Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/ae2c5b0f-33fb-3ffe-b7ad-c483856d4224.roa
File:                     ae2c5b0f-33fb-3ffe-b7ad-c483856d4224.roa (raw, json)
Hash identifier:          I7CuOecwOj+ohgGcxwgNVgNBaYa2we8q5BhLOAsyeSY=
Subject key identifier:   76:D8:47:D5:2B:C3:C0:DB:E2:F9:69:07:E2:0B:80:A5:69:48:AB:FF
Certificate issuer:       /CN=12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf
Certificate serial:       010D0C9F432858476C9BBF63147BFBA39664A080
Authority key identifier: 09:28:03:82:14:21:A9:9C:A8:43:E5:A3:00:37:47:84:D1:24:67:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/ae2c5b0f-33fb-3ffe-b7ad-c483856d4224.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     397041
IP address blocks:        2604:f740:100::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9b:bf:63:14:7b:fb:a3:96:64:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=fafcaf49-acef-455d-9a05-f33ddb4d6994
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7e:90:9f:49:bc:43:bb:b6:0c:46:d8:f9:50:
                    27:80:f4:67:fb:6d:1a:99:6d:12:6c:72:17:25:47:
                    7d:76:9d:13:65:66:2b:14:31:cf:36:63:fd:58:dd:
                    2a:14:cc:3b:11:70:53:0c:d3:50:12:57:6e:b0:55:
                    79:59:10:ac:2e:ab:81:2e:3b:e3:b9:e8:8f:b0:13:
                    e3:63:25:0f:0a:78:9b:97:bf:a8:19:26:8c:7d:22:
                    60:2b:23:ae:8c:36:a3:30:eb:d3:d5:21:e1:a9:31:
                    1b:a2:6b:a2:1d:48:61:b7:8c:98:e8:14:81:d1:ab:
                    ee:a6:e6:2c:f9:e4:35:70:50:2b:1f:85:2c:e1:8a:
                    0a:4a:af:8f:9b:c5:20:04:59:d9:fc:cd:31:0a:0f:
                    1b:21:0c:66:90:90:b7:83:a0:2d:2c:7f:5b:2f:24:
                    1f:fc:ac:4f:03:ce:51:cf:1e:80:24:4b:06:41:09:
                    1f:8c:aa:16:9b:c1:67:a6:b1:7f:ac:c2:fb:6b:49:
                    8f:33:ec:92:ff:6d:c4:2d:32:2a:fd:49:7e:c1:fc:
                    e0:50:15:a9:9a:78:90:0f:87:67:3b:b5:e4:27:79:
                    44:2d:31:a7:a9:e2:8f:21:55:57:bc:87:98:6a:35:
                    2d:fc:e8:99:be:d1:13:cc:b1:d3:e0:9f:14:db:92:
                    d5:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:D8:47:D5:2B:C3:C0:DB:E2:F9:69:07:E2:0B:80:A5:69:48:AB:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/ae2c5b0f-33fb-3ffe-b7ad-c483856d4224.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.crl

            X509v3 Authority Key Identifier:
                keyid:09:28:03:82:14:21:A9:9C:A8:43:E5:A3:00:37:47:84:D1:24:67:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:f740:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:e7:24:8c:f3:eb:ee:a0:09:19:20:53:22:59:05:2d:1f:68:
         5a:08:fe:d5:30:ab:0b:72:e1:99:07:1a:63:ba:89:31:80:8e:
         d8:70:d0:9a:97:0b:59:f7:26:49:9f:11:b5:f8:71:a8:be:e8:
         57:7a:8a:d6:fd:f6:9b:b8:f6:71:99:32:fa:36:a3:8c:73:23:
         2d:74:45:d7:06:50:83:66:ff:27:30:5e:76:9d:55:40:0c:85:
         e9:62:4b:52:eb:86:fe:0a:ea:7c:f3:7c:af:d8:9d:ea:da:b9:
         82:8c:7a:e1:c8:f1:f7:81:4d:5d:c7:92:db:a8:52:44:9d:76:
         e9:b7:6a:41:ec:3f:fb:61:c1:4a:b1:2d:6e:28:6d:16:06:ff:
         3d:f4:7c:df:c4:15:99:1a:2f:83:6a:b3:2e:9c:4a:38:af:f1:
         37:b9:41:d5:62:84:17:f5:4d:23:25:7c:3e:c7:f3:92:df:bb:
         b2:1f:17:26:7e:d9:35:69:71:99:a3:86:68:73:0c:be:22:fa:
         eb:0b:10:a0:21:50:ed:74:5d:af:e4:99:e4:36:7b:78:77:b5:
         c9:62:67:95:69:ab:4a:18:de:ac:6d:c2:2b:d8:00:c6:98:7b:
         2e:e6:d1:c7:33:10:d0:5f:e1:dc:ec:82:46:c8:50:50:c5:46:
         c0:2b:de:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:19:03 2024 by rpki-client on console-ams.rpki-client.org