Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/567ba016-7d2d-4729-a696-45a28ff7f6ec/5d25e087-be39-300b-9ac3-0f9a2a629082.roa
File:                     5d25e087-be39-300b-9ac3-0f9a2a629082.roa (raw, json)
Hash identifier:          gKhKyomYrmkW/j4baVNI3Pqmq/+hSonD5Gs5dhJp6pg=
Subject key identifier:   A9:AE:BF:E7:98:AB:E2:B5:9C:F3:40:67:D8:0E:AE:9D:CE:DC:D2:9D
Certificate issuer:       /CN=567ba016-7d2d-4729-a696-45a28ff7f6ec
Certificate serial:       010D0C9F4328584730CB236F813C8E8D33235D00
Authority key identifier: D6:6E:19:18:0A:CA:D3:59:B1:E7:67:53:04:B4:DE:32:DA:8A:07:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/567ba016-7d2d-4729-a696-45a28ff7f6ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/567ba016-7d2d-4729-a696-45a28ff7f6ec/5d25e087-be39-300b-9ac3-0f9a2a629082.roa
Signing time:             Thu 12 Sep 2024 14:48:03 +0000
ROA not before:           Thu 12 Sep 2024 14:48:03 +0000
ROA not after:            Wed 11 Dec 2024 15:48:03 +0000
asID:                     5670
IP address blocks:        2607:97c0:2000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/567ba016-7d2d-4729-a696-45a28ff7f6ec/567ba016-7d2d-4729-a696-45a28ff7f6ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/567ba016-7d2d-4729-a696-45a28ff7f6ec/567ba016-7d2d-4729-a696-45a28ff7f6ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/567ba016-7d2d-4729-a696-45a28ff7f6ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Sep 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:30:cb:23:6f:81:3c:8e:8d:33:23:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=567ba016-7d2d-4729-a696-45a28ff7f6ec
        Validity
            Not Before: Sep 12 14:48:03 2024 GMT
            Not After : Dec 11 15:48:03 2024 GMT
        Subject: CN=ba7e2ab8-7158-4f9f-86ab-09b1909b8156
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f3:32:c1:49:fc:85:98:99:6f:71:1c:52:a6:
                    5c:b2:27:46:27:02:1f:96:8d:68:77:cf:33:6b:8d:
                    e4:bf:ef:c6:c0:25:14:37:63:79:16:50:dd:b2:b3:
                    15:87:57:d2:d0:23:f2:76:5c:30:43:58:ed:07:4c:
                    7a:c1:27:15:88:cb:5d:d1:3e:6d:e3:a7:ca:e8:95:
                    af:d3:81:57:a1:e7:ff:89:cd:fc:48:94:bb:fd:ab:
                    0c:2d:92:11:69:49:a1:4a:f4:bb:7d:2d:f3:de:11:
                    92:49:0f:6b:39:ed:0b:d1:f2:2b:d2:d4:58:79:a1:
                    b5:85:f1:6b:1a:e4:57:73:c9:b8:0c:c2:42:86:c4:
                    09:f6:ed:bc:3e:2d:7c:bb:12:0e:48:0c:09:34:0a:
                    a6:d2:0b:7e:96:ac:5e:bf:80:37:4d:6a:4c:d7:86:
                    b6:33:1f:ef:d4:88:09:a7:9a:a9:40:db:b8:d4:1e:
                    8c:74:84:2a:34:d1:c0:f7:30:19:bf:fa:dc:ec:3e:
                    fa:26:a6:c4:0b:34:8f:3a:f4:39:4a:02:11:24:2f:
                    2d:ff:55:ae:c8:49:58:b9:41:6d:1f:bb:e3:53:23:
                    d6:f0:5f:71:2a:ad:40:c9:c6:84:8f:9f:8d:3c:b7:
                    46:b1:8a:ce:71:a9:66:08:61:d3:19:13:f9:7b:10:
                    8b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:AE:BF:E7:98:AB:E2:B5:9C:F3:40:67:D8:0E:AE:9D:CE:DC:D2:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/567ba016-7d2d-4729-a696-45a28ff7f6ec/5d25e087-be39-300b-9ac3-0f9a2a629082.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/567ba016-7d2d-4729-a696-45a28ff7f6ec/567ba016-7d2d-4729-a696-45a28ff7f6ec.crl

            X509v3 Authority Key Identifier:
                keyid:D6:6E:19:18:0A:CA:D3:59:B1:E7:67:53:04:B4:DE:32:DA:8A:07:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/567ba016-7d2d-4729-a696-45a28ff7f6ec.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:97c0:2000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:f8:e3:24:68:77:61:69:aa:a5:6e:fa:5a:d6:2f:20:de:7c:
         94:ac:0f:52:f7:07:42:f4:ed:c4:97:ac:ac:d4:21:dd:2a:cc:
         31:21:dd:46:41:81:ad:f7:79:9e:af:b8:98:23:98:f4:97:65:
         fc:4d:8e:db:6c:04:98:0c:ac:2c:fa:71:47:d0:2f:41:f2:e4:
         c4:e6:97:31:55:0d:7c:b4:cf:0c:e6:53:d7:5e:2e:b9:59:c8:
         63:14:e7:3b:be:45:ba:3c:e3:39:cf:b5:92:dc:23:cf:65:5a:
         fd:25:15:a1:17:bc:c8:95:cc:04:41:f7:22:1b:b0:2e:31:4f:
         58:68:0a:43:72:c5:1b:d8:8b:f9:99:60:52:05:fb:e5:22:ca:
         59:69:7d:6a:3f:34:47:e6:b0:16:70:a4:a8:ac:13:db:ad:60:
         b0:ad:e7:33:5e:74:44:91:e6:76:76:3e:5a:3d:df:07:7a:b9:
         cc:31:da:9c:1f:78:2d:bc:4b:e9:aa:05:96:a4:d0:c5:d9:9c:
         13:06:3b:b3:e6:7e:34:f7:c7:c0:7c:c5:a1:13:7a:de:1d:65:
         c7:29:7a:7d:4a:da:57:45:b0:01:e6:69:d2:3a:3d:7f:50:14:
         fc:6d:6c:3d:cd:68:77:26:72:d2:92:07:b2:8a:a5:eb:1b:1f:
         e0:79:da:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 06:14:28 2024 by rpki-client on console-ams.rpki-client.org