Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/caaf40e4-468e-3ac7-9c5c-80d776e26587.roa
File:                     caaf40e4-468e-3ac7-9c5c-80d776e26587.roa (raw, json)
Hash identifier:          nplSj/63DoDkpP6uzIJuEhm0OjU0BrfKrZ2HarXRx40=
Subject key identifier:   9D:01:9E:AF:A5:3B:F6:10:E6:20:80:A2:D6:81:5C:88:1F:A2:22:0C
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858471FD5E7F2F4558982008D4740
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/caaf40e4-468e-3ac7-9c5c-80d776e26587.roa
Signing time:             Fri 06 Sep 2024 13:00:41 +0000
ROA not before:           Fri 06 Sep 2024 13:00:41 +0000
ROA not after:            Thu 05 Dec 2024 14:00:41 +0000
asID:                     33363
IP address blocks:        2607:f098:6000::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1f:d5:e7:f2:f4:55:89:82:00:8d:47:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep  6 13:00:41 2024 GMT
            Not After : Dec  5 14:00:41 2024 GMT
        Subject: CN=8d4e8d1f-413a-41cc-94a1-4a277a606d41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:d2:62:97:63:0c:d0:4b:38:4d:05:fc:87:dc:
                    70:2e:27:00:ab:6e:22:ff:47:d8:ca:b2:21:5f:07:
                    74:f5:12:45:e3:bf:14:ac:e7:8c:4c:a4:9c:cb:1a:
                    17:03:42:bf:3b:e4:c7:fc:3b:df:4b:0a:05:5e:c1:
                    53:0b:ae:48:1e:67:9b:99:bc:9c:90:ef:f8:38:47:
                    dc:15:47:77:9b:71:74:28:37:cf:49:53:d3:ec:08:
                    af:76:a6:99:18:bc:31:27:59:40:d5:3c:f5:49:ff:
                    6e:bb:26:6e:6b:ce:f2:b3:44:26:ca:11:d7:c2:cd:
                    44:32:69:16:9a:bd:b4:16:6b:fd:8f:e5:1a:ed:d2:
                    78:bb:39:44:0f:5a:47:e9:a7:2f:c0:65:43:4d:fe:
                    72:cd:ab:bb:4e:8d:57:dd:cf:cb:fc:51:5f:1a:8e:
                    aa:e8:0b:31:2d:aa:68:89:ee:62:9e:e3:56:a8:a3:
                    30:87:cd:11:3f:c5:f2:2f:6d:6c:95:d2:83:e2:9d:
                    67:88:b3:c6:70:bd:6b:f8:e3:ad:2d:52:b1:17:21:
                    b3:30:09:8f:ad:10:dd:25:91:3f:96:31:87:ba:a7:
                    1f:03:9b:82:e1:85:4e:be:ae:ab:26:9f:98:0d:ad:
                    2e:06:43:a8:ba:74:c6:82:1a:95:c7:d1:a4:a4:0e:
                    9a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:01:9E:AF:A5:3B:F6:10:E6:20:80:A2:D6:81:5C:88:1F:A2:22:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/caaf40e4-468e-3ac7-9c5c-80d776e26587.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f098:6000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:08:47:99:4c:4d:2f:07:2c:66:63:24:1a:99:f0:9a:35:d8:
         99:3a:71:e2:8b:ed:f3:86:25:97:d7:b4:d5:95:0e:19:4f:43:
         5a:00:f3:6d:a0:2b:2d:ae:1c:1e:30:a1:8a:c2:48:f7:d5:45:
         d5:84:50:74:6f:dc:4b:d7:39:44:02:b5:54:81:a1:87:58:fd:
         80:4c:49:23:4f:ec:8b:6e:27:2c:49:0d:6f:ad:9d:90:6c:d6:
         06:4f:e9:2e:07:8e:1e:66:76:a1:d9:01:8e:fb:6c:6e:77:a2:
         4e:bf:53:58:ce:0a:e1:f3:0a:9f:53:c8:8f:10:6a:d5:91:a0:
         2d:f1:6a:93:30:6f:c0:e2:3b:3d:a1:54:88:90:27:13:75:dd:
         52:c8:9e:cd:02:52:34:20:ba:e5:1a:92:38:7f:3f:91:a5:54:
         20:b6:52:2f:e2:ea:d5:6a:18:d9:e4:89:19:bb:6f:74:d7:6b:
         c6:97:5f:13:04:e2:33:f7:e0:f2:74:98:6b:d4:6a:73:af:89:
         8d:8f:75:51:82:68:14:96:dc:9d:8c:10:bd:ba:9c:7e:4a:65:
         94:ca:77:e2:73:6c:04:b5:fd:f7:86:1b:71:9b:44:c3:5c:b2:
         af:d9:f9:b8:ff:11:f8:df:ba:fe:55:61:89:26:96:e7:b0:d2:
         e2:2d:c5:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:26 2024 by rpki-client on console-fra.rpki-client.org