Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/bac625e9-9cde-3855-93cf-42285eddadcf.roa
File:                     bac625e9-9cde-3855-93cf-42285eddadcf.roa (raw, json)
Hash identifier:          qHpoYMoyvw7I4rvej/SRa06+3eaikVzbisb2oVIcTrI=
Subject key identifier:   66:CF:A5:1D:94:E3:A3:C7:65:2D:D7:46:EE:93:23:FB:86:13:F5:DE
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F43285847362B661EE9D72B523E524140
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/bac625e9-9cde-3855-93cf-42285eddadcf.roa
Signing time:             Sat 14 Sep 2024 13:00:41 +0000
ROA not before:           Sat 14 Sep 2024 13:00:41 +0000
ROA not after:            Fri 13 Dec 2024 14:00:41 +0000
asID:                     28753
IP address blocks:        2607:f5b5::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:36:2b:66:1e:e9:d7:2b:52:3e:52:41:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Sep 14 13:00:41 2024 GMT
            Not After : Dec 13 14:00:41 2024 GMT
        Subject: CN=ee202967-9ea2-4922-93a8-01712e6b4507
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d3:18:2e:65:f8:a3:8b:16:3b:0b:e3:ec:cf:
                    c3:51:9e:ce:5e:ae:de:2e:36:c9:91:95:fb:ad:f8:
                    32:b9:22:ef:72:26:e1:e4:7f:f3:aa:a5:df:be:bd:
                    32:e9:cd:aa:aa:23:8b:a8:32:5c:bc:79:42:8e:c0:
                    ad:10:e1:32:cb:a6:ee:1c:15:77:c9:ee:e8:47:61:
                    a1:c4:cb:b1:c4:eb:ba:41:b7:25:bd:80:10:19:f9:
                    6c:2b:65:01:51:5a:84:1c:91:18:64:4f:28:91:4d:
                    15:8a:3e:14:09:63:22:a5:be:b7:e9:98:33:65:fe:
                    af:63:0f:fd:4c:85:c6:87:91:fc:c8:57:67:87:e5:
                    20:c9:ba:7a:4c:4e:fd:b3:80:64:8e:5f:45:bf:7d:
                    a7:c8:0e:b4:ee:8b:3d:b1:c8:c1:b3:8d:ad:86:85:
                    bb:7b:32:46:58:13:b5:25:0d:3b:eb:e8:8b:20:58:
                    47:5f:b5:4a:fc:6b:2d:04:fb:e1:8e:a8:07:d1:52:
                    a5:15:61:4a:56:89:a3:dd:2c:76:ae:44:59:c3:34:
                    08:db:c2:c2:09:73:00:3a:ef:75:4c:78:23:e1:62:
                    91:4a:a8:57:e4:63:7b:53:1b:5b:18:63:47:cb:64:
                    df:86:24:98:cb:aa:f7:75:93:57:51:26:9f:d2:4d:
                    29:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:CF:A5:1D:94:E3:A3:C7:65:2D:D7:46:EE:93:23:FB:86:13:F5:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/bac625e9-9cde-3855-93cf-42285eddadcf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f5b5::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:8c:f5:ac:bf:2a:fa:82:87:6a:ab:55:7d:ce:0e:da:8f:fc:
         67:e0:5a:2b:c1:c1:7f:19:4f:14:30:54:ad:c3:9a:35:0f:35:
         c5:b4:dd:b2:79:6b:29:cd:3f:d6:ad:c0:a6:85:f0:33:a0:e8:
         80:23:3f:9b:d5:59:fb:67:81:53:78:83:6f:d9:34:d1:22:a6:
         8e:55:f7:3c:0f:c1:bc:00:b7:88:f1:a8:d8:53:0f:d2:94:87:
         7b:10:02:bc:5c:fa:02:38:19:1a:3a:60:89:4a:2b:b0:b1:47:
         a1:2b:b4:cb:14:78:90:05:8a:27:b6:8c:02:95:47:9e:22:e8:
         72:ce:6c:c2:68:e5:86:6d:0a:0d:5f:4a:72:18:22:5e:86:90:
         d1:a2:c5:f4:4d:50:8e:e1:d4:e9:b4:7a:90:c0:0f:97:ee:1f:
         cb:7c:66:1b:ff:fa:d0:ac:77:ad:58:9b:10:52:cc:ae:5d:32:
         ef:67:97:6e:25:82:4c:24:a8:e7:6d:60:a5:46:95:10:bf:89:
         0e:6d:2e:05:0a:59:ce:c7:50:94:45:15:a4:41:e0:ed:3f:f6:
         a0:8e:5b:13:1d:a6:0f:6a:22:c7:6e:8f:0e:d9:7d:0a:33:74:
         87:da:a9:f5:6b:1a:7c:09:29:9b:a9:c1:83:63:46:24:f6:74:
         ba:81:8b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:56:42 2024 by rpki-client on console-ams.rpki-client.org