Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/1e2f5530-ba9d-381d-9b54-2d76fceca419.roa
File:                     1e2f5530-ba9d-381d-9b54-2d76fceca419.roa (raw, json)
Hash identifier:          Jyxa3Czij8QyIZXDWjeuI22ljnRblOou5Nhx0XgOCBo=
Subject key identifier:   F9:BC:48:7B:F5:CA:47:57:B8:C6:30:BB:D1:0F:78:03:C4:B9:15:AC
Certificate issuer:       /CN=b433860d-ab5d-45f4-a11e-f313b584710a
Certificate serial:       010D0C9F43285847AE36A5AC4D74BAC9EC7B6420
Authority key identifier: CF:D5:13:65:D3:86:91:03:62:B9:5C:C4:7B:A2:B1:19:7A:65:E5:55
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/1e2f5530-ba9d-381d-9b54-2d76fceca419.roa
Signing time:             Sun 27 Oct 2024 13:00:41 +0000
ROA not before:           Sun 27 Oct 2024 13:00:41 +0000
ROA not after:            Sat 25 Jan 2025 14:00:41 +0000
asID:                     14445
IP address blocks:        2606:2a40::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/b433860d-ab5d-45f4-a11e-f313b584710a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/b433860d-ab5d-45f4-a11e-f313b584710a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ae:36:a5:ac:4d:74:ba:c9:ec:7b:64:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433860d-ab5d-45f4-a11e-f313b584710a
        Validity
            Not Before: Oct 27 13:00:41 2024 GMT
            Not After : Jan 25 14:00:41 2025 GMT
        Subject: CN=a9e88f0a-c707-44f6-9d4b-ec30752b4033
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:a0:0d:46:13:31:71:18:e9:0e:5a:0e:9e:a1:
                    3f:f8:59:03:63:82:f6:bf:f2:9b:a0:53:25:00:3c:
                    c5:f0:1a:ee:73:26:d2:cb:fc:94:41:c3:45:92:50:
                    4f:11:69:e7:53:cb:14:12:6c:6f:a8:53:0c:05:ba:
                    37:a5:54:4e:96:ce:89:e7:a5:54:9b:39:d9:a4:27:
                    7a:1a:12:0b:d5:54:ce:58:10:48:cd:3c:a1:e9:7f:
                    5d:6b:44:a5:32:b9:ce:7c:7e:ef:28:8d:d8:03:53:
                    26:eb:9e:92:7a:6d:09:3b:9e:73:39:fb:44:8f:d7:
                    36:e2:93:b1:58:ba:18:5a:1f:93:43:c5:34:e6:10:
                    94:8d:2d:4c:b7:32:57:69:e1:8d:c4:76:5e:f8:30:
                    8c:2f:61:12:36:97:21:a0:12:6a:7e:1b:f7:70:0d:
                    e5:3e:8f:de:da:27:57:d1:e0:83:6e:9d:c3:4e:e4:
                    ac:2a:bb:b5:0c:3e:ce:2f:0b:f6:ac:41:21:15:26:
                    24:92:79:b4:2f:db:0a:0f:c8:5a:86:89:cc:0d:3c:
                    49:10:f7:b4:69:d9:af:a4:f8:47:fe:f8:00:08:9c:
                    65:6e:3e:82:53:e3:d0:0e:8a:11:14:14:58:cc:dc:
                    71:b9:c7:5c:01:39:aa:b3:cc:91:88:7c:ef:54:b3:
                    43:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:BC:48:7B:F5:CA:47:57:B8:C6:30:BB:D1:0F:78:03:C4:B9:15:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/1e2f5530-ba9d-381d-9b54-2d76fceca419.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/b433860d-ab5d-45f4-a11e-f313b584710a.crl

            X509v3 Authority Key Identifier:
                keyid:CF:D5:13:65:D3:86:91:03:62:B9:5C:C4:7B:A2:B1:19:7A:65:E5:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:2a40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:65:47:44:0d:b7:07:07:16:09:1d:09:2b:e4:13:3c:d1:2d:
         d2:58:15:a3:d3:c3:19:0b:f7:1e:fa:82:2b:33:33:61:89:3f:
         3c:10:57:7a:88:6c:08:fb:54:f1:f8:0c:56:69:ce:fe:37:f6:
         da:f7:f8:15:c5:0c:c4:c5:ae:eb:e4:25:84:51:d0:a7:cf:91:
         b6:ec:f5:ca:c3:08:e1:e6:cf:b3:27:35:75:51:ff:16:cb:4f:
         c2:03:58:28:e2:4c:fa:84:bb:25:7b:2b:f2:13:d0:60:98:eb:
         2d:7f:c5:c6:b7:0d:77:f1:c2:ff:f0:2e:f5:1b:5d:d8:0e:88:
         be:fe:45:84:b8:f3:10:f5:ec:52:96:71:7b:d2:3f:cc:f6:87:
         17:cc:aa:78:ef:81:d2:b8:a1:bf:14:55:08:0e:eb:d0:da:04:
         7b:5f:df:9a:cd:81:78:34:ad:34:9b:22:0d:ea:63:5d:d4:23:
         5b:45:69:45:1e:09:2b:bb:6b:64:36:17:c7:1f:26:12:47:20:
         76:11:f3:d7:97:36:70:5f:27:58:06:72:06:00:b1:39:2c:c3:
         4b:11:f2:64:7c:d0:82:0d:40:49:dd:6d:eb:7f:d6:3f:71:6f:
         e5:f7:77:5f:80:72:e2:6d:99:fe:2d:79:df:91:81:b0:2e:c9:
         b1:65:e0:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:51 2024 by rpki-client on console-fra.rpki-client.org