Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/ef4033d2-fdce-3649-b1d4-cd5ecc71f792.roa
File:                     ef4033d2-fdce-3649-b1d4-cd5ecc71f792.roa (raw, json)
Hash identifier:          6LGkryxkcvefSLJIT9WC3V+eg6ncwCx94au8wBICOeU=
Subject key identifier:   0A:FB:C6:F3:75:56:A0:09:3A:26:C2:D0:D3:E7:00:CE:F7:7F:26:AD
Certificate issuer:       /CN=8e49b4c6-4d58-42e0-abe2-93754fdcda35
Certificate serial:       010D0C9F43285847362B5FDCFE3B047557CF2C40
Authority key identifier: 0A:49:18:96:98:6F:CF:D4:8D:B3:E6:A2:22:27:C1:26:59:D2:EB:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/ef4033d2-fdce-3649-b1d4-cd5ecc71f792.roa
Signing time:             Sat 14 Sep 2024 13:00:41 +0000
ROA not before:           Sat 14 Sep 2024 13:00:41 +0000
ROA not after:            Fri 13 Dec 2024 14:00:41 +0000
asID:                     399045
IP address blocks:        2606:d640:200::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:36:2b:5f:dc:fe:3b:04:75:57:cf:2c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e49b4c6-4d58-42e0-abe2-93754fdcda35
        Validity
            Not Before: Sep 14 13:00:41 2024 GMT
            Not After : Dec 13 14:00:41 2024 GMT
        Subject: CN=66f378ff-83cc-465b-9125-ef21744143fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c7:e0:8a:24:cf:18:73:17:e2:d3:98:04:24:
                    11:44:ef:84:6a:17:4c:cb:91:6a:1a:44:10:57:af:
                    71:30:37:3f:81:ed:9a:b4:9a:46:6e:32:c2:6a:54:
                    ad:b9:26:b4:43:07:f5:a8:3e:74:02:f5:3c:74:80:
                    00:02:32:c1:12:55:ea:19:ad:3d:d6:be:57:d9:a8:
                    b8:1b:67:d9:fc:d0:2e:37:c8:b7:ec:5f:74:1d:9f:
                    cf:5f:d0:d1:32:f8:8c:ee:a7:c6:a7:6a:69:86:6d:
                    2c:2c:bf:1a:a6:b2:65:9f:11:3b:36:de:9b:03:df:
                    1b:34:94:c9:4f:8d:0e:3a:bd:5f:8a:da:c2:bc:ac:
                    33:6d:15:a5:35:cc:ff:67:fb:40:08:66:01:53:8d:
                    1d:34:e0:ab:83:bc:e5:51:a9:26:e9:e9:c4:e9:f4:
                    95:4d:b4:53:7f:a9:c5:d7:fc:db:fc:85:4d:7b:33:
                    1f:ae:2d:51:41:77:ab:3a:08:23:0a:24:18:46:b3:
                    df:db:ba:46:8f:71:4f:84:dd:1d:35:02:4c:de:1f:
                    7f:76:a3:f9:6b:40:bd:c7:7e:4f:0f:a6:2d:71:4d:
                    fa:a8:3a:f5:82:18:43:ca:bb:50:dd:9a:01:2b:02:
                    fa:8e:ef:52:dc:8d:1a:52:21:2b:9f:29:0d:dc:45:
                    15:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:FB:C6:F3:75:56:A0:09:3A:26:C2:D0:D3:E7:00:CE:F7:7F:26:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/ef4033d2-fdce-3649-b1d4-cd5ecc71f792.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.crl

            X509v3 Authority Key Identifier:
                keyid:0A:49:18:96:98:6F:CF:D4:8D:B3:E6:A2:22:27:C1:26:59:D2:EB:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:d640:200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:29:7b:07:fb:a2:d0:80:d5:fd:e8:f6:f2:87:71:44:ce:1f:
         81:b8:a4:99:2f:61:5e:83:0a:47:95:fa:7f:2a:f4:a2:b9:b9:
         4a:8f:58:16:d6:ee:a6:16:26:2c:3e:6d:14:bd:16:25:67:4d:
         f2:1d:d8:ee:37:86:ce:e2:d1:0b:e2:96:55:6b:67:cd:17:52:
         84:b6:bb:29:d8:e5:ce:dd:fb:d4:54:31:37:36:97:08:c5:a1:
         dd:c4:14:00:a5:a7:00:84:86:42:e1:33:f1:aa:86:d9:6f:de:
         b9:72:37:09:f6:9d:1e:1a:45:b3:50:24:cd:fc:62:34:ae:30:
         cf:bf:86:cb:58:67:43:82:b8:50:1e:cf:0a:97:ff:e7:7c:2b:
         d8:dc:63:81:eb:95:64:e2:1a:29:f3:c5:18:54:81:e3:7c:12:
         da:b5:34:64:b0:e8:19:54:8c:d0:9d:e8:f2:e1:3c:71:20:c2:
         20:2d:df:7b:87:c4:9d:d3:27:96:d9:22:a2:4f:97:ba:d7:ce:
         4d:58:56:d5:a6:01:de:1f:90:b0:24:bb:45:0f:af:cf:93:27:
         8c:72:d3:7c:e2:66:bf:13:b9:49:47:1a:3d:85:27:93:7b:08:
         b3:48:79:cb:3c:5c:ab:28:c2:d6:20:8b:dd:7d:a1:7d:7b:e7:
         f7:67:fd:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:48 2024 by rpki-client on console-fra.rpki-client.org