Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/5876c3e9-97fe-364a-bd77-66a9bf2c6f99.roa
File:                     5876c3e9-97fe-364a-bd77-66a9bf2c6f99.roa (raw, json)
Hash identifier:          md0a5ABjcuw51v3wSXoRP2Vk5PEkePgcrjK51oMP254=
Subject key identifier:   EF:1E:6B:70:14:E8:1E:F9:C8:CD:A5:F1:67:75:31:89:48:EF:A7:22
Certificate issuer:       /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial:       010D0C9F4328584730960BDF79856D4E9F549C00
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/5876c3e9-97fe-364a-bd77-66a9bf2c6f99.roa
Signing time:             Thu 12 Sep 2024 13:00:41 +0000
ROA not before:           Thu 12 Sep 2024 13:00:41 +0000
ROA not after:            Wed 11 Dec 2024 14:00:41 +0000
asID:                     15169
IP address blocks:        2605:ef80:c020::/47 maxlen: 47

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:30:96:0b:df:79:85:6d:4e:9f:54:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
        Validity
            Not Before: Sep 12 13:00:41 2024 GMT
            Not After : Dec 11 14:00:41 2024 GMT
        Subject: CN=a3cbf66d-9049-43ce-83ad-0902292fa1db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:3c:8b:e1:bb:51:6c:92:41:49:2a:48:ec:c1:
                    3d:93:61:67:04:e6:8c:c6:15:53:ee:83:e7:2d:3a:
                    dc:97:f2:92:82:a4:d8:f1:98:81:a3:3c:42:c3:46:
                    36:14:fc:32:d2:18:60:56:bd:42:1f:73:b2:c4:c6:
                    69:3d:30:91:1e:1a:b6:dd:a1:db:4a:5a:ef:7b:d5:
                    bb:47:66:75:ac:eb:8b:63:cb:67:e3:74:7c:06:d2:
                    48:47:53:c1:33:20:dc:d9:28:fd:c5:8f:2b:ba:2c:
                    f9:64:a6:a4:d4:68:1c:dd:01:a5:a6:a1:de:0d:3f:
                    bb:49:05:45:01:4f:45:16:03:98:35:f6:d0:cb:30:
                    1b:ec:f1:2d:45:d5:cc:23:73:3c:06:e5:4a:de:e4:
                    db:c7:1d:cf:17:34:16:96:c0:9e:9e:b9:eb:72:4b:
                    70:93:1c:22:9f:f4:6b:f3:18:68:46:44:c2:b8:f7:
                    ab:cc:17:57:7b:a4:de:79:55:47:64:5b:03:2e:fa:
                    65:4b:c2:13:fd:8e:cf:07:19:86:51:15:24:67:85:
                    9a:12:cd:07:f2:7f:01:43:71:fc:49:e9:48:ec:4b:
                    66:3a:ea:61:ce:4c:95:7b:5b:90:0a:1b:1b:00:43:
                    3f:63:a2:3f:89:78:15:24:91:df:09:6c:17:5a:35:
                    45:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:1E:6B:70:14:E8:1E:F9:C8:CD:A5:F1:67:75:31:89:48:EF:A7:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/5876c3e9-97fe-364a-bd77-66a9bf2c6f99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl

            X509v3 Authority Key Identifier:
                keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:ef80:c020::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:18:89:a1:e5:84:1e:f8:80:3e:31:87:c7:ee:ea:6a:b2:d6:
         6b:f8:8c:6a:5f:13:97:db:39:cb:98:44:e3:3a:55:54:95:aa:
         3d:11:02:80:45:f8:71:d6:d5:25:ad:d6:73:66:4b:72:4c:7a:
         a9:0c:67:33:47:32:44:63:ae:8d:56:05:64:0a:8e:62:9e:46:
         66:c9:12:62:80:50:ff:d5:c7:a7:0b:31:2c:77:65:0b:b7:84:
         76:44:1a:f0:51:b2:3a:73:1d:46:38:04:95:37:8a:b9:2b:20:
         aa:a6:46:fb:07:69:18:eb:eb:d8:04:6a:ea:2e:d6:0b:20:b4:
         c2:df:eb:fc:8f:42:c0:b7:4c:62:fa:e5:a3:46:7e:57:c8:82:
         d2:b3:dd:33:e0:92:1d:07:fc:80:e3:f0:fc:ca:e7:1a:f0:4a:
         04:5a:c0:db:59:e6:8c:b3:08:49:d9:b9:53:7f:ec:14:aa:fb:
         35:05:80:87:15:ce:94:06:55:3a:ef:cf:16:4e:c8:48:fc:33:
         c7:21:4b:7a:2a:1d:9e:10:69:ae:1a:3e:71:bb:39:c3:60:0b:
         ec:c2:5c:f0:71:15:b1:43:b4:5f:c8:c4:aa:6b:43:10:1e:59:
         20:36:40:1a:9d:e3:b1:58:af:53:87:87:d0:0a:b9:4b:72:8c:
         e0:d4:63:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 18:29:22 2024 by rpki-client on console-ams.rpki-client.org