Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/b32af959-6588-30ef-ac6a-e1c8ea97071b.roa
File:                     b32af959-6588-30ef-ac6a-e1c8ea97071b.roa (raw, json)
Hash identifier:          +99/8Zid+CQCwnmKZnly5W1YEt1LKi+UvULTmhRLOds=
Subject key identifier:   A2:63:4E:59:90:DB:72:3B:BF:69:70:B1:C6:6F:44:10:52:D6:85:76
Certificate issuer:       /CN=dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be
Certificate serial:       010D0C9F4328584767061E145865387F21D12380
Authority key identifier: D4:08:14:4A:5A:B6:1A:EF:00:62:89:48:42:C1:66:F0:04:D3:CE:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/b32af959-6588-30ef-ac6a-e1c8ea97071b.roa
Signing time:             Wed 02 Oct 2024 01:00:31 +0000
ROA not before:           Wed 02 Oct 2024 01:00:31 +0000
ROA not after:            Tue 31 Dec 2024 02:00:31 +0000
asID:                     3390
IP address blocks:        2610:e0:a040::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:67:06:1e:14:58:65:38:7f:21:d1:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be
        Validity
            Not Before: Oct  2 01:00:31 2024 GMT
            Not After : Dec 31 02:00:31 2024 GMT
        Subject: CN=6e507076-bac3-4923-a893-8ce82dece3ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fc:1a:c6:36:3c:91:6f:e8:86:5e:b9:02:64:
                    05:60:56:bc:e6:ba:8d:fe:e2:3a:c3:c4:93:16:db:
                    bf:cc:0d:31:e1:a3:7e:a7:d5:4e:ed:b6:61:fa:6b:
                    a6:18:39:c9:11:3d:4a:92:d2:8b:00:35:14:e7:bd:
                    26:32:8a:21:56:0f:01:ec:20:b2:bc:dd:f1:1b:1b:
                    ab:ad:f2:9f:94:e5:98:67:9a:39:ba:9f:55:9e:6e:
                    d0:23:1c:65:66:f8:fa:2f:06:4e:d6:22:78:ac:ca:
                    a0:45:c9:c8:61:25:84:02:c0:03:a1:c4:66:5d:77:
                    d7:62:0b:28:c1:e1:9e:6c:30:39:f6:53:d6:74:7a:
                    a8:9c:ef:bc:fb:ac:16:e6:fa:96:73:af:39:35:75:
                    a8:66:8e:83:5c:e3:84:00:76:74:88:85:02:90:b2:
                    d9:bd:a4:3a:a4:09:ae:46:0a:da:81:4c:76:b1:5d:
                    50:fb:a4:a7:83:93:6e:d9:25:0b:7f:b9:b8:59:7c:
                    f1:70:c5:40:be:df:59:29:d0:84:3e:50:aa:47:07:
                    b6:2c:3a:af:3f:fd:61:9f:9a:fd:70:6d:bf:f1:fa:
                    a4:a5:a8:85:36:8e:35:9d:31:3b:c7:9c:d1:10:66:
                    03:3d:f6:f1:d0:58:53:ca:5d:58:b7:21:c1:f4:f1:
                    99:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:63:4E:59:90:DB:72:3B:BF:69:70:B1:C6:6F:44:10:52:D6:85:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/b32af959-6588-30ef-ac6a-e1c8ea97071b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.crl

            X509v3 Authority Key Identifier:
                keyid:D4:08:14:4A:5A:B6:1A:EF:00:62:89:48:42:C1:66:F0:04:D3:CE:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:e0:a040::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:87:c8:99:07:19:f9:fa:5b:c7:ff:87:08:ac:c9:ee:72:eb:
         67:9e:71:ab:fe:49:a2:b2:a4:cd:01:3f:67:fc:23:8f:5d:f4:
         1c:ea:c9:bc:7a:df:7e:59:9d:b3:8c:65:27:61:35:b9:44:a4:
         a4:ce:93:2e:7a:bb:41:fe:73:93:db:90:b6:a3:79:38:2e:53:
         2b:7a:e0:5b:47:30:d9:e9:3b:b0:7b:a9:05:ab:db:63:d4:48:
         f1:69:ea:a1:24:fc:bf:88:26:95:a7:c1:11:20:fc:10:93:d3:
         04:b4:3f:32:b7:a2:45:92:92:18:ae:b6:51:42:5f:7d:b3:d8:
         a4:72:48:70:e3:ba:b4:7f:56:c5:3a:0f:69:6f:3a:92:d8:cb:
         68:9a:43:3e:8b:71:a1:34:7b:23:ef:b9:e9:92:b5:8a:93:88:
         3e:97:7c:8a:42:d7:fa:64:dd:47:4e:7f:31:0d:fd:5d:96:d7:
         59:d1:fc:ff:e7:c5:58:3b:22:df:03:e4:e7:da:07:94:e6:af:
         ac:46:a7:d7:e5:1e:12:59:4e:b1:fb:56:9b:82:28:be:3f:08:
         51:03:31:a3:11:7a:91:d2:88:ba:5e:a0:09:ee:e1:ef:36:60:
         30:fa:c6:a8:35:17:f9:a8:9f:84:f8:04:f1:a2:be:6f:1c:d5:
         8b:66:80:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:49:07 2024 by rpki-client on console-ams.rpki-client.org