Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/f16b790d-4b87-32cd-9555-4066086795a9.roa
File:                     f16b790d-4b87-32cd-9555-4066086795a9.roa (raw, json)
Hash identifier:          Nj2pMcQnMLC/SBwZerXh8nJ9Vm6LhLiCeUcia85+jsc=
Subject key identifier:   30:1A:31:50:6F:12:AC:C5:15:9D:66:AA:A0:EC:98:63:AA:0B:DD:18
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F43285847362B64896E960B57C32FFA00
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/f16b790d-4b87-32cd-9555-4066086795a9.roa
Signing time:             Sat 14 Sep 2024 13:00:41 +0000
ROA not before:           Sat 14 Sep 2024 13:00:41 +0000
ROA not after:            Fri 13 Dec 2024 14:00:41 +0000
asID:                     395954
IP address blocks:        2607:f5b5:2::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:36:2b:64:89:6e:96:0b:57:c3:2f:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Sep 14 13:00:41 2024 GMT
            Not After : Dec 13 14:00:41 2024 GMT
        Subject: CN=9c853d58-1f46-44b0-a403-c96cd0b8a381
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a8:f7:af:ff:25:46:06:a2:29:bc:4c:ff:35:
                    34:58:99:41:1a:a2:e0:51:b1:1d:95:58:b1:1c:4f:
                    f5:12:fa:3b:19:49:1d:4d:a1:82:38:51:95:5f:9b:
                    61:a9:e6:31:24:bd:c1:38:80:45:1c:d2:64:23:a8:
                    81:5d:5b:7a:9e:4a:d5:d5:00:da:c6:d9:d0:c3:fe:
                    f9:d4:73:b3:0e:8d:36:56:95:87:c9:ab:aa:d4:26:
                    3e:c1:0b:3a:e3:e5:0c:92:bd:49:13:73:ee:d1:e3:
                    80:0b:bf:1b:e7:e7:eb:3e:c6:77:30:cf:14:6f:01:
                    67:b1:45:41:5b:ef:ca:3a:0f:df:56:10:a8:ba:39:
                    7b:67:46:b1:c8:c0:9f:84:8d:b0:cd:5d:df:90:2c:
                    10:c9:11:e0:47:a2:26:59:36:25:7c:7d:d0:e6:c6:
                    9d:ed:96:93:63:d6:5d:70:39:c5:6b:80:fa:53:b2:
                    7d:bd:45:bc:45:be:2f:69:a0:33:60:bd:de:c3:7b:
                    da:02:d3:db:54:25:47:55:89:52:ce:6f:59:d6:0a:
                    c7:53:f4:01:7e:07:1f:f5:1d:f8:f9:ba:1b:80:46:
                    85:f0:86:fb:b1:36:46:6c:e7:cf:e6:80:a9:14:b9:
                    14:93:b1:da:9b:c0:d4:9a:b0:30:fb:76:6a:dd:56:
                    86:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:1A:31:50:6F:12:AC:C5:15:9D:66:AA:A0:EC:98:63:AA:0B:DD:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/f16b790d-4b87-32cd-9555-4066086795a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f5b5:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:f5:71:5e:42:a2:db:b0:39:bf:da:23:c3:9d:8c:21:0d:ab:
         a7:08:ca:1b:ea:f4:ed:f2:11:a7:cc:7c:5a:82:b7:4a:d0:aa:
         c2:a7:d4:45:eb:13:af:79:19:15:da:07:b5:87:1c:8d:51:1b:
         09:f2:d9:26:3a:60:89:64:04:5c:ec:b8:f1:9d:a9:8b:0f:c3:
         6c:8e:47:f2:e7:31:38:25:ad:d9:06:25:c2:1f:b2:87:51:3b:
         3e:60:24:60:8d:08:62:57:a5:89:cb:3b:9e:2b:6e:5e:0e:73:
         77:37:79:30:fc:a4:81:86:fe:f4:43:c4:2b:04:8a:9e:a1:5a:
         70:c5:97:6a:c5:92:2e:d8:7f:5b:4c:a8:fe:56:03:0f:87:46:
         26:9f:35:b3:4d:74:f7:db:f4:c2:d8:13:4e:1f:3a:e0:b8:10:
         b5:3a:4e:4c:bd:b6:13:fa:da:bb:91:db:08:32:f6:bd:5a:5a:
         09:3d:c9:85:1c:82:8a:dd:e8:8a:11:35:50:76:45:80:61:e8:
         93:7a:7a:48:c7:79:db:b7:52:df:f9:8a:cf:c3:58:f7:66:da:
         f6:a3:f7:6a:ca:f3:30:5b:52:1c:e3:39:38:81:f5:8b:61:34:
         d2:93:2e:1d:93:dc:6b:d2:91:a0:2e:55:5b:a6:3e:05:27:6a:
         45:23:1f:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:30:56 2024 by rpki-client on console-fra.rpki-client.org