Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/84808f12-9e5e-47d7-bdbe-79f0833fad08/8bfedd8f-8d7e-3e52-9e97-3bc31ad7d218.roa
File:                     8bfedd8f-8d7e-3e52-9e97-3bc31ad7d218.roa (raw, json)
Hash identifier:          xLty/Ys26FKsPzqzTlp+tDUYoz0ynf2Ot2v++PEdOok=
Subject key identifier:   04:DF:84:6F:A8:85:1D:72:89:8D:05:BA:B0:D7:2B:60:E4:C4:54:B5
Certificate issuer:       /CN=84808f12-9e5e-47d7-bdbe-79f0833fad08
Certificate serial:       010D0C9F432858475A761FE3097298BFCAD0F140
Authority key identifier: D1:B0:B0:33:82:56:88:DD:56:7A:27:85:B1:9D:D0:4A:28:4D:11:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/84808f12-9e5e-47d7-bdbe-79f0833fad08.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/84808f12-9e5e-47d7-bdbe-79f0833fad08/8bfedd8f-8d7e-3e52-9e97-3bc31ad7d218.roa
Signing time:             Fri 27 Sep 2024 13:00:41 +0000
ROA not before:           Fri 27 Sep 2024 13:00:41 +0000
ROA not after:            Thu 26 Dec 2024 14:00:41 +0000
asID:                     40676
IP address blocks:        2607:6980:3a70::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/84808f12-9e5e-47d7-bdbe-79f0833fad08/84808f12-9e5e-47d7-bdbe-79f0833fad08.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/84808f12-9e5e-47d7-bdbe-79f0833fad08/84808f12-9e5e-47d7-bdbe-79f0833fad08.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/84808f12-9e5e-47d7-bdbe-79f0833fad08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5a:76:1f:e3:09:72:98:bf:ca:d0:f1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84808f12-9e5e-47d7-bdbe-79f0833fad08
        Validity
            Not Before: Sep 27 13:00:41 2024 GMT
            Not After : Dec 26 14:00:41 2024 GMT
        Subject: CN=7950f804-0485-410a-b8d2-2129b79265e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b3:3f:5a:f0:b5:8e:5e:ce:46:f1:bf:34:ae:
                    8d:01:b4:b6:73:6e:65:9a:3c:dd:13:4e:75:63:14:
                    d0:e5:e7:88:f6:52:ac:c7:96:2e:01:f9:f0:f2:11:
                    4a:00:a4:d6:b6:0a:e9:17:0b:8c:41:a3:30:94:07:
                    6a:e8:c0:fe:44:9f:03:e4:28:a0:44:ea:76:93:70:
                    14:96:1e:61:e1:af:c8:6a:25:53:16:65:40:40:2c:
                    e0:0a:04:3f:49:5d:58:02:9e:1a:79:86:97:8f:37:
                    c0:b6:69:b6:f9:e2:22:99:68:61:3a:df:16:dd:2e:
                    88:82:9f:ad:4e:82:60:ec:68:cc:8c:ff:5d:c8:ae:
                    46:49:43:65:a8:07:0a:47:1a:39:25:94:0b:b2:f1:
                    8d:cb:97:a4:65:52:90:92:77:d1:f9:22:53:10:d4:
                    6c:45:37:d4:c4:be:51:bf:14:d3:1c:bf:35:3c:03:
                    07:c7:ea:c7:0f:1f:26:c4:9c:52:8b:29:b2:ee:f5:
                    56:4e:54:c3:9b:2e:38:ec:b1:41:fc:85:8f:7b:72:
                    ef:70:64:10:ae:c8:2d:7f:ad:a0:18:74:64:e5:28:
                    b5:c1:8f:e1:d5:23:bf:0f:57:e8:fe:72:a6:e3:87:
                    11:db:f7:de:bb:5a:1d:73:b5:79:67:8b:8c:19:f3:
                    c0:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:DF:84:6F:A8:85:1D:72:89:8D:05:BA:B0:D7:2B:60:E4:C4:54:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/84808f12-9e5e-47d7-bdbe-79f0833fad08/8bfedd8f-8d7e-3e52-9e97-3bc31ad7d218.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/84808f12-9e5e-47d7-bdbe-79f0833fad08/84808f12-9e5e-47d7-bdbe-79f0833fad08.crl

            X509v3 Authority Key Identifier:
                keyid:D1:B0:B0:33:82:56:88:DD:56:7A:27:85:B1:9D:D0:4A:28:4D:11:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/84808f12-9e5e-47d7-bdbe-79f0833fad08.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6980:3a70::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:24:c8:dc:1c:d9:f2:1b:cd:84:e8:2c:84:eb:71:6b:ef:49:
         c3:7f:67:0a:2f:f1:02:5d:41:a3:2d:48:88:52:2f:61:49:58:
         7c:89:50:7b:a3:da:b1:89:27:96:f0:98:ac:1d:2c:ae:2b:f0:
         5f:e0:be:4d:ee:bd:f0:1d:23:56:a5:9c:d0:93:5f:45:50:e7:
         18:89:05:1b:02:9d:f1:55:da:c9:59:64:e5:3b:3a:34:0a:54:
         b8:11:36:93:49:de:99:6b:51:96:be:7f:e4:50:98:9b:bf:1b:
         82:ac:ff:71:1b:5f:75:c0:26:6a:dc:5e:75:6a:8c:c2:d5:68:
         7c:fa:c8:80:42:21:84:a7:68:2d:2d:9b:32:7b:18:8b:98:5c:
         2c:ea:9c:34:d8:29:cc:93:26:8f:f0:47:7f:08:85:23:f0:bb:
         ad:f9:24:10:79:f3:c9:13:16:0e:f3:0d:33:05:ac:1f:d5:bd:
         4e:87:97:cf:3e:51:0e:03:02:fc:c0:46:4c:67:3a:d0:71:31:
         cb:ba:3b:ca:f8:0b:c0:6d:0e:7b:ee:f8:26:ae:6a:36:5e:05:
         30:d7:55:cb:21:38:6b:8b:da:47:a6:44:4f:1f:65:8d:fd:39:
         a8:90:d8:7b:92:a2:eb:07:90:c6:00:af:1c:54:93:4f:78:5e:
         3f:eb:d7:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:36:39 2024 by rpki-client on console-fra.rpki-client.org