Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/b8f00c80-28df-3bec-8197-b1c1cd901f79.roa
File:                     b8f00c80-28df-3bec-8197-b1c1cd901f79.roa (raw, json)
Hash identifier:          ETGEQYySbtekUB6kO4q8tHRe3MtEIqsvkzorsKBu1jI=
Subject key identifier:   BF:31:32:52:D0:8A:DA:8D:EE:8E:9D:87:53:65:E2:5F:0C:88:B5:E1
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F43285847362B646DC4D019F458FF1780
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/b8f00c80-28df-3bec-8197-b1c1cd901f79.roa
Signing time:             Sat 14 Sep 2024 13:00:41 +0000
ROA not before:           Sat 14 Sep 2024 13:00:41 +0000
ROA not after:            Fri 13 Dec 2024 14:00:41 +0000
asID:                     136988
IP address blocks:        2607:f5b5:2::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:36:2b:64:6d:c4:d0:19:f4:58:ff:17:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Sep 14 13:00:41 2024 GMT
            Not After : Dec 13 14:00:41 2024 GMT
        Subject: CN=5c854b89-7ebe-4535-8296-bea79740ee70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:2e:7e:f7:56:11:1a:04:98:7b:f4:e2:aa:30:
                    a5:8c:66:b6:31:bc:4c:62:32:d5:49:c0:71:cb:41:
                    c0:00:ad:ba:f8:51:6f:c1:a9:55:0a:be:27:ef:8c:
                    ee:c0:95:7a:a9:3a:f8:77:32:0d:b0:35:36:39:fe:
                    a3:27:d9:d2:a2:45:70:c7:97:2b:4d:cd:36:5b:8b:
                    3e:f9:88:16:6d:44:cc:1b:8d:45:ce:eb:e2:0c:57:
                    f1:5b:e5:ce:cd:62:15:c4:b9:c4:0c:3e:22:47:6c:
                    b4:63:7a:b8:7b:ff:7b:2a:35:b4:af:e9:67:2f:bc:
                    ba:e2:10:61:d3:bd:b0:c7:c7:4c:ec:df:e3:3d:e6:
                    9e:d6:d4:9b:67:a6:eb:be:77:96:f2:96:51:b3:80:
                    a3:13:6d:9c:ec:16:97:92:e0:d9:be:39:86:61:9a:
                    99:70:e7:59:9c:63:4f:6c:ac:c5:cf:18:06:2c:b5:
                    79:a6:41:54:6c:3a:3e:02:74:ac:f9:58:ce:5d:e6:
                    97:ec:4a:0b:ba:4c:24:eb:4b:00:e7:2b:26:cb:bf:
                    83:20:e2:7c:7b:a4:0e:99:d0:fa:44:da:bc:46:c7:
                    fc:f1:cc:ca:52:15:c1:f6:cd:75:a1:e3:95:22:ab:
                    7a:d8:69:b9:96:28:dc:66:09:16:f7:cb:f2:32:b7:
                    da:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:31:32:52:D0:8A:DA:8D:EE:8E:9D:87:53:65:E2:5F:0C:88:B5:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/b8f00c80-28df-3bec-8197-b1c1cd901f79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f5b5:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:94:00:1b:37:9c:01:77:e2:f1:f1:a3:b6:ec:10:e3:df:98:
         36:f2:60:de:58:2f:30:74:2d:a0:75:b7:8e:5d:cf:2b:50:eb:
         76:32:3c:aa:0d:2c:f1:4e:05:1c:51:68:d8:43:99:c0:d7:4c:
         85:d5:c1:9c:1b:87:12:37:cb:48:f2:c4:8c:14:65:d7:e8:74:
         c2:7e:c9:09:d9:55:c1:0f:a0:bc:10:04:fe:ca:8d:41:7e:f7:
         0b:34:d1:02:89:a1:54:53:7c:be:7d:f0:4c:0c:b5:d9:ef:0e:
         85:86:23:2a:a3:b9:d7:8a:da:4d:4f:7a:e7:30:0c:49:8a:fc:
         32:68:be:03:2a:14:e0:8f:eb:07:aa:ae:4f:66:9b:13:e9:94:
         e0:2d:e0:29:11:32:78:c7:6b:fc:78:1e:69:73:3c:0f:fc:81:
         b2:36:77:21:55:aa:ee:55:a2:86:52:8f:32:76:3e:a4:9f:8f:
         cf:23:d8:36:f4:08:52:e5:47:d7:89:66:ba:cb:a4:9d:9a:4d:
         67:a5:ea:76:4f:08:04:04:c9:83:b8:53:70:32:db:66:79:90:
         4a:a1:9c:7b:53:97:0f:04:db:67:90:47:ff:5c:d0:c0:6a:97:
         a8:6e:a1:8c:fb:cc:90:2f:16:01:71:d3:99:f5:f2:03:11:7a:
         be:e4:fe:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:30:55 2024 by rpki-client on console-fra.rpki-client.org