Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/3d17c561-ea87-3032-81af-6559c2402369.roa
File:                     3d17c561-ea87-3032-81af-6559c2402369.roa (raw, json)
Hash identifier:          shO54s+HMKdCcCj68DRAHt4mQEjy5vRyuzTG3bU64UQ=
Subject key identifier:   9D:3F:92:91:47:F2:64:86:ED:12:86:85:7A:A5:8A:3E:81:B1:87:BF
Certificate issuer:       /CN=eb5e041e-98b3-4dff-827b-03e1387393cf
Certificate serial:       010D0C9F43285847537B59208FA5CDDA58219580
Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/3d17c561-ea87-3032-81af-6559c2402369.roa
Signing time:             Wed 25 Sep 2024 01:00:31 +0000
ROA not before:           Wed 25 Sep 2024 01:00:31 +0000
ROA not after:            Tue 24 Dec 2024 02:00:31 +0000
asID:                     20454
IP address blocks:        2607:6002:171::/48 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:53:7b:59:20:8f:a5:cd:da:58:21:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf
        Validity
            Not Before: Sep 25 01:00:31 2024 GMT
            Not After : Dec 24 02:00:31 2024 GMT
        Subject: CN=0ca4caee-f1e1-4dc9-a15c-f11668c6be17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c8:6c:2e:d5:7b:16:eb:e2:2c:8d:dc:54:6e:
                    37:d4:7d:af:b8:77:58:ce:42:88:c8:55:3c:17:65:
                    35:c4:84:09:e9:e4:41:49:54:cb:ee:c9:bc:3b:47:
                    76:86:40:a5:d7:0d:93:b9:01:ba:aa:da:70:7b:5e:
                    7f:9e:24:8e:64:fc:b6:19:3c:15:51:99:36:1f:e6:
                    5d:6f:e1:98:fd:fd:d5:e2:e4:9d:5c:7f:dc:0c:a0:
                    de:f6:d2:85:0a:66:3a:b9:f8:b9:2b:42:d2:4c:33:
                    27:67:47:12:64:15:3d:a9:fa:55:f5:55:f3:33:66:
                    13:4e:a7:ef:bc:9f:9d:d4:0b:a8:e9:08:07:ce:d9:
                    77:29:b3:36:f2:17:dd:6e:bb:c8:d9:d5:a1:ee:fd:
                    6f:01:ca:be:ff:3d:a9:33:13:6d:ed:19:a5:fa:ef:
                    bc:97:72:7b:af:b3:7e:81:75:5d:2a:5b:d0:e5:99:
                    5c:66:21:05:c1:4d:14:4e:2d:47:7b:1e:a7:05:8d:
                    fe:4c:6e:39:41:ef:22:a6:74:0d:6e:65:3f:dd:25:
                    63:84:38:d0:98:17:a9:ac:e6:76:7b:74:f8:ff:c4:
                    90:10:53:2a:56:b5:00:a8:e6:de:d6:6f:ef:33:66:
                    cd:2b:ca:e3:58:b8:ba:1f:e0:af:ba:48:3c:13:9a:
                    06:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:3F:92:91:47:F2:64:86:ED:12:86:85:7A:A5:8A:3E:81:B1:87:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/3d17c561-ea87-3032-81af-6559c2402369.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl

            X509v3 Authority Key Identifier:
                keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6002:171::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:7c:0c:e0:f1:04:24:79:ef:4c:5a:74:e0:e4:b8:10:16:55:
         4a:6a:44:c6:9e:e2:f1:68:8b:ab:0a:6e:5e:1a:d3:13:af:e7:
         ad:58:14:ff:41:7e:f4:41:4f:3d:01:c7:f9:fd:ae:cc:dc:27:
         51:b1:0f:20:63:1e:1c:18:d7:be:b0:c0:7e:62:94:fd:f8:98:
         61:5c:7b:68:ae:c3:79:25:6b:db:f3:25:e6:78:e6:2d:9f:f2:
         9d:53:ae:d7:9f:fb:38:ba:6e:b2:9e:53:52:92:8a:e5:1f:7a:
         f9:06:e2:3d:4a:4b:4e:b1:79:c0:41:a8:02:3c:2f:62:31:3c:
         3f:ba:1a:5e:58:e8:29:65:46:b5:b9:66:19:7e:df:fc:c9:0f:
         c3:b4:e1:a1:39:90:43:1b:d1:b0:56:91:a4:bf:9d:82:36:a2:
         f3:d3:53:b0:90:97:14:fe:c4:16:f7:58:5b:cb:11:36:78:fa:
         2b:b0:10:58:7a:78:0a:c0:e4:0e:1c:1e:bb:36:ce:e7:bd:7d:
         ce:9f:6b:b0:1b:34:1e:47:65:25:7b:fd:af:3b:82:02:5c:da:
         7f:3a:25:b5:a6:1f:ab:84:b6:23:7e:d6:3c:b1:1c:4d:58:f0:
         f1:64:9f:9d:06:1d:4c:05:d7:74:78:0d:d7:9d:41:8f:1a:d9:
         18:6d:75:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:55 2024 by rpki-client on console-fra.rpki-client.org