Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/3612a7fb-9f3d-35cb-a341-b647a5bd7005.roa
File:                     3612a7fb-9f3d-35cb-a341-b647a5bd7005.roa (raw, json)
Hash identifier:          6mvnkaAF5xEV3NULxo9rt+nKTnIJpPD9kJBHhM7PMfo=
Subject key identifier:   C4:C2:08:F7:D8:1E:92:EC:CB:7A:01:5F:A5:1F:C3:51:50:F1:E9:3D
Certificate issuer:       /CN=12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf
Certificate serial:       010D0C9F432858476C9BC13DFB4571AE24D1FE00
Authority key identifier: 09:28:03:82:14:21:A9:9C:A8:43:E5:A3:00:37:47:84:D1:24:67:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/3612a7fb-9f3d-35cb-a341-b647a5bd7005.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     397041
IP address blocks:        2604:f740:bacb::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9b:c1:3d:fb:45:71:ae:24:d1:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=588267f4-3e78-41d3-a5b2-3fd8b950e827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:25:14:a4:a0:80:a5:04:9d:40:af:d1:54:96:
                    00:80:68:13:b9:c5:2c:25:f8:0b:16:88:ff:b5:bb:
                    10:bf:4d:dc:0f:16:79:85:c6:1e:11:9a:c0:dc:7a:
                    72:64:7d:be:25:82:1c:21:0e:8e:26:a9:c1:0b:80:
                    98:aa:df:16:8f:4b:33:89:ea:57:3b:f7:38:1c:96:
                    53:14:6a:b0:34:76:fe:aa:88:02:8b:c8:16:8b:ee:
                    06:42:21:fd:fb:99:eb:a5:08:e6:de:de:2c:53:5d:
                    42:2b:7a:6c:0d:e5:d8:8c:54:bc:cb:05:74:b1:d3:
                    41:08:e7:e0:92:f9:52:9a:e0:d9:74:cf:20:e4:43:
                    81:b2:53:4c:cf:a8:f1:01:7e:b1:bd:02:e1:c2:06:
                    2d:60:9f:a6:b8:45:53:0d:db:e9:07:46:22:5b:2f:
                    7c:23:62:b1:06:bb:d4:49:72:5d:4e:94:b3:9c:d3:
                    56:ae:33:0e:e6:b2:a5:84:fc:0c:32:16:f4:af:93:
                    18:b8:f6:d4:69:cf:4f:c6:32:16:24:d1:23:1e:84:
                    fe:02:9f:79:13:87:ed:a1:ed:70:07:a5:e4:84:71:
                    de:81:42:18:46:10:56:74:7b:d3:54:f7:cb:02:6e:
                    e1:e0:27:cf:87:0d:da:a3:e5:f7:a7:c1:49:99:3a:
                    b3:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:C2:08:F7:D8:1E:92:EC:CB:7A:01:5F:A5:1F:C3:51:50:F1:E9:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/3612a7fb-9f3d-35cb-a341-b647a5bd7005.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.crl

            X509v3 Authority Key Identifier:
                keyid:09:28:03:82:14:21:A9:9C:A8:43:E5:A3:00:37:47:84:D1:24:67:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:f740:bacb::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:21:e2:0d:a8:c8:12:87:6b:ee:3f:a7:d2:45:97:7d:03:11:
         66:32:c7:d2:21:d7:fc:9c:28:41:e2:72:0b:80:46:2c:b6:34:
         44:5d:cd:40:2a:15:67:93:8d:cb:2b:44:2e:62:42:98:3b:16:
         87:7b:e2:1d:39:72:35:83:65:51:69:36:3b:c6:0e:b0:dc:1f:
         58:48:de:25:c6:f2:ae:87:56:af:4e:18:63:b3:78:cc:46:24:
         5b:d2:d5:e6:d8:db:17:3e:d0:a1:cc:2b:96:9b:15:80:52:17:
         b4:63:4c:d8:e9:50:ae:99:84:ee:d9:81:15:79:22:9b:ac:88:
         eb:58:72:5d:81:75:fd:82:03:74:57:13:4c:4d:92:92:47:39:
         6e:08:be:93:73:e1:86:87:ba:68:0d:c6:37:50:e3:39:69:6f:
         66:fb:eb:99:bc:fa:a5:ad:7a:d9:bf:54:26:1d:f5:33:f5:59:
         27:ce:e8:a0:04:4c:0f:9b:af:4b:28:69:0a:78:fd:38:97:e5:
         7a:5b:02:c8:c3:18:f3:ab:fb:17:57:a0:9e:04:68:75:69:78:
         7a:51:99:a0:c3:73:61:b5:46:59:71:1f:8c:01:a5:d1:8d:aa:
         57:c4:a6:df:f9:1b:ac:2e:25:cb:be:6b:ac:85:eb:e9:cb:48:
         c6:9b:18:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:29 2024 by rpki-client on console-ams.rpki-client.org