Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/90084646-f74e-42c1-9557-3764d36b8bb6/b370a869-d64e-39ec-a19a-54bd9b81107b.roa
File:                     b370a869-d64e-39ec-a19a-54bd9b81107b.roa (raw, json)
Hash identifier:          5R4JhhgzYVFeInokxm64osP4PHE6AYtNNQSPpj0ieLQ=
Subject key identifier:   36:DA:FF:C5:9B:A2:F7:73:86:FA:9E:DB:89:10:BC:1B:D1:7F:FB:24
Certificate issuer:       /CN=90084646-f74e-42c1-9557-3764d36b8bb6
Certificate serial:       010D0C9F432858479EDBD055D7A28B844EE3BF60
Authority key identifier: 31:62:95:A9:A8:FD:F7:CA:B2:C2:89:BC:47:64:7D:FC:1E:A0:7D:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/90084646-f74e-42c1-9557-3764d36b8bb6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/90084646-f74e-42c1-9557-3764d36b8bb6/b370a869-d64e-39ec-a19a-54bd9b81107b.roa
Signing time:             Tue 22 Oct 2024 01:00:31 +0000
ROA not before:           Tue 22 Oct 2024 01:00:31 +0000
ROA not after:            Mon 20 Jan 2025 02:00:31 +0000
asID:                     396238
IP address blocks:        2605:9fc0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/90084646-f74e-42c1-9557-3764d36b8bb6/90084646-f74e-42c1-9557-3764d36b8bb6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/90084646-f74e-42c1-9557-3764d36b8bb6/90084646-f74e-42c1-9557-3764d36b8bb6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/90084646-f74e-42c1-9557-3764d36b8bb6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9e:db:d0:55:d7:a2:8b:84:4e:e3:bf:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90084646-f74e-42c1-9557-3764d36b8bb6
        Validity
            Not Before: Oct 22 01:00:31 2024 GMT
            Not After : Jan 20 02:00:31 2025 GMT
        Subject: CN=1763de43-48d7-47d0-b0d8-94eed9ca10d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a5:ba:e0:f1:8c:c9:f0:fc:4c:89:7b:4e:0f:
                    7c:44:00:5a:79:ea:c3:a8:b2:50:60:70:e2:a8:eb:
                    43:20:95:f9:d5:77:ee:0f:9b:94:90:d6:1f:9b:de:
                    5e:c9:27:12:e8:bb:e0:6d:d1:91:9a:ce:ad:50:f1:
                    20:bc:89:58:49:88:ae:cc:4d:20:34:eb:f6:db:93:
                    e1:a4:28:a6:98:7d:3f:66:86:dd:70:f3:87:e6:3f:
                    cb:e6:03:2e:a9:35:02:ce:b9:d1:3a:46:5a:33:13:
                    06:87:b7:c7:37:57:09:33:72:7f:15:e9:63:5b:dc:
                    08:59:c2:2f:e6:fc:f7:82:32:40:52:33:54:27:9a:
                    c8:f7:19:03:ac:b9:08:7c:6d:ba:f7:33:4e:7a:02:
                    c2:61:05:4f:f7:08:45:0b:c5:3e:b6:9c:5d:32:f0:
                    b9:f5:90:f2:1f:c2:b4:95:f3:10:6d:0c:10:27:1a:
                    b9:53:f0:d1:af:a6:cb:66:cd:50:81:54:66:ba:fe:
                    20:10:c5:24:d3:8d:2c:dd:43:0c:fc:4e:88:75:d7:
                    db:48:a2:c1:0c:d4:29:3e:f0:be:db:11:56:80:7b:
                    23:4f:b9:f2:f1:2b:11:30:af:e9:20:6c:f7:2b:65:
                    6e:c2:c6:9c:d5:ad:8f:03:81:2e:40:44:a2:c7:3b:
                    98:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:DA:FF:C5:9B:A2:F7:73:86:FA:9E:DB:89:10:BC:1B:D1:7F:FB:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/90084646-f74e-42c1-9557-3764d36b8bb6/b370a869-d64e-39ec-a19a-54bd9b81107b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/90084646-f74e-42c1-9557-3764d36b8bb6/90084646-f74e-42c1-9557-3764d36b8bb6.crl

            X509v3 Authority Key Identifier:
                keyid:31:62:95:A9:A8:FD:F7:CA:B2:C2:89:BC:47:64:7D:FC:1E:A0:7D:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/90084646-f74e-42c1-9557-3764d36b8bb6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9fc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:a5:d8:fc:e3:2a:54:15:5c:3d:0c:84:80:9a:ff:54:f5:bc:
         52:f9:a5:c3:38:5e:fb:89:63:0b:85:4a:65:60:39:ac:d5:42:
         09:30:1b:3a:55:fa:90:94:c0:37:db:72:ad:ac:1f:c0:f6:c2:
         a7:18:4a:82:8a:19:4e:4f:1c:a6:c9:fc:e8:cb:b0:3d:ed:df:
         ce:7b:73:e9:5e:19:ac:cb:aa:fb:8a:76:12:e9:6a:86:fa:f9:
         f6:cf:99:7f:ee:cf:08:4f:98:c8:ba:a5:bc:0e:dc:d0:61:77:
         db:d0:51:02:f9:7e:fe:e5:79:50:f2:5d:f3:e5:0f:e2:fb:ec:
         15:04:ad:67:97:58:a1:41:b9:8e:4b:1d:d1:dd:2b:43:d8:35:
         e3:91:77:30:42:ad:0c:49:3c:72:0e:22:7a:e6:58:d4:94:a2:
         c4:76:56:49:6d:2b:01:3f:10:fd:09:7d:98:3f:2c:3e:18:ff:
         81:c9:11:62:ae:55:a9:0f:3c:b4:d4:13:40:44:20:ea:c5:09:
         69:da:f5:12:b7:4b:fc:fa:98:a5:ee:22:c2:85:4f:69:16:81:
         c3:66:5d:c6:31:d5:6b:ea:b5:db:46:a5:1a:d2:63:ca:f0:3d:
         82:12:5d:05:dd:d2:6c:1b:e3:7f:85:f7:93:df:57:ee:73:19:
         5b:35:7e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:00:44 2024 by rpki-client on console-fra.rpki-client.org