Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1/9ebd54a0-f82c-3fd7-bfa2-fd9f21b958b1.roa
File:                     9ebd54a0-f82c-3fd7-bfa2-fd9f21b958b1.roa (raw, json)
Hash identifier:          EhzdkjJP3FtBpKrF8KTljaFM+wtEfM+b9RlTlH02D/A=
Subject key identifier:   F1:C2:3B:2B:37:59:8F:91:E3:C7:35:11:5A:F0:7F:37:84:92:FB:79
Certificate issuer:       /CN=1f1cdae5-b041-4993-963d-6f855f74efa1
Certificate serial:       010D0C9F43285847643B74D271657EFA927BD080
Authority key identifier: 3E:A4:0D:8F:72:F2:B1:37:64:7A:4B:F7:58:E7:87:77:5C:A5:BE:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1/9ebd54a0-f82c-3fd7-bfa2-fd9f21b958b1.roa
Signing time:             Tue 01 Oct 2024 01:00:31 +0000
ROA not before:           Tue 01 Oct 2024 01:00:31 +0000
ROA not after:            Mon 30 Dec 2024 02:00:31 +0000
asID:                     54082
IP address blocks:        2607:8040::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1/1f1cdae5-b041-4993-963d-6f855f74efa1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1/1f1cdae5-b041-4993-963d-6f855f74efa1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:64:3b:74:d2:71:65:7e:fa:92:7b:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f1cdae5-b041-4993-963d-6f855f74efa1
        Validity
            Not Before: Oct  1 01:00:31 2024 GMT
            Not After : Dec 30 02:00:31 2024 GMT
        Subject: CN=1316dca8-6e25-44f2-a4bb-387102ed2967
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ea:9e:17:23:d6:ef:ba:74:3b:69:e9:79:b4:
                    2b:41:3e:07:13:45:28:27:60:8f:80:26:94:bf:8a:
                    18:88:4f:75:e5:83:c9:ce:d8:ec:ff:b0:85:ca:8e:
                    69:56:69:6c:d0:57:a4:d6:b4:83:10:d5:9a:a7:9f:
                    fd:87:5a:5a:61:30:9f:17:1c:fb:72:12:43:99:6e:
                    66:90:03:6b:f2:71:93:ae:71:34:8a:89:c8:a9:60:
                    a7:22:b5:94:92:27:a3:78:90:11:f1:9a:71:2c:2b:
                    09:bb:4f:c6:bb:af:1b:84:f5:0e:9e:5c:86:bd:55:
                    e9:e9:b6:ff:a5:1a:41:13:ff:c0:23:c2:f2:4c:9b:
                    48:cc:e6:e4:6c:89:c9:20:79:1e:3c:88:e5:25:ce:
                    b4:80:ac:03:1c:cc:cc:75:bd:2a:d6:e1:3a:48:cc:
                    e1:84:d5:ec:de:61:82:7a:f9:10:02:88:d7:31:70:
                    19:e8:db:8e:fb:b6:42:51:35:1c:1f:19:89:68:2a:
                    32:61:eb:18:56:ac:54:ce:cb:16:a3:6b:30:b8:01:
                    a3:d6:6c:b4:97:c5:4b:1b:f6:26:43:75:76:fa:01:
                    91:2e:b3:e5:83:7f:e5:f4:fd:8a:53:7f:e8:09:8d:
                    d5:b8:66:87:ff:3d:8a:a6:70:8c:ed:fd:9a:ab:b5:
                    83:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:C2:3B:2B:37:59:8F:91:E3:C7:35:11:5A:F0:7F:37:84:92:FB:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1/9ebd54a0-f82c-3fd7-bfa2-fd9f21b958b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1/1f1cdae5-b041-4993-963d-6f855f74efa1.crl

            X509v3 Authority Key Identifier:
                keyid:3E:A4:0D:8F:72:F2:B1:37:64:7A:4B:F7:58:E7:87:77:5C:A5:BE:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8040::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:24:0a:98:62:d8:46:57:02:0b:88:66:2b:71:10:68:95:73:
         d3:a5:10:20:b8:3a:95:ac:b8:aa:95:ae:79:85:17:f7:6e:ff:
         fa:1d:62:f5:a6:29:ff:6f:19:19:d2:6d:f5:fa:48:28:cd:0e:
         08:75:ce:33:a7:1e:21:27:45:89:8c:96:c6:02:e7:d8:66:46:
         99:43:32:67:a7:b4:c6:30:c8:d9:89:69:eb:8a:45:4b:0e:b9:
         09:85:02:a8:3e:d7:65:f9:52:39:38:e0:8e:98:54:18:5b:5a:
         a4:db:08:5c:b6:34:f2:c8:3f:8d:54:c2:55:6e:0d:31:02:3e:
         3d:81:d9:48:9b:95:d8:98:de:d8:7f:02:11:1c:d6:89:d5:41:
         f9:52:72:42:ac:b9:ea:97:50:cb:15:29:d3:13:7f:44:7b:a5:
         34:c2:9f:19:75:60:4e:4c:4c:12:17:92:c8:a5:c4:7e:d7:4e:
         fd:bf:55:80:82:55:7c:ce:7a:23:8b:97:3e:95:89:36:4d:b1:
         43:5b:c2:78:51:c8:86:b8:84:ec:6a:a0:5c:9a:ae:72:aa:30:
         8b:69:a9:83:79:f5:1a:8d:93:02:c4:64:d8:fa:c0:01:f4:37:
         d5:45:0b:ad:12:0d:87:e1:29:a3:ee:b0:5c:f0:77:85:89:8d:
         72:e4:ba:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:27:09 2024 by rpki-client on console-ams.rpki-client.org