Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d414bd1e-af01-4ff2-92ae-ece02a34cdb9/76f20a08-edc1-360f-b8e4-c62f8ebb677d.roa
File:                     76f20a08-edc1-360f-b8e4-c62f8ebb677d.roa (raw, json)
Hash identifier:          Y4mf/e+2eMTJ9PqZ/wEz/dD6RDW67zzw4qJq9jrdTtc=
Subject key identifier:   1D:C0:EE:C9:57:31:D5:1C:E2:C8:18:1A:49:0B:7C:B0:69:83:CD:B3
Certificate issuer:       /CN=d414bd1e-af01-4ff2-92ae-ece02a34cdb9
Certificate serial:       010D0C9F432858478886570945781290E1CFA100
Authority key identifier: 16:0E:3F:D9:3C:76:D6:B7:2E:B4:AF:CB:5F:C8:99:38:12:AC:7A:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d414bd1e-af01-4ff2-92ae-ece02a34cdb9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d414bd1e-af01-4ff2-92ae-ece02a34cdb9/76f20a08-edc1-360f-b8e4-c62f8ebb677d.roa
Signing time:             Mon 14 Oct 2024 01:00:31 +0000
ROA not before:           Mon 14 Oct 2024 01:00:31 +0000
ROA not after:            Sun 12 Jan 2025 02:00:31 +0000
asID:                     26141
IP address blocks:        2607:a2c0::/32 maxlen: 38

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d414bd1e-af01-4ff2-92ae-ece02a34cdb9/d414bd1e-af01-4ff2-92ae-ece02a34cdb9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d414bd1e-af01-4ff2-92ae-ece02a34cdb9/d414bd1e-af01-4ff2-92ae-ece02a34cdb9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d414bd1e-af01-4ff2-92ae-ece02a34cdb9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:88:86:57:09:45:78:12:90:e1:cf:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d414bd1e-af01-4ff2-92ae-ece02a34cdb9
        Validity
            Not Before: Oct 14 01:00:31 2024 GMT
            Not After : Jan 12 02:00:31 2025 GMT
        Subject: CN=61019a05-bc60-4c45-8bb3-fd67cdcb35da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f9:e3:76:99:54:52:fb:22:b6:32:df:18:d5:
                    c5:a3:b9:8a:b9:8e:63:3d:f3:a7:11:7f:c6:dc:d8:
                    27:ea:0a:b4:80:1b:ab:d4:d4:75:0c:6e:51:28:7d:
                    c2:07:6e:45:c4:41:d8:c8:32:e8:7e:80:24:85:25:
                    a9:34:c7:09:00:54:eb:bb:99:15:08:37:76:8f:b2:
                    d3:34:f2:92:41:b8:1d:cc:8a:b2:20:e4:45:61:f8:
                    85:a3:1d:0e:58:27:26:61:30:7f:72:5f:f0:8b:04:
                    6b:c2:94:e8:29:25:1c:d3:12:92:2a:21:aa:b3:9a:
                    86:29:e4:29:46:f0:a1:71:11:64:4d:31:2b:b8:04:
                    d8:48:d1:6a:25:3d:0c:4f:34:31:8b:46:cc:7a:27:
                    f7:7b:d7:da:b3:6e:e4:54:88:8b:32:c9:66:7e:15:
                    b9:7e:84:33:1c:eb:39:83:c4:5f:83:62:b6:db:4a:
                    91:ab:c2:68:b4:86:3e:33:6d:be:9d:4a:cf:83:93:
                    79:fb:16:01:c0:36:53:6c:ae:cb:52:ff:8e:fe:46:
                    b9:f0:a2:1b:e2:7d:d4:f3:05:be:a2:92:bf:2c:8d:
                    da:83:76:d2:4e:0f:2a:f3:2e:e8:2b:a5:5c:91:11:
                    fe:27:90:88:41:18:f4:1d:3f:88:9b:90:84:ce:9a:
                    c8:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:C0:EE:C9:57:31:D5:1C:E2:C8:18:1A:49:0B:7C:B0:69:83:CD:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d414bd1e-af01-4ff2-92ae-ece02a34cdb9/76f20a08-edc1-360f-b8e4-c62f8ebb677d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d414bd1e-af01-4ff2-92ae-ece02a34cdb9/d414bd1e-af01-4ff2-92ae-ece02a34cdb9.crl

            X509v3 Authority Key Identifier:
                keyid:16:0E:3F:D9:3C:76:D6:B7:2E:B4:AF:CB:5F:C8:99:38:12:AC:7A:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d414bd1e-af01-4ff2-92ae-ece02a34cdb9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:a2c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:7e:b1:62:d7:1d:0f:a0:89:c9:95:b1:56:7d:31:4d:1c:ed:
         af:62:1a:96:04:75:2c:be:3b:d7:63:cf:61:58:05:48:6c:bb:
         90:2e:81:69:64:e2:84:6b:e4:09:e0:bd:e6:9f:66:38:b3:bb:
         51:9b:81:cf:06:61:7e:7b:3a:a2:34:ce:f6:c4:64:2a:e4:e8:
         83:ac:e8:0f:c0:0c:77:6b:c5:50:c2:9a:45:3d:87:da:1c:51:
         ab:6d:fc:d6:cc:27:4f:82:3c:59:a8:6c:ca:59:3b:36:ed:6e:
         12:39:8a:ad:58:ca:af:59:fe:83:1a:83:f4:7f:97:20:6b:60:
         ce:c9:3f:de:04:a2:d6:d5:46:fc:42:ef:2a:21:c6:4c:76:dd:
         09:06:f0:90:ce:a3:0c:d4:32:67:b8:ee:d7:9d:f9:74:85:87:
         2a:35:af:a4:a8:7c:78:23:f8:8a:f6:21:ec:39:7c:c6:31:4b:
         3f:03:46:6a:1c:11:b7:b4:26:22:5a:61:69:50:b7:fa:a4:15:
         dd:ef:c1:ed:a5:e6:7c:05:67:2a:de:24:a6:e4:31:c0:c6:82:
         ce:7d:af:e0:e3:27:ac:0e:5f:df:e5:f8:b5:b7:d9:f2:19:31:
         1b:c0:4a:b0:0c:a2:34:65:b2:4c:53:f5:86:7a:44:6f:92:5d:
         49:b8:53:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:36:42 2024 by rpki-client on console-fra.rpki-client.org