Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/88fdbc80-e281-3ab7-82c2-89072a339c23.roa
File:                     88fdbc80-e281-3ab7-82c2-89072a339c23.roa (raw, json)
Hash identifier:          8T2sBKzdM4nwWDQOv9yqbPuUtHidJK9T9kosuHWMM4U=
Subject key identifier:   0F:3E:21:A6:EA:E2:07:72:2B:5A:2A:D9:64:63:47:8E:84:30:9C:72
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F432858478CB6981F5B83262E5A0B61C0
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/88fdbc80-e281-3ab7-82c2-89072a339c23.roa
Signing time:             Tue 15 Oct 2024 13:00:47 +0000
ROA not before:           Tue 15 Oct 2024 13:00:47 +0000
ROA not after:            Mon 13 Jan 2025 14:00:47 +0000
asID:                     11404
IP address blocks:        2605:1f80::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8c:b6:98:1f:5b:83:26:2e:5a:0b:61:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Oct 15 13:00:47 2024 GMT
            Not After : Jan 13 14:00:47 2025 GMT
        Subject: CN=16b8eab5-de91-4354-9666-bf93ffb864fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:3e:de:8d:9c:46:28:15:a1:7d:ef:c2:73:1b:
                    49:ab:af:4e:24:f8:c1:7c:38:90:64:5d:46:86:44:
                    41:68:d2:11:c8:3f:e3:94:2a:61:d4:8f:df:6f:98:
                    6d:a0:b7:16:06:37:1d:d2:4d:02:42:eb:44:75:8d:
                    9e:14:a6:64:8b:42:d0:39:db:46:43:e7:70:a8:ac:
                    a3:99:98:c8:34:50:78:a8:d1:73:3b:f7:b5:93:f6:
                    85:77:67:6c:1f:15:33:1d:a0:ec:ca:af:11:6b:11:
                    cf:b9:aa:e6:b1:ae:76:4a:4b:23:50:41:c6:4e:f6:
                    12:79:e2:ec:99:97:1b:42:a5:e8:6a:6d:a3:bd:80:
                    9f:5f:ef:8b:1e:8a:6f:db:5e:c7:53:3c:dc:34:f5:
                    34:cf:2d:42:ae:fe:6a:9b:07:cd:3d:6c:58:98:63:
                    91:19:18:d8:a0:14:5d:16:64:af:ae:a2:55:4c:46:
                    7f:5e:ef:33:85:b7:fa:a8:5d:43:f7:3f:7f:5e:1a:
                    7a:cd:fc:bb:5c:d5:7c:34:e7:02:a5:6d:7d:97:77:
                    18:6e:5a:78:ac:93:14:1f:cb:86:ff:89:f5:aa:49:
                    fe:8a:07:86:81:a0:83:01:73:a1:b2:4c:ba:0a:79:
                    f5:cc:91:68:1d:02:f8:56:90:0d:21:73:98:e5:c0:
                    d6:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:3E:21:A6:EA:E2:07:72:2B:5A:2A:D9:64:63:47:8E:84:30:9C:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/88fdbc80-e281-3ab7-82c2-89072a339c23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:1f80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:45:84:d7:62:fc:4a:49:11:92:1d:79:26:81:8f:1d:c8:54:
         9c:ad:16:7d:01:d1:16:1a:73:62:13:54:ec:77:4d:57:21:ae:
         8c:92:03:28:05:dc:8c:dc:6b:2d:8e:67:4e:29:82:4f:a6:a7:
         f9:ec:da:57:71:8c:a7:c4:36:1e:ce:5e:11:26:aa:63:d0:d5:
         0c:1c:fe:1b:51:ef:af:99:d1:0d:f9:64:a0:68:af:90:13:a5:
         17:44:26:6d:74:e8:1d:de:9f:9c:43:f8:b4:d5:db:84:b1:b2:
         1f:a5:a0:cd:1a:e7:96:0e:f9:b1:70:0a:d6:81:0a:5d:94:40:
         6b:c2:ab:e4:30:5c:2e:88:3e:90:5b:1a:7e:9f:80:d3:16:71:
         ad:47:cc:b7:8e:9c:89:3a:08:64:e1:e7:01:2f:16:02:2c:77:
         0a:40:df:a2:e2:90:f2:25:6f:e8:d6:7d:9a:41:ee:e8:f7:b4:
         c4:20:50:8c:d7:73:6e:de:22:d5:7c:b6:31:d9:b3:81:29:c8:
         61:70:12:b3:aa:0d:8d:ec:7b:ca:0f:b4:73:2c:cb:dd:a7:ae:
         f0:11:6e:a4:d6:64:dd:a9:75:a6:2c:75:29:5e:0c:34:50:89:
         b3:4a:f5:40:50:16:8f:5f:aa:55:80:da:fd:fe:7e:a3:3a:2a:
         7b:95:e8:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:59:06 2024 by rpki-client on console-fra.rpki-client.org