Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/2e28a3f6-304c-3281-89dc-19a4f98c8bf2.roa
File:                     2e28a3f6-304c-3281-89dc-19a4f98c8bf2.roa (raw, json)
Hash identifier:          RTi6qMn9W4P/5RhKVt1aPigT8PJW0QXyGGr6NKkzhPQ=
Subject key identifier:   E0:AD:05:3D:1A:C7:B6:3D:47:0D:14:58:6C:C8:AB:B4:F1:41:77:56
Certificate issuer:       /CN=c3c17db7-204c-41e2-85ca-6a5a448a8b88
Certificate serial:       010D0C9F43285846EE78752DB891D9A95DA0F4EA
Authority key identifier: 7D:2D:BA:FF:43:DB:E9:72:96:E9:45:87:95:5C:45:72:54:D4:6B:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/2e28a3f6-304c-3281-89dc-19a4f98c8bf2.roa
Signing time:             Mon 19 Aug 2024 20:38:06 +0000
ROA not before:           Mon 19 Aug 2024 20:38:06 +0000
ROA not after:            Sun 17 Nov 2024 21:38:06 +0000
asID:                     396982
IP address blocks:        2607:1c0:320::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/c3c17db7-204c-41e2-85ca-6a5a448a8b88.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/c3c17db7-204c-41e2-85ca-6a5a448a8b88.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Sep 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:ee:78:75:2d:b8:91:d9:a9:5d:a0:f4:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3c17db7-204c-41e2-85ca-6a5a448a8b88
        Validity
            Not Before: Aug 19 20:38:06 2024 GMT
            Not After : Nov 17 21:38:06 2024 GMT
        Subject: CN=61639f12-9b85-400f-83b7-165d800bd936
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:93:59:8d:37:1d:82:06:7a:45:3b:e7:46:05:
                    9e:e5:6e:77:42:f5:97:df:db:2b:02:a2:99:10:15:
                    9f:43:9e:56:17:99:c8:1b:31:e3:75:30:fb:97:aa:
                    35:ec:4f:bb:82:b3:ab:2c:da:d8:cc:7e:c0:b4:77:
                    9e:51:e8:25:22:e4:d7:4b:86:0c:0b:a3:ea:5a:52:
                    81:f7:d8:dd:f1:a9:11:4c:51:6c:60:2a:d2:bb:d0:
                    91:f9:7f:59:e6:cf:61:18:df:6a:ec:74:19:9b:14:
                    34:f4:7d:d4:7e:81:cc:60:81:f5:55:78:65:f7:6b:
                    8c:29:0a:4d:e1:a6:79:fe:54:14:5c:c5:07:c1:fe:
                    dc:a1:98:7d:62:d5:af:06:db:32:cd:88:50:ab:b3:
                    9c:e2:69:7f:d0:91:f9:d9:45:20:46:ad:dd:90:ac:
                    b8:d6:73:1f:97:45:af:34:45:68:d9:ea:71:d8:42:
                    cc:00:d0:6e:44:88:21:8b:1e:02:cf:cf:29:03:31:
                    a3:dd:af:78:e7:49:f0:97:62:83:58:cd:6f:fd:d0:
                    e0:14:87:6d:76:42:9d:11:64:fb:54:e0:2a:6b:7c:
                    09:be:84:b0:93:97:72:25:76:3e:c3:f8:32:40:5e:
                    aa:f3:a5:fb:25:83:33:2b:2a:dc:d8:4d:67:d2:f2:
                    29:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:AD:05:3D:1A:C7:B6:3D:47:0D:14:58:6C:C8:AB:B4:F1:41:77:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/2e28a3f6-304c-3281-89dc-19a4f98c8bf2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/c3c17db7-204c-41e2-85ca-6a5a448a8b88.crl

            X509v3 Authority Key Identifier:
                keyid:7D:2D:BA:FF:43:DB:E9:72:96:E9:45:87:95:5C:45:72:54:D4:6B:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:1c0:320::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:59:b0:46:d0:af:ed:62:4e:9c:bf:a9:af:db:db:6e:a8:03:
         30:23:8e:95:b7:c5:d2:5c:99:5e:bf:dd:28:0a:b8:dd:72:ce:
         13:90:e8:c7:ff:9a:85:6e:a9:0f:8a:d3:5c:36:64:44:59:4d:
         9c:17:14:41:5c:3a:41:a1:40:c2:4d:71:23:bc:94:d1:20:00:
         1a:88:c8:41:88:1a:0b:8e:a3:b9:77:9e:1e:29:51:97:32:ee:
         07:88:6e:d1:a5:c9:4f:05:91:bf:75:73:09:de:e2:68:f4:8e:
         84:ab:ca:30:a7:7a:bc:5e:2c:c9:92:49:a8:29:b1:42:51:c7:
         52:4c:89:86:85:8e:fd:9d:ee:1f:09:d6:32:7c:12:3b:9d:d8:
         6f:85:14:38:f8:a1:df:5d:25:2e:9b:3e:39:bc:68:19:ab:d9:
         1a:72:0e:48:c0:9c:a2:30:1c:5e:f8:6d:e4:dc:3e:3f:5e:94:
         2d:03:8c:d7:a8:8e:08:04:72:b4:63:69:7a:aa:d9:1f:0a:b4:
         a2:ac:5d:c0:e0:7d:63:08:e0:35:c0:66:0e:16:bc:df:aa:d0:
         d3:0b:04:c4:e0:6e:30:f6:f9:39:95:24:c5:3e:38:1e:e7:59:
         f4:d9:07:7b:3c:c0:a5:e0:d9:f1:99:aa:5d:0f:32:32:7c:cc:
         36:c1:6f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 05:59:12 2024 by rpki-client on console-fra.rpki-client.org