Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/bd19eec5-2c6a-32c5-ba51-b4400860bb18.roa
File:                     bd19eec5-2c6a-32c5-ba51-b4400860bb18.roa (raw, json)
Hash identifier:          2DQgvkfMXer7MrQFUWJ+3Bl8qKc5yKzH1yjE06Ylfoc=
Subject key identifier:   20:ED:C2:93:18:E6:B8:82:E7:2D:D3:1C:97:7C:8A:CE:96:E2:B0:B2
Certificate issuer:       /CN=aff0c042-cf36-4d6f-954a-bee61a5b3dcc
Certificate serial:       010D0C9F43285847A1A67F6744F47AFC7A8F1900
Authority key identifier: 60:C9:6D:C0:44:A6:6F:BD:2F:6E:CB:03:EA:6B:17:FC:BA:6C:2E:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/bd19eec5-2c6a-32c5-ba51-b4400860bb18.roa
Signing time:             Wed 23 Oct 2024 01:00:32 +0000
ROA not before:           Wed 23 Oct 2024 01:00:32 +0000
ROA not after:            Tue 21 Jan 2025 02:00:32 +0000
asID:                     53454
IP address blocks:        2605:2480::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a1:a6:7f:67:44:f4:7a:fc:7a:8f:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aff0c042-cf36-4d6f-954a-bee61a5b3dcc
        Validity
            Not Before: Oct 23 01:00:32 2024 GMT
            Not After : Jan 21 02:00:32 2025 GMT
        Subject: CN=aa99ec90-9971-4f2f-9d64-5955210aabd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:5b:5d:bb:89:b0:0b:98:d8:fd:21:21:e4:c5:
                    77:49:00:c8:d9:8a:c9:16:13:97:93:53:76:18:16:
                    3e:9b:a8:d7:cb:13:4e:06:43:df:97:2e:80:ae:3b:
                    a2:33:6a:59:18:2a:c3:d2:2d:b3:9c:5f:29:d7:6e:
                    bc:71:47:fb:e9:5f:9a:b0:54:5e:18:63:7c:44:dd:
                    fb:83:c9:59:56:6c:76:9e:89:46:6f:43:31:19:cf:
                    0f:33:4a:bd:31:57:cf:e9:e6:db:67:ab:1f:44:5c:
                    df:70:2b:92:ba:25:67:ab:43:df:97:78:d4:b6:5a:
                    24:a8:05:82:28:be:94:ee:8e:11:dd:9c:1b:e3:80:
                    dd:b8:be:d7:b1:72:91:25:4d:84:0e:f1:7e:c9:29:
                    58:44:7d:3e:f2:cb:7d:60:86:ee:e9:2c:45:f8:f6:
                    4f:7b:70:fe:93:0a:30:c2:3f:81:ef:d7:7a:2a:04:
                    37:88:d5:90:bd:e8:9c:b0:71:b3:7f:08:be:82:a5:
                    c7:13:12:bc:08:30:b0:67:ea:1e:ef:02:2a:48:11:
                    b4:0d:84:f4:f1:87:2f:23:50:84:07:9d:86:ff:4d:
                    9d:6f:13:05:7a:d6:8b:f1:57:80:f2:07:ac:33:99:
                    a5:5e:2f:e2:c9:01:7b:60:34:91:5f:a4:64:97:ad:
                    c9:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:ED:C2:93:18:E6:B8:82:E7:2D:D3:1C:97:7C:8A:CE:96:E2:B0:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/bd19eec5-2c6a-32c5-ba51-b4400860bb18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.crl

            X509v3 Authority Key Identifier:
                keyid:60:C9:6D:C0:44:A6:6F:BD:2F:6E:CB:03:EA:6B:17:FC:BA:6C:2E:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:2480::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:b4:ef:c0:93:6a:55:ad:31:c5:6f:38:79:aa:62:e6:45:8b:
         e3:68:73:7e:e8:ab:53:a5:49:7d:bf:61:93:52:e4:32:0f:5c:
         e2:f3:25:84:83:fb:96:8a:46:a9:50:26:52:ea:df:fc:b3:da:
         99:a1:26:53:3a:9b:45:4c:65:0e:27:da:71:96:1f:88:f4:53:
         ee:2e:1b:6a:c6:49:54:e0:b4:2d:dc:64:cd:a2:0a:05:13:7d:
         92:04:b1:03:19:3a:21:b3:0e:6f:ee:bd:79:03:b1:a7:f4:68:
         47:4e:13:17:db:c8:e1:d1:33:2b:d7:1b:14:7a:66:02:1d:59:
         17:bd:de:7e:25:cf:e0:88:47:29:ad:9a:bf:c2:9e:8d:57:62:
         33:bc:72:66:da:8b:84:66:a8:57:e5:1e:17:71:40:21:f0:53:
         de:96:75:1a:22:5d:2e:54:60:cf:9a:e2:54:09:d7:9b:10:e3:
         45:64:5e:e6:bd:83:3e:b8:be:c9:19:ae:5a:89:18:dc:ae:13:
         29:6a:92:0e:f3:ad:81:fb:21:02:42:4d:fa:88:b0:eb:08:a4:
         3d:17:9e:dd:e0:e7:40:97:93:2f:dd:b7:45:00:f8:65:f9:dc:
         97:cf:58:30:91:fe:ca:b6:1d:71:f9:65:90:82:6c:51:24:96:
         c4:1e:8c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:26:27 2024 by rpki-client on console-ams.rpki-client.org