Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ea55eb3-4cd0-4f2e-8cb7-8e594c8ac101/6d717d3b-58fb-33c5-b2f8-a6ac269f40ba.roa
File:                     6d717d3b-58fb-33c5-b2f8-a6ac269f40ba.roa (raw, json)
Hash identifier:          eNcrwTRXfsbWh74LpJrIdAXLcIBQ7NW07k1i8y3E4/8=
Subject key identifier:   A3:9F:99:D5:45:33:DB:4D:F9:46:48:13:21:46:FC:2A:D3:25:33:D5
Certificate issuer:       /CN=7ea55eb3-4cd0-4f2e-8cb7-8e594c8ac101
Certificate serial:       010D0C9F432858475A761E0601562E3A7F4C37C0
Authority key identifier: 72:40:90:B4:BD:E4:75:37:6E:E6:CE:EC:1D:3F:B9:54:C1:56:E7:CA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ea55eb3-4cd0-4f2e-8cb7-8e594c8ac101.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ea55eb3-4cd0-4f2e-8cb7-8e594c8ac101/6d717d3b-58fb-33c5-b2f8-a6ac269f40ba.roa
Signing time:             Fri 27 Sep 2024 13:00:41 +0000
ROA not before:           Fri 27 Sep 2024 13:00:41 +0000
ROA not after:            Thu 26 Dec 2024 14:00:41 +0000
asID:                     22237
IP address blocks:        2607:c140::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ea55eb3-4cd0-4f2e-8cb7-8e594c8ac101/7ea55eb3-4cd0-4f2e-8cb7-8e594c8ac101.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ea55eb3-4cd0-4f2e-8cb7-8e594c8ac101/7ea55eb3-4cd0-4f2e-8cb7-8e594c8ac101.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ea55eb3-4cd0-4f2e-8cb7-8e594c8ac101.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5a:76:1e:06:01:56:2e:3a:7f:4c:37:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ea55eb3-4cd0-4f2e-8cb7-8e594c8ac101
        Validity
            Not Before: Sep 27 13:00:41 2024 GMT
            Not After : Dec 26 14:00:41 2024 GMT
        Subject: CN=aa40a8f6-d3cb-4efe-ab37-13a27f1115ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:31:41:f6:88:eb:03:f0:30:2e:4f:de:88:e2:
                    c6:c1:cb:9a:6b:c8:b7:c1:a0:b8:5a:84:89:4f:88:
                    fd:4a:5a:f2:0e:bf:7d:97:15:12:fc:95:da:34:6f:
                    79:a8:01:d3:eb:c6:ed:9a:dd:9e:fa:23:08:c4:2f:
                    ed:00:5b:f8:f8:d1:b4:cf:78:e8:1f:d8:d3:c7:ea:
                    e4:d9:8f:13:15:01:fc:fb:d8:f8:e7:34:34:8f:2e:
                    a8:46:e9:61:f6:62:b6:bf:a4:df:da:35:54:44:89:
                    9a:09:08:0f:da:36:61:22:77:1d:93:82:94:b0:e4:
                    f6:8c:89:a1:60:a6:08:f8:0b:81:7b:04:f1:9e:75:
                    9c:f5:f5:02:f2:63:ba:45:e8:2a:67:81:90:d1:dd:
                    52:da:df:d7:f0:57:30:9e:45:ec:a3:55:43:83:f6:
                    c7:e4:f6:8f:83:35:fa:54:10:9f:4a:28:ba:44:83:
                    ed:f2:0f:59:d0:00:e2:80:2e:fd:05:d3:fe:a4:a9:
                    3a:9d:ae:27:56:3d:72:70:1d:8f:88:be:17:47:26:
                    cd:bb:97:02:ec:57:95:61:4a:25:a0:66:08:f2:10:
                    f2:9c:48:22:21:3b:15:a5:09:14:b3:1b:36:40:4b:
                    02:1d:dc:14:fe:bc:e0:a8:44:0c:b2:93:bd:ce:03:
                    68:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:9F:99:D5:45:33:DB:4D:F9:46:48:13:21:46:FC:2A:D3:25:33:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ea55eb3-4cd0-4f2e-8cb7-8e594c8ac101/6d717d3b-58fb-33c5-b2f8-a6ac269f40ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ea55eb3-4cd0-4f2e-8cb7-8e594c8ac101/7ea55eb3-4cd0-4f2e-8cb7-8e594c8ac101.crl

            X509v3 Authority Key Identifier:
                keyid:72:40:90:B4:BD:E4:75:37:6E:E6:CE:EC:1D:3F:B9:54:C1:56:E7:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ea55eb3-4cd0-4f2e-8cb7-8e594c8ac101.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:c140::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:0b:af:ad:68:fb:3f:c7:b3:d2:a6:bd:3e:c9:23:97:ee:7a:
         c0:b7:bf:a0:05:ac:07:c2:47:cc:a0:f6:e3:8e:e1:46:13:03:
         38:0b:cf:93:0e:b2:5d:72:b2:38:7c:0b:ac:a9:2a:9e:5e:e3:
         98:14:e2:ce:92:fd:14:c3:20:92:49:5a:ee:0d:a6:25:54:3c:
         f1:4a:b1:26:9c:8a:95:2c:27:03:3b:60:ba:67:de:8d:2c:8d:
         f4:16:a2:b6:66:9e:c6:a0:b6:90:2f:b4:78:68:c9:95:82:ea:
         4f:92:9c:89:8d:60:7e:3d:c3:52:e4:d4:a3:b5:11:e3:12:45:
         2e:0f:74:fb:5a:51:4f:b0:2c:38:52:2c:b2:23:3f:7b:0d:60:
         08:06:7f:b0:c5:11:0a:fd:94:be:4e:c0:6b:b8:23:93:3a:fb:
         01:a4:5f:8b:3d:f3:b3:55:f7:f0:19:90:e7:20:54:76:e0:e8:
         d6:15:23:4f:90:08:b0:56:7b:26:c2:c3:e3:04:19:a6:96:c4:
         a2:69:0c:1e:ad:42:c2:a3:1d:7c:24:63:d1:36:9c:ab:ec:94:
         35:fb:4a:ea:cc:cd:e1:60:40:84:ce:a9:41:ff:0c:43:8e:8e:
         69:0c:d2:29:d3:d3:56:2b:44:e2:39:27:b4:3d:f1:ec:66:5d:
         31:35:77:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 03:51:51 2024 by rpki-client on console-ams.rpki-client.org