Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b16dab15-57d6-416c-8c05-543d7b01e03d/2716648f-7661-3f70-b742-5119c61157cf.roa
File:                     2716648f-7661-3f70-b742-5119c61157cf.roa (raw, json)
Hash identifier:          bhLZQcc1iApZ/zcNdNdyjXtupfCyyUa5u9wVNNNTLsI=
Subject key identifier:   FD:85:B4:CE:8D:77:48:7C:6D:75:3D:47:5F:CD:5A:D1:E7:D7:D2:55
Certificate issuer:       /CN=b16dab15-57d6-416c-8c05-543d7b01e03d
Certificate serial:       010D0C9F4328584736662258CE58342FE7DE4880
Authority key identifier: 45:BD:2F:AF:92:E7:90:5D:60:6C:16:B8:F8:28:40:72:C9:43:78:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b16dab15-57d6-416c-8c05-543d7b01e03d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b16dab15-57d6-416c-8c05-543d7b01e03d/2716648f-7661-3f70-b742-5119c61157cf.roa
Signing time:             Sat 14 Sep 2024 14:59:23 +0000
ROA not before:           Sat 14 Sep 2024 14:59:23 +0000
ROA not after:            Fri 13 Dec 2024 15:59:23 +0000
asID:                     53835
IP address blocks:        2607:ca40::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b16dab15-57d6-416c-8c05-543d7b01e03d/b16dab15-57d6-416c-8c05-543d7b01e03d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b16dab15-57d6-416c-8c05-543d7b01e03d/b16dab15-57d6-416c-8c05-543d7b01e03d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b16dab15-57d6-416c-8c05-543d7b01e03d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:36:66:22:58:ce:58:34:2f:e7:de:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b16dab15-57d6-416c-8c05-543d7b01e03d
        Validity
            Not Before: Sep 14 14:59:23 2024 GMT
            Not After : Dec 13 15:59:23 2024 GMT
        Subject: CN=e72c3c00-02a6-469e-beea-826c0ba88123
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ba:4c:73:7f:ec:0f:bb:6b:7d:75:c3:60:1a:
                    46:47:1c:b5:de:a5:26:3d:a4:d5:3b:ff:f1:c7:6c:
                    9a:94:54:da:79:99:e2:93:9b:af:bd:9a:48:90:dd:
                    2e:44:35:30:53:52:fd:7c:5f:3c:33:a5:80:39:30:
                    d6:4f:44:fb:13:c8:db:05:ec:ec:52:45:d8:7e:6b:
                    a4:09:9e:6b:2f:91:fb:ee:fb:c1:79:14:d6:5c:1a:
                    74:6f:1b:40:d0:8d:a2:23:8a:46:39:b8:f0:09:4a:
                    96:b7:1f:d3:45:d1:5b:ff:3d:88:1f:88:5b:cc:20:
                    bb:00:9f:8b:b9:7d:21:92:ff:0b:f7:04:a1:61:49:
                    94:51:e6:f0:15:23:cb:49:bf:92:8f:12:e3:f4:21:
                    f0:bd:22:02:60:3d:a8:d2:2e:2c:ab:e1:70:4d:4d:
                    7f:9a:6e:4e:62:09:60:cb:67:6e:96:42:09:27:20:
                    61:d6:16:c2:01:96:68:26:92:98:b5:e4:36:50:b8:
                    cd:68:b5:bf:15:2b:f2:17:68:27:21:88:44:49:e8:
                    8a:91:9b:4f:02:a4:b6:8f:23:7d:c3:7d:e7:30:24:
                    a3:83:c4:a2:d5:4c:a8:f5:04:57:0f:6b:a5:0f:ee:
                    4c:5d:31:06:b1:7e:76:db:77:4e:1f:f6:86:50:b8:
                    61:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:85:B4:CE:8D:77:48:7C:6D:75:3D:47:5F:CD:5A:D1:E7:D7:D2:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b16dab15-57d6-416c-8c05-543d7b01e03d/2716648f-7661-3f70-b742-5119c61157cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b16dab15-57d6-416c-8c05-543d7b01e03d/b16dab15-57d6-416c-8c05-543d7b01e03d.crl

            X509v3 Authority Key Identifier:
                keyid:45:BD:2F:AF:92:E7:90:5D:60:6C:16:B8:F8:28:40:72:C9:43:78:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b16dab15-57d6-416c-8c05-543d7b01e03d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:ca40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:72:92:64:61:19:73:e2:f6:94:57:a3:c4:0b:de:36:46:69:
         c8:c2:4d:5c:1d:0a:8f:76:22:43:7f:4e:d6:40:65:f3:13:df:
         bb:e4:8e:1e:5a:8b:e4:e7:95:8f:b9:15:ac:ab:5f:9a:33:5d:
         1b:39:78:ee:05:8c:f7:37:9c:7f:9d:e7:86:bc:bf:7e:5f:f0:
         59:59:fa:7e:38:62:b7:9e:06:44:e7:e8:f5:ed:48:fb:8a:b7:
         13:ee:d9:e3:ac:ca:60:62:38:66:3e:4b:ec:1d:66:56:b8:87:
         3b:bc:b7:cc:f2:1b:00:b2:11:c8:4a:6a:b7:f5:7b:51:09:25:
         c2:45:cb:c7:21:bb:70:cd:d4:c3:e0:3c:4d:45:16:b7:3e:f1:
         d5:86:57:ac:64:fd:d1:de:62:38:3b:7e:f3:26:4a:b4:8d:f4:
         38:01:67:ed:77:0c:a9:a0:c8:03:46:ee:74:a9:f9:98:a3:26:
         cb:62:a7:8d:85:09:f0:8e:55:d6:ff:47:47:33:d5:ec:c5:6f:
         1f:b3:0e:cc:33:79:df:cc:a0:db:f8:aa:23:8d:80:7b:72:a1:
         8a:93:fc:d6:06:c4:8d:41:23:3a:ed:89:57:bc:be:a1:9d:8b:
         38:1d:d9:3d:5e:79:fa:d7:35:89:8d:54:72:04:01:32:30:ed:
         60:78:99:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:36 2024 by rpki-client on console-ams.rpki-client.org