Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/d12e5708-1aaf-3a48-be6d-c36976cf0409.roa
File:                     d12e5708-1aaf-3a48-be6d-c36976cf0409.roa (raw, json)
Hash identifier:          +k5S/xrp/UC/7fVp4+BQYMuWy3HSaCO3yeEwnyKDz04=
Subject key identifier:   E0:0C:8F:18:7F:73:1F:C8:4A:12:D2:88:77:AB:AF:42:C3:E0:CC:1F
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F43285847362B640045DEF20EE0AFF440
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/d12e5708-1aaf-3a48-be6d-c36976cf0409.roa
Signing time:             Sat 14 Sep 2024 13:00:41 +0000
ROA not before:           Sat 14 Sep 2024 13:00:41 +0000
ROA not after:            Fri 13 Dec 2024 14:00:41 +0000
asID:                     396362
IP address blocks:        2607:f5b5:2::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:36:2b:64:00:45:de:f2:0e:e0:af:f4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Sep 14 13:00:41 2024 GMT
            Not After : Dec 13 14:00:41 2024 GMT
        Subject: CN=eae79b8b-9d6c-48ac-80d7-a8fc0674465a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b0:d8:4c:21:84:08:70:af:37:4f:a5:c8:ec:
                    b8:f2:d0:dd:0c:0e:62:dc:ed:ac:d3:b8:83:e6:0a:
                    46:31:8c:9a:9f:51:91:8c:d3:c2:f4:eb:b5:97:87:
                    36:44:67:9b:fb:74:1b:df:24:30:19:97:37:62:1a:
                    f7:b7:68:75:b7:8f:d2:2f:33:c3:fe:cd:bb:ab:53:
                    88:39:af:d7:16:53:63:47:3a:45:a5:3a:53:fb:f6:
                    3a:63:2c:38:eb:48:57:c1:cb:13:ae:9d:7c:5c:fa:
                    0f:ff:ee:32:e0:cf:88:61:41:57:dd:98:c2:e9:20:
                    02:97:2c:f5:39:82:f9:db:29:63:c4:8a:d0:bf:4a:
                    b8:d9:bd:0d:86:a2:3f:ab:16:e7:76:ed:6c:2c:6b:
                    6f:26:bb:36:f2:f1:d9:81:6f:bc:94:6d:9d:4b:b2:
                    37:9b:81:fc:34:b3:25:8f:3f:bc:f9:f7:bf:72:8b:
                    bc:65:bd:d4:1d:40:62:c0:cf:e1:f2:20:59:cd:d3:
                    6b:8b:9e:cf:f7:d7:42:58:71:ac:ad:fb:8e:e1:ef:
                    03:23:aa:66:85:fe:83:7e:22:04:6f:fd:bc:7d:8c:
                    00:63:da:92:4c:fb:25:dd:01:a8:ed:20:d4:1d:c5:
                    a1:60:a6:e3:0c:30:62:53:45:39:be:ea:aa:56:5b:
                    12:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:0C:8F:18:7F:73:1F:C8:4A:12:D2:88:77:AB:AF:42:C3:E0:CC:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/d12e5708-1aaf-3a48-be6d-c36976cf0409.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f5b5:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:d8:97:09:9b:7a:3c:74:03:92:d1:58:56:3e:3d:91:e7:f4:
         df:29:46:8a:fe:d3:94:c7:1c:87:11:e1:3a:7d:21:b8:04:f6:
         9a:d7:6b:ef:4b:dd:5f:59:c7:ff:b7:48:52:b3:9f:97:70:a4:
         04:9d:29:53:91:5a:78:c8:85:38:ff:a1:9f:e6:69:22:02:3e:
         cd:ad:dc:b7:68:a5:ea:07:5f:49:e7:20:cd:43:7a:fb:52:82:
         d3:1f:26:7f:f3:43:e8:bf:c6:87:cb:26:fe:9a:86:28:2e:98:
         b0:2d:3a:03:2a:2b:ab:1e:8e:a1:86:bc:6d:47:e5:81:7a:93:
         69:1f:99:78:75:49:2b:1a:55:41:6e:22:9a:3b:1f:3d:95:f0:
         c5:1d:a9:01:be:c2:07:89:0f:d0:8e:ad:f2:01:97:8e:4b:76:
         57:77:80:66:3d:33:78:d9:94:c9:17:73:e5:c9:d5:85:d1:d3:
         bc:8f:4f:2c:bc:22:5a:21:92:cd:44:fe:f0:a3:be:f1:61:3a:
         64:b6:f3:e6:97:9a:1c:45:bd:22:22:a0:61:b1:80:34:0c:4b:
         48:69:11:3d:cf:0f:85:1a:1b:67:63:cc:5d:25:83:19:ee:84:
         45:07:55:7c:91:92:d4:60:71:15:81:43:95:01:6b:a0:d9:41:
         59:75:b8:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:30:55 2024 by rpki-client on console-fra.rpki-client.org