Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/4d286ed7-a87d-3f27-9d7f-738f4a039bb1.roa
File:                     4d286ed7-a87d-3f27-9d7f-738f4a039bb1.roa (raw, json)
Hash identifier:          4JdIntyp2xid9CEo6XDsZQ9sASTg4u72rZqVcD5YZ48=
Subject key identifier:   CB:3C:C5:F7:DB:37:77:6A:E1:4A:89:C8:D8:F7:31:DC:F8:BA:2F:8D
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F432858478CB6980E88436AA7A132DDC0
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/4d286ed7-a87d-3f27-9d7f-738f4a039bb1.roa
Signing time:             Tue 15 Oct 2024 13:00:47 +0000
ROA not before:           Tue 15 Oct 2024 13:00:47 +0000
ROA not after:            Mon 13 Jan 2025 14:00:47 +0000
asID:                     11404
IP address blocks:        2604:4080::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8c:b6:98:0e:88:43:6a:a7:a1:32:dd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Oct 15 13:00:47 2024 GMT
            Not After : Jan 13 14:00:47 2025 GMT
        Subject: CN=019733e0-15c1-4d6b-8835-2bf25bb9330e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ac:91:81:2f:09:cd:ea:23:6b:ab:b7:13:c0:
                    c6:55:80:3a:e3:72:2f:89:9f:c0:5c:db:6c:23:61:
                    44:ee:0c:c3:ad:c3:60:f9:1e:79:46:09:40:5b:be:
                    37:6f:8a:7f:a2:7e:ca:a3:a7:f4:95:c6:c3:de:a7:
                    d8:ad:c1:c8:06:94:d3:f9:83:48:13:3c:72:b5:92:
                    8f:ae:27:c6:2f:2c:26:c0:92:d5:46:34:bb:9b:21:
                    5d:87:5f:10:95:6b:cc:97:5d:cb:9f:9b:5d:6c:d9:
                    61:ab:db:3e:c8:a8:d7:75:e1:16:19:1f:c8:ca:53:
                    36:81:61:c0:b4:87:d7:94:81:25:4c:24:8c:ba:99:
                    51:3a:4d:fa:51:a4:ed:22:4a:7f:75:fd:ab:7a:b7:
                    26:40:b6:3e:c8:78:c9:db:0c:61:da:08:c4:b3:9e:
                    da:aa:2d:d9:e2:55:aa:4a:ed:3d:db:4c:1d:84:70:
                    ab:94:f6:ff:4f:e4:7f:09:80:8a:e1:e7:06:d3:cd:
                    b9:04:36:ef:c8:cf:07:03:22:d2:82:1c:ae:af:e6:
                    2c:ed:5b:9f:df:46:75:35:6a:00:3b:c8:a6:fd:ea:
                    a9:fa:3e:05:9d:82:e4:df:1b:34:37:bb:ef:70:40:
                    92:3b:e7:f1:3d:17:23:6b:b1:3c:08:2f:2b:82:01:
                    ef:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:3C:C5:F7:DB:37:77:6A:E1:4A:89:C8:D8:F7:31:DC:F8:BA:2F:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/4d286ed7-a87d-3f27-9d7f-738f4a039bb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:4080::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:eb:27:18:0e:e8:e4:a6:01:72:3d:13:a1:17:e1:2f:5b:cf:
         41:2e:0a:69:f5:b4:b3:d4:ef:90:f3:a7:98:3c:7d:24:29:48:
         a6:a6:d1:5a:93:e3:fd:64:cf:ce:e6:16:89:6b:3c:c2:4d:b6:
         da:d8:c3:a2:74:51:df:9e:b3:22:e5:fd:79:34:63:72:a9:ed:
         bf:0d:e6:02:42:96:e0:e9:a8:16:e7:fe:cf:de:26:40:ea:1a:
         da:70:1a:45:74:3e:67:e2:bb:3c:26:8f:72:4d:fa:03:21:d9:
         29:d3:23:88:8a:85:68:b3:d5:55:b8:af:9d:c0:78:5c:ae:19:
         3d:7a:2d:e7:c8:a3:a2:91:5e:c2:c0:fa:2e:fb:54:b8:87:8a:
         78:c8:6d:0f:2a:8b:2e:ce:8f:b5:13:1f:f2:f8:61:7e:8c:fb:
         13:cf:c0:84:7a:48:3c:79:bb:82:7b:2f:7d:ae:c2:a9:14:cf:
         44:87:ca:80:0c:fa:68:8b:ad:0c:be:9a:60:05:88:b3:94:45:
         8e:4b:7b:a1:83:4a:e4:d2:b8:f4:1c:d7:42:ce:75:2a:7a:1e:
         c2:09:99:30:f9:22:e6:6f:d6:29:a3:85:58:b6:7f:6f:d2:a3:
         2c:36:7a:99:7d:aa:ab:89:71:b4:78:1e:ee:42:f3:cd:bf:47:
         03:81:40:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:24:30 2024 by rpki-client on console-fra.rpki-client.org