Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/650448da-69d9-3f83-9740-1261236e659b.roa
File:                     650448da-69d9-3f83-9740-1261236e659b.roa (raw, json)
Hash identifier:          98vcYqS87S/IIYUEpa1dLCakTzMBDBuVPQQDoIVvPgg=
Subject key identifier:   77:97:87:C2:86:7C:15:BE:99:F7:BC:AC:C5:26:EA:5D:E3:8A:22:81
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F432858474F4B71B0DC2C2A678BFAA580
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/650448da-69d9-3f83-9740-1261236e659b.roa
Signing time:             Mon 23 Sep 2024 13:00:40 +0000
ROA not before:           Mon 23 Sep 2024 13:00:40 +0000
ROA not after:            Sun 22 Dec 2024 14:00:40 +0000
asID:                     19181
IP address blocks:        2607:ff00:700::/40 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4f:4b:71:b0:dc:2c:2a:67:8b:fa:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Sep 23 13:00:40 2024 GMT
            Not After : Dec 22 14:00:40 2024 GMT
        Subject: CN=e8065e06-db90-4233-a7c6-2de9867336be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e1:a8:7f:2a:22:44:9f:be:5d:06:c2:71:80:
                    1c:ce:9f:7b:bf:42:8a:28:27:b4:5f:49:e5:f0:b3:
                    fe:8f:1e:65:76:f3:97:b7:65:77:09:55:1a:d0:cf:
                    f8:b6:1c:2f:0c:18:fd:f8:1c:92:b4:2b:2c:57:b9:
                    b4:17:51:a4:1d:0c:e4:67:bd:91:5f:02:37:b2:29:
                    10:75:dc:e2:8b:9a:3b:2e:6c:ff:f4:46:b7:3a:26:
                    52:64:b0:f2:7a:80:79:d3:4d:59:17:22:66:dc:92:
                    ab:7f:90:dc:ba:ab:0b:06:ee:4c:ac:8e:d4:69:1b:
                    c0:02:fe:18:d9:0c:d4:75:4d:8a:50:3d:d0:12:8f:
                    c6:ab:e5:ea:42:c6:ce:81:05:fe:aa:15:b8:0d:40:
                    94:4d:f2:27:01:28:14:1b:70:1b:7d:ed:20:17:13:
                    6a:6e:d8:6f:cd:87:86:ff:9e:12:06:8b:44:44:2a:
                    f1:18:75:93:13:61:c2:72:ff:5d:9b:8e:90:51:8a:
                    34:91:33:5f:39:1c:a2:19:ef:0f:0d:56:78:cb:05:
                    94:c0:fc:3c:e4:ea:da:8b:72:fd:7b:e6:51:80:23:
                    ec:ec:95:dc:84:1c:cb:0f:e0:d0:a0:46:61:58:5e:
                    0d:07:8a:21:b2:15:fb:8a:e8:8d:8f:aa:f7:57:ab:
                    6d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:97:87:C2:86:7C:15:BE:99:F7:BC:AC:C5:26:EA:5D:E3:8A:22:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/650448da-69d9-3f83-9740-1261236e659b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:ff00:700::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:93:46:f7:d4:c1:0d:a3:76:16:20:a1:05:0a:df:66:31:69:
         b2:ba:48:29:14:c5:94:b2:cf:35:ac:62:39:e9:f5:e9:83:99:
         e1:b1:49:c7:c5:0b:c3:7e:74:3c:ea:ec:6d:5f:e2:cd:79:38:
         8c:e4:47:7c:ca:14:20:f9:39:72:1b:49:68:ff:b7:a7:83:01:
         ae:d0:11:92:ce:a8:8b:14:63:39:73:a2:84:fb:ff:8b:09:10:
         3a:bc:f5:4a:0b:a4:cc:79:31:eb:65:a0:9b:51:77:74:43:14:
         fe:91:e3:11:90:52:51:63:6b:bb:04:09:c9:a9:b6:98:22:f6:
         e3:e6:e5:2b:28:c4:2a:59:4d:f7:d3:dc:84:70:ba:a0:6f:93:
         9d:bd:67:ea:bf:2b:1f:09:0c:45:4e:7e:ec:c0:02:88:09:60:
         00:ba:55:36:b8:00:a8:3e:c6:7b:24:7c:7f:71:08:ae:6f:ab:
         0f:cc:ef:bd:c2:19:79:d7:aa:3c:1f:6e:01:0e:eb:7e:7a:8f:
         57:27:ba:65:25:7c:cd:98:71:69:32:26:d6:c8:a0:7d:7a:35:
         94:11:11:c3:d0:b3:01:cc:8b:bf:9e:de:9f:b1:c6:d4:a6:c5:
         fd:8d:f7:1c:30:ad:6c:74:9d:7d:9f:e3:0a:f9:fa:34:dd:31:
         98:86:bb:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:52 2024 by rpki-client on console-ams.rpki-client.org