Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/1077f147-9d78-3b5c-b702-4198d3ef32d9.roa
File:                     1077f147-9d78-3b5c-b702-4198d3ef32d9.roa (raw, json)
Hash identifier:          6UdhgmnT3SSYZoeQfucuhKHxSwvGjKSNhBe8DTO5fiw=
Subject key identifier:   E4:58:A2:84:BF:12:AA:8C:05:5E:AA:F5:24:C4:29:33:25:04:F4:A9
Certificate issuer:       /CN=eb5e041e-98b3-4dff-827b-03e1387393cf
Certificate serial:       010D0C9F43285847537B612D1130481B4AF1D21C
Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/1077f147-9d78-3b5c-b702-4198d3ef32d9.roa
Signing time:             Wed 25 Sep 2024 01:00:31 +0000
ROA not before:           Wed 25 Sep 2024 01:00:31 +0000
ROA not after:            Tue 24 Dec 2024 02:00:31 +0000
asID:                     20454
IP address blocks:        2607:6002:100::/40 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:53:7b:61:2d:11:30:48:1b:4a:f1:d2:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf
        Validity
            Not Before: Sep 25 01:00:31 2024 GMT
            Not After : Dec 24 02:00:31 2024 GMT
        Subject: CN=9d009ac2-5cc4-42b3-8c59-ab5262996f7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:d5:a5:4d:08:da:ae:58:f9:8f:c0:56:2c:a0:
                    be:76:5f:fc:00:fe:ad:d7:b8:ea:1a:a1:91:e9:96:
                    b0:2f:10:a2:31:2f:f2:33:8a:1c:ac:f2:2d:4c:ab:
                    f3:ea:2e:3b:6e:14:2a:12:be:5e:57:b9:9c:1e:20:
                    76:64:12:ed:c5:5b:26:8d:d9:54:5d:e3:11:47:47:
                    c3:5f:a6:ed:fb:85:2c:2d:42:1a:1f:48:a0:37:ac:
                    64:c6:c7:4b:52:af:ee:7c:52:8b:f2:94:38:7d:6a:
                    1d:29:33:fd:12:19:85:6a:a9:6d:5c:8d:71:ef:b4:
                    61:b8:e0:cf:86:be:17:b2:65:67:4b:f4:86:e7:f2:
                    be:8c:7b:ce:2d:73:8e:dd:24:2e:7e:aa:6a:c5:6e:
                    0d:df:0f:16:f5:88:fa:51:a5:02:44:f5:2b:58:ba:
                    50:86:35:ed:30:54:f7:78:b4:a5:61:d3:26:95:dd:
                    f8:a0:fa:0b:1e:bb:da:e7:e3:e3:ea:92:0c:3a:b5:
                    31:23:0a:f4:f9:2f:63:8d:b2:39:21:bf:56:d9:3d:
                    b2:bc:43:69:92:3f:46:73:ab:6d:78:10:31:e0:9c:
                    1d:14:b3:f4:93:96:b9:54:75:6c:8d:3b:b6:ae:35:
                    53:68:67:02:b6:cc:84:59:6a:2e:bf:4c:e6:4c:fe:
                    f8:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:58:A2:84:BF:12:AA:8C:05:5E:AA:F5:24:C4:29:33:25:04:F4:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/1077f147-9d78-3b5c-b702-4198d3ef32d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl

            X509v3 Authority Key Identifier:
                keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6002:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:2b:6e:be:f0:13:46:40:6f:b4:45:c2:c0:9e:b2:73:cd:05:
         06:d5:0b:97:f4:77:ed:b8:d0:f1:4d:4d:62:88:d3:54:d2:a0:
         3b:6b:0c:1d:2e:ea:68:c4:60:d1:ee:12:99:6d:29:74:de:a2:
         b3:d9:26:8b:4e:58:39:76:2f:77:97:aa:49:71:38:e0:15:ce:
         13:a0:15:71:e3:95:6b:f4:86:6b:b5:31:a1:3b:ee:9b:20:68:
         8b:75:8a:56:53:aa:b9:b4:c6:f0:f2:e6:df:4f:b1:2c:13:32:
         24:63:f8:b6:0f:24:cb:da:84:e1:55:e9:a4:fa:2b:81:b8:02:
         29:eb:3f:f5:3a:fb:61:2c:e8:75:6a:22:b7:61:0b:5b:83:d8:
         5a:04:9d:9f:39:a3:bf:7b:cc:27:bc:cb:5c:5c:8d:46:66:4c:
         e7:fe:c2:8a:13:16:a4:ff:5a:a8:3d:02:e5:72:cf:5f:e4:bd:
         30:30:b2:21:6c:47:1b:48:32:b5:87:c1:50:8a:8a:be:70:4c:
         19:de:b1:1e:3f:a9:c7:92:10:15:16:44:e8:e1:47:e7:1c:42:
         e2:bd:2f:e2:71:34:ec:e6:c5:aa:34:5c:b0:f8:72:a2:f0:9d:
         47:f1:fd:cb:a8:7d:ef:10:f6:38:cd:84:f7:7e:30:f2:1e:ae:
         57:14:89:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:55 2024 by rpki-client on console-fra.rpki-client.org