Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae/fd3aebe3-a766-37fe-998a-845bb98c23a7.roa
File:                     fd3aebe3-a766-37fe-998a-845bb98c23a7.roa (raw, json)
Hash identifier:          fmYx4H4XldAFPw8Hrp0OehZFQhRUtwZmB+EpOtm7ioE=
Subject key identifier:   8F:A1:3C:66:C4:70:15:0F:EB:2C:18:CE:BA:24:28:DA:71:44:EF:2D
Certificate issuer:       /CN=9cc872db-b713-439a-b9ef-c97cff0cbfae
Certificate serial:       010D0C9F432858473095F6D866B954917EB46780
Authority key identifier: 37:73:36:12:7A:51:BA:E7:AD:9A:14:65:A2:74:03:F7:3F:96:C2:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae/fd3aebe3-a766-37fe-998a-845bb98c23a7.roa
Signing time:             Thu 12 Sep 2024 13:00:41 +0000
ROA not before:           Thu 12 Sep 2024 13:00:41 +0000
ROA not after:            Wed 11 Dec 2024 14:00:41 +0000
asID:                     40555
IP address blocks:        2607:b100::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae/9cc872db-b713-439a-b9ef-c97cff0cbfae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae/9cc872db-b713-439a-b9ef-c97cff0cbfae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:30:95:f6:d8:66:b9:54:91:7e:b4:67:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cc872db-b713-439a-b9ef-c97cff0cbfae
        Validity
            Not Before: Sep 12 13:00:41 2024 GMT
            Not After : Dec 11 14:00:41 2024 GMT
        Subject: CN=afc76f41-743a-4599-be35-d38e40dbae59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ae:c6:94:7d:2b:77:3a:8f:54:f3:9b:d5:15:
                    39:e2:57:6b:1c:7d:8f:fd:51:f1:92:fc:66:01:58:
                    13:66:63:e2:bb:08:df:6b:62:69:76:84:55:b2:b5:
                    aa:3d:b1:b4:58:68:fc:1f:c1:9e:ad:eb:95:43:bb:
                    61:9d:a7:e1:86:1e:91:ff:f4:fe:60:3d:f6:72:63:
                    15:cc:a8:32:4c:bc:17:e9:ba:f7:d7:6c:e4:67:17:
                    9c:ab:1e:28:70:d5:8a:76:09:d1:80:1c:0a:d3:20:
                    17:c2:3e:e4:ec:0a:ec:25:02:be:8e:23:67:fe:3f:
                    7d:9b:76:de:36:1c:d2:54:1d:45:5e:8d:23:0a:5c:
                    b5:d1:57:4f:e3:54:0a:f3:97:78:07:1e:8f:32:79:
                    c4:4c:f6:8d:1f:9b:e8:66:35:e9:1f:e1:cc:3a:43:
                    f1:33:b9:f1:8b:89:f4:b8:38:56:5d:75:b1:3c:a0:
                    c8:e3:e4:4e:39:a9:6f:13:de:b5:f5:7a:32:27:be:
                    bf:17:f9:db:c6:84:b9:b7:59:9d:4e:92:d3:b7:51:
                    a1:60:bb:e5:5a:50:4d:42:5b:97:9d:1d:bb:a9:5e:
                    48:09:35:12:74:2c:63:a4:05:32:c6:3c:cf:1e:eb:
                    21:32:c4:ca:22:67:0f:f4:0a:c8:45:c0:96:2b:54:
                    e7:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:A1:3C:66:C4:70:15:0F:EB:2C:18:CE:BA:24:28:DA:71:44:EF:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae/fd3aebe3-a766-37fe-998a-845bb98c23a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae/9cc872db-b713-439a-b9ef-c97cff0cbfae.crl

            X509v3 Authority Key Identifier:
                keyid:37:73:36:12:7A:51:BA:E7:AD:9A:14:65:A2:74:03:F7:3F:96:C2:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:b100::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:18:67:47:80:df:f4:7b:77:08:de:dd:63:35:07:e3:25:d1:
         e5:f2:80:1b:02:9c:26:d1:09:ef:ef:80:f9:0d:00:04:25:4b:
         88:fe:82:34:0b:a3:cd:1f:09:ab:61:44:e0:da:49:e3:d5:c4:
         a4:7a:bb:fb:e7:81:d9:8c:9e:6a:d6:b5:84:7b:a6:43:7d:ad:
         42:f8:5a:28:e2:03:f6:6c:dc:56:04:ac:ed:d4:47:85:f1:98:
         ed:b8:58:79:48:c0:b4:fa:f3:f3:8d:37:91:b9:50:33:c0:c2:
         b1:37:50:51:86:22:d8:80:36:0b:fb:cb:ae:7d:2e:bf:52:56:
         6b:30:02:a1:1e:8a:84:cc:c2:82:c3:38:60:8a:e5:b6:22:a6:
         47:a4:9d:71:3b:92:ec:71:3f:cf:71:cf:bf:77:73:8e:2f:80:
         04:b5:c0:82:a0:ab:7a:43:95:8c:82:32:6e:c6:52:f9:19:f2:
         77:94:24:0d:43:fe:20:10:ac:ca:f7:5e:b9:35:ec:c2:3a:04:
         d8:7f:ed:1d:15:10:a3:7e:30:68:e2:7b:c2:8c:d2:19:79:b8:
         bc:c5:7e:11:70:f9:63:8d:8d:be:ee:7f:31:71:f2:bc:ee:f1:
         a6:0a:fc:e2:5c:54:4d:4d:63:af:b2:b0:78:1f:4e:03:4c:92:
         8a:5b:49:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:24:28 2024 by rpki-client on console-fra.rpki-client.org