Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/43a189c4-9044-3410-a690-f3bf9d0dfbb1.roa
File:                     43a189c4-9044-3410-a690-f3bf9d0dfbb1.roa (raw, json)
Hash identifier:          QcP/wVVh0n999etXdy7Mw3UkXd2udENLTPFz4eCZsUQ=
Subject key identifier:   24:E9:B4:31:E8:8A:97:F0:8B:02:ED:0C:41:5E:5E:03:A4:1D:43:93
Certificate issuer:       /CN=8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd
Certificate serial:       010D0C9F432858477EC1068534CE8282E8A72560
Authority key identifier: 97:FC:85:1D:72:C6:73:DC:60:DC:E4:F3:FA:12:C4:FA:2B:F3:46:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/43a189c4-9044-3410-a690-f3bf9d0dfbb1.roa
Signing time:             Thu 10 Oct 2024 13:00:41 +0000
ROA not before:           Thu 10 Oct 2024 13:00:41 +0000
ROA not after:            Wed 08 Jan 2025 14:00:41 +0000
asID:                     88
IP address blocks:        2604:4540:1000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7e:c1:06:85:34:ce:82:82:e8:a7:25:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd
        Validity
            Not Before: Oct 10 13:00:41 2024 GMT
            Not After : Jan  8 14:00:41 2025 GMT
        Subject: CN=10dfc58c-8b48-45eb-8452-2207fb08dfe4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a3:c7:b3:02:9f:17:e3:15:43:2f:70:57:ce:
                    ea:f6:d3:ce:82:4c:10:85:f7:54:f4:07:b5:ce:46:
                    b9:14:0d:32:ec:b3:f0:37:e3:23:b6:98:72:c1:20:
                    36:4e:2a:42:25:1d:d6:f1:8d:a4:f0:39:a0:e7:0a:
                    91:07:0a:e6:cf:cd:f9:db:2b:f8:d5:e4:b8:db:1d:
                    7b:da:c4:f1:53:0c:de:7b:a8:ca:59:3f:7c:bf:33:
                    c9:0a:b3:d7:7c:a8:13:3e:9b:ca:23:70:76:27:7c:
                    82:d5:96:7c:a3:f8:17:78:90:84:22:82:e6:c0:de:
                    b2:8f:8e:63:dd:59:9e:97:f5:05:2e:58:9c:93:67:
                    f8:c1:58:62:6c:9e:65:ad:7e:79:63:3b:b5:d8:5a:
                    6b:3e:28:37:8c:a9:1f:de:25:0c:07:ac:2f:ec:21:
                    c1:3e:40:3f:9f:ec:e8:ca:31:e8:19:65:ce:e1:cf:
                    7e:1e:01:86:52:6f:8b:34:3c:66:98:0d:6c:39:21:
                    cb:2b:86:c6:6c:8e:fc:dd:e3:3e:af:81:95:f7:aa:
                    d9:9d:35:a2:de:61:87:74:83:bd:fd:06:67:72:56:
                    c0:36:dc:2b:20:28:2d:25:7f:96:84:b7:cb:c0:1c:
                    ee:ed:d7:46:82:6b:01:c5:f0:5b:2c:74:c8:d8:3d:
                    94:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:E9:B4:31:E8:8A:97:F0:8B:02:ED:0C:41:5E:5E:03:A4:1D:43:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/43a189c4-9044-3410-a690-f3bf9d0dfbb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.crl

            X509v3 Authority Key Identifier:
                keyid:97:FC:85:1D:72:C6:73:DC:60:DC:E4:F3:FA:12:C4:FA:2B:F3:46:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:4540:1000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:27:56:d9:2b:2a:89:00:cd:ba:30:0b:70:23:c6:9b:79:cf:
         98:e7:a3:ec:68:b8:9a:6e:2a:18:09:67:0b:e8:6a:28:c5:0f:
         d9:ae:e7:6b:eb:1c:e8:11:f8:c1:62:51:ec:f2:8d:da:c3:8b:
         3e:9f:39:17:e1:a4:00:a2:cd:27:78:81:ae:34:03:ad:4b:c1:
         d6:49:5c:7a:68:ee:37:9b:29:6c:bd:81:b2:27:00:cb:f9:50:
         bf:da:cf:2b:70:ca:45:0e:f3:1b:92:92:51:b4:46:95:44:20:
         7a:14:3e:0a:40:7b:20:3a:81:ac:bb:b1:c3:e0:54:fa:91:5c:
         cf:a9:aa:4f:98:06:e2:b9:68:25:9d:f6:e2:7a:bd:7a:af:87:
         94:95:8c:57:74:dd:8e:d1:96:c9:1c:39:84:f9:7d:3a:cb:60:
         bf:f0:ac:2e:2e:cb:43:cf:8c:95:e1:00:4a:0c:5c:37:64:8c:
         c7:09:0e:46:d5:8d:31:0b:e6:41:ba:52:a7:12:01:d8:33:18:
         b1:03:50:df:f5:44:b9:7b:ba:d6:41:7b:11:5c:84:02:02:f9:
         dd:4b:61:61:6b:ab:c9:90:03:c5:ff:1a:d8:c2:37:db:39:56:
         2d:58:dd:f3:ec:7c:3a:4f:ae:ce:4a:c9:f9:d1:ac:4f:a1:db:
         e1:d9:70:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:00 2024 by rpki-client on console-ams.rpki-client.org