Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/12f12164-adcc-3b9f-a7d8-6da2e86bab76.roa
File:                     12f12164-adcc-3b9f-a7d8-6da2e86bab76.roa (raw, json)
Hash identifier:          KtLbs1YQ8n+4nVcMlzBE/9loEAn5GyVdybWclopy4sU=
Subject key identifier:   54:37:B6:AA:1E:63:85:85:C1:A9:18:F4:E8:CF:37:60:41:27:CF:A3
Certificate issuer:       /CN=d170fca2-5f74-4408-8dc9-597ba031cfe2
Certificate serial:       010D0C9F432858474420ADF71CB322E274ED3268
Authority key identifier: FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/12f12164-adcc-3b9f-a7d8-6da2e86bab76.roa
Signing time:             Thu 19 Sep 2024 13:00:42 +0000
ROA not before:           Thu 19 Sep 2024 13:00:42 +0000
ROA not after:            Wed 18 Dec 2024 14:00:42 +0000
asID:                     30097
IP address blocks:        2604:3c00::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:44:20:ad:f7:1c:b3:22:e2:74:ed:32:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d170fca2-5f74-4408-8dc9-597ba031cfe2
        Validity
            Not Before: Sep 19 13:00:42 2024 GMT
            Not After : Dec 18 14:00:42 2024 GMT
        Subject: CN=f5d1c1da-b869-404d-875c-30d41d404d66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:bd:75:15:f3:31:46:50:4a:ea:92:a4:10:3f:
                    b4:bc:87:a9:75:f2:7f:cc:17:69:49:be:71:cc:40:
                    1e:09:85:b7:32:02:30:23:bb:37:01:ce:a7:f8:43:
                    ea:38:48:7f:39:19:b7:0a:d5:8b:d4:2d:a3:db:53:
                    1a:64:aa:fe:c6:a4:fe:9d:af:f6:4a:83:c9:dc:71:
                    1e:60:fa:f7:4d:3e:b5:ea:85:7b:67:f2:1c:89:59:
                    1b:88:fa:b6:3f:4e:c4:e7:cb:cd:00:83:98:2e:e9:
                    05:9f:51:95:2c:e5:75:f6:4a:02:1e:1c:9f:b6:75:
                    c2:14:df:09:c2:c9:c8:75:fb:42:b3:6f:bd:90:17:
                    f4:1c:c3:0e:80:cd:41:e1:fb:38:0b:ad:78:ae:64:
                    c1:22:fb:21:8a:d0:37:2b:9e:d3:41:9c:6b:5e:79:
                    b6:d9:9b:e4:1a:f7:14:48:de:63:87:06:d7:f6:24:
                    da:f7:f9:31:d4:bd:70:ee:33:e9:fb:c2:6e:88:54:
                    7a:fa:58:fb:95:58:05:bc:38:b8:1e:1b:bf:6c:f5:
                    3f:fb:2a:b7:60:7a:5d:96:52:71:06:14:c9:16:7f:
                    a1:99:a1:45:30:81:fd:65:e0:b8:16:23:16:90:48:
                    a1:30:01:ab:bf:7c:d8:39:a3:65:4c:d1:ab:ed:57:
                    cc:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:37:B6:AA:1E:63:85:85:C1:A9:18:F4:E8:CF:37:60:41:27:CF:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/12f12164-adcc-3b9f-a7d8-6da2e86bab76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl

            X509v3 Authority Key Identifier:
                keyid:FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:3c00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:ff:89:52:be:c7:3c:92:33:3a:8c:7e:f7:7a:7e:e1:c1:5b:
         f2:f6:21:ac:8c:a1:32:4a:e2:99:92:f7:a4:56:a1:f1:10:02:
         a4:41:a7:a0:d0:ad:87:b6:98:9c:00:08:81:28:f4:28:77:6f:
         97:89:25:d3:e9:4f:b5:3b:83:65:b6:7c:07:89:0d:6c:9d:4c:
         67:5f:a3:f6:f0:a1:3d:8e:ae:8e:18:c1:37:c1:e3:ad:88:dd:
         ae:48:5a:53:cb:9a:9b:71:aa:6e:45:a5:08:5e:3d:05:8d:c6:
         1e:c8:23:89:62:f7:51:a1:5e:4c:3c:6f:ab:fa:2a:60:c3:99:
         ed:4e:f3:de:c9:f3:6a:f0:31:aa:34:01:ee:c2:7a:94:f0:58:
         f0:45:79:53:b0:42:70:03:18:1e:40:78:b3:ad:64:bb:bc:cd:
         ef:78:71:14:fa:ce:55:bc:9e:cc:fb:15:59:fb:f3:6a:15:f0:
         45:21:67:80:86:30:e2:bc:3c:bf:78:66:ea:4f:56:f9:f9:bb:
         77:db:1b:c2:94:2d:7d:9f:37:ee:2f:8d:21:3f:f1:b7:c6:96:
         e6:33:dd:c4:79:6a:f1:5e:80:85:55:88:36:38:e1:6f:02:d8:
         6d:13:30:23:ad:a2:db:2a:b1:1f:49:3a:0a:81:99:8b:1f:5c:
         a2:1a:4f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:22 2024 by rpki-client on console-fra.rpki-client.org