Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/c7d8d703-0066-3e22-871d-284f685cfab2.roa
File:                     c7d8d703-0066-3e22-871d-284f685cfab2.roa (raw, json)
Hash identifier:          RxqAiaQF+TZQyraGQfy2jD8JB9hW5aYJ7clOPid9LNU=
Subject key identifier:   65:8D:72:C9:D5:CA:F5:17:8F:41:48:41:1D:1B:01:04:11:54:63:6A
Certificate issuer:       /CN=eb5e041e-98b3-4dff-827b-03e1387393cf
Certificate serial:       010D0C9F432858474F4B717F894E8D28BB6C2DC0
Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/c7d8d703-0066-3e22-871d-284f685cfab2.roa
Signing time:             Mon 23 Sep 2024 13:00:40 +0000
ROA not before:           Mon 23 Sep 2024 13:00:40 +0000
ROA not after:            Sun 22 Dec 2024 14:00:40 +0000
asID:                     11572
IP address blocks:        2607:6003:2305::/48 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4f:4b:71:7f:89:4e:8d:28:bb:6c:2d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf
        Validity
            Not Before: Sep 23 13:00:40 2024 GMT
            Not After : Dec 22 14:00:40 2024 GMT
        Subject: CN=fe597c09-1f85-412b-894e-aae73cddce0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:40:c6:f8:70:8e:11:7c:04:70:fd:11:4b:6f:
                    4c:ff:f8:38:37:bd:81:9d:6c:d8:c3:50:59:c3:e3:
                    d8:4d:7c:38:8c:b6:76:7d:b9:67:25:17:88:49:a3:
                    bf:f2:5b:ea:27:64:ed:98:48:87:27:1d:25:c4:d8:
                    bb:e8:c8:f0:85:e2:7f:82:0f:2c:31:0b:9f:57:4a:
                    6c:e1:b4:94:1a:9c:37:c5:46:7a:e2:c0:62:b6:9b:
                    6b:2e:69:16:05:20:42:9e:56:5f:db:e0:a3:3a:22:
                    8c:f6:56:69:9e:c2:2c:94:2a:19:0b:6b:a2:82:6d:
                    74:04:66:75:ca:9c:c2:ee:6e:d5:d3:e8:5f:50:0b:
                    be:85:99:61:e8:c8:fc:e2:70:6c:4a:87:7e:9e:cc:
                    19:e7:75:71:2c:3a:b8:5f:ea:d1:77:13:af:85:44:
                    41:9c:bc:3a:22:f4:df:5e:53:44:cb:56:3d:60:a2:
                    e0:fb:7a:28:08:bf:57:3b:d3:87:0f:f1:9f:36:2f:
                    0c:5b:e5:48:a2:28:6a:ae:f9:0e:e0:a3:81:0f:50:
                    8e:85:14:a7:e2:c4:69:4f:33:e7:17:4e:eb:03:20:
                    f4:55:54:a6:1a:e1:8a:af:3b:27:cc:4d:fb:67:fa:
                    f3:19:a7:0d:5d:21:f2:c2:b1:96:db:59:ee:7c:a4:
                    50:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:8D:72:C9:D5:CA:F5:17:8F:41:48:41:1D:1B:01:04:11:54:63:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/c7d8d703-0066-3e22-871d-284f685cfab2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl

            X509v3 Authority Key Identifier:
                keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6003:2305::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:73:6f:62:57:b9:6c:43:c9:40:26:0c:39:3a:c5:ec:08:48:
         79:f0:77:bf:32:48:3d:f1:f5:d1:c5:3e:f0:ea:bd:1e:41:26:
         83:4a:50:94:77:fa:bc:c4:d9:37:ea:ff:15:77:73:eb:65:a0:
         8b:4e:89:ad:bb:f6:d9:13:8c:55:35:cd:62:1a:56:e4:53:9b:
         77:8b:6c:66:a8:fd:50:d5:94:58:09:9c:b7:4b:d8:aa:80:ef:
         50:7b:ba:92:d1:ca:ce:73:f3:f1:f0:63:18:40:08:86:2a:04:
         8a:e7:24:d4:86:ce:75:17:b8:de:b4:23:cd:15:1b:31:2a:50:
         d4:97:ea:6c:d0:1d:67:34:52:38:6d:12:f3:9e:73:ef:ed:2d:
         03:5b:ae:c9:bf:c8:db:1b:bb:ea:b5:70:f2:03:29:b9:8f:00:
         a7:d7:8c:30:cc:33:be:1b:43:a6:83:53:ce:ee:12:3f:22:1a:
         a6:5f:8b:0c:04:ce:37:5d:ff:de:a7:92:3a:f6:36:89:8c:14:
         a9:ed:79:83:39:25:80:08:05:2c:e9:85:a4:92:5b:78:37:51:
         6d:24:8a:ac:02:cd:9c:19:a6:31:3c:71:97:9b:c7:13:dc:7e:
         42:c4:5a:75:d0:ce:4f:cb:b0:0b:10:17:81:56:2e:1f:53:75:
         d4:c7:64:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:49:08 2024 by rpki-client on console-ams.rpki-client.org