:e3:e7:1c:ee:5b:e3:ed:80:e3:f5:d5:52:43:
         0c:a9:81:76:62:84:6b:af:45:78:1d:ab:e9:07:9d:b9:69:31:
         3c:4b:37:84:4c:46:ad:2a:df:17:61:4c:6a:94:07:99:96:6e:
         dd:6d:03:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 16:04:01 2024 by rpki-client on console-ams.rpki-client.org