Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/a8ef8ebe-92a7-3667-b275-a0fed342786e.roa
File:                     a8ef8ebe-92a7-3667-b275-a0fed342786e.roa (raw, json)
Hash identifier:          siFSUAKPTptradvAQJjb44NQRG/zmWQeS9b0kIKbRmw=
Subject key identifier:   CC:AB:6E:B1:C7:83:22:17:4F:62:76:EF:52:24:03:B9:6F:28:A7:33
Certificate issuer:       /CN=484f9c2c-238b-4d23-8e8b-ab2f5a0147c1
Certificate serial:       010D0C9F43285847A0414C717750757397040000
Authority key identifier: 26:F6:14:C7:B3:38:B8:E6:D8:99:68:03:01:DA:B2:3A:77:33:B3:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/a8ef8ebe-92a7-3667-b275-a0fed342786e.roa
Signing time:             Tue 22 Oct 2024 13:00:40 +0000
ROA not before:           Tue 22 Oct 2024 13:00:40 +0000
ROA not after:            Mon 20 Jan 2025 14:00:40 +0000
asID:                     32554
IP address blocks:        2607:6b40::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a0:41:4c:71:77:50:75:73:97:04:00:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=484f9c2c-238b-4d23-8e8b-ab2f5a0147c1
        Validity
            Not Before: Oct 22 13:00:40 2024 GMT
            Not After : Jan 20 14:00:40 2025 GMT
        Subject: CN=68b1d490-3b11-4814-9dda-9e2b8cb4b1ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b5:8c:0a:c7:58:56:32:67:0f:3f:72:86:b2:
                    02:60:61:09:fe:ff:c9:bf:f4:c4:13:18:33:f9:47:
                    2f:2f:47:9c:7d:24:e4:8a:4a:07:2d:0f:76:84:e0:
                    75:87:61:69:cb:6e:29:8e:1d:66:8c:97:ad:ae:27:
                    46:36:f4:0c:f3:c9:4e:b4:a2:46:e5:a0:e8:af:02:
                    59:76:c1:4d:cc:b7:f3:3d:13:be:0e:99:6e:a9:6f:
                    16:af:1c:fe:e5:8d:db:62:41:6d:4e:c1:4f:dc:d4:
                    dd:e3:53:65:b8:0e:3f:3f:e9:cd:48:62:e6:33:8a:
                    f2:1e:73:ae:5a:e6:1a:84:c5:dc:5b:47:93:01:3e:
                    45:a8:15:06:06:bd:df:52:f6:be:e9:90:0b:b8:a1:
                    c7:a8:a7:cc:10:fc:e4:e0:49:7d:74:fe:41:47:13:
                    e6:37:e0:ab:07:60:e1:64:35:7e:6b:dc:3c:de:5b:
                    98:55:da:a0:24:6f:0f:de:f0:57:4c:4c:f3:b7:c1:
                    2e:54:48:a3:12:9c:f3:67:16:24:f1:73:bf:f6:55:
                    80:d3:32:94:2d:98:99:1d:b1:85:76:d9:fe:63:86:
                    44:3e:4e:1a:12:a0:6d:47:29:5a:79:e0:b4:ec:e5:
                    58:29:36:ef:2e:74:e8:21:c8:43:78:99:6f:05:6d:
                    54:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:AB:6E:B1:C7:83:22:17:4F:62:76:EF:52:24:03:B9:6F:28:A7:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/a8ef8ebe-92a7-3667-b275-a0fed342786e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.crl

            X509v3 Authority Key Identifier:
                keyid:26:F6:14:C7:B3:38:B8:E6:D8:99:68:03:01:DA:B2:3A:77:33:B3:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6b40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:a2:dd:ec:a0:d4:bd:a6:3c:9b:0f:65:64:8c:15:e3:0d:80:
         b1:6b:c7:3b:ae:81:8e:8e:98:3e:28:f1:8d:7a:ec:7f:2d:51:
         da:15:a7:64:d0:32:b9:05:1a:02:30:7f:0f:ba:9c:44:a6:02:
         d6:4e:c5:fb:93:cf:44:33:19:8e:f7:ed:7b:1c:a1:e2:44:f8:
         cb:d4:66:ea:cb:df:ce:9b:42:d0:d4:22:0c:85:3d:66:db:f1:
         2a:bc:eb:71:3b:60:2f:51:2a:00:46:ac:c8:9f:86:cd:41:c3:
         87:31:18:34:68:58:37:44:30:af:ee:9b:27:c8:1a:78:b9:e7:
         8c:e7:00:37:33:58:e2:e2:19:5e:7e:26:b0:99:42:5c:7e:12:
         b3:51:ab:ad:af:8d:81:2c:59:bb:e9:54:3c:a1:1e:3f:38:25:
         aa:a7:75:81:d2:56:d8:a0:c4:70:81:31:22:4a:c7:a4:68:b2:
         08:e7:91:95:a7:b7:a1:75:b0:f2:f3:72:6e:94:08:16:a8:23:
         9e:b8:7a:ba:20:69:d8:b4:52:52:59:6c:94:b6:bc:55:3a:ac:
         59:b5:11:76:ff:e3:46:7a:66:dd:91:8c:43:31:51:21:b1:be:
         da:69:88:bf:a0:51:e9:a2:99:c7:5b:29:94:af:e2:55:8c:1c:
         10:0b:14:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:38:37 2024 by rpki-client on console-fra.rpki-client.org