Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81aef195-0247-4104-9f46-f88e0dfd6ca9/bcc17495-d59c-36cb-ab2f-497dbe63a80e.roa
File:                     bcc17495-d59c-36cb-ab2f-497dbe63a80e.roa (raw, json)
Hash identifier:          S7ogKLDZFAd4nIpD7TNw1c8YdDdBCvYIgnLU3hJRj+M=
Subject key identifier:   7C:F2:D1:69:5F:D7:65:A5:97:49:EA:2B:AE:56:23:B6:C2:3C:EC:2A
Certificate issuer:       /CN=81aef195-0247-4104-9f46-f88e0dfd6ca9
Certificate serial:       010D0C9F432858474F4B768BE278C6AA4D87F2E0
Authority key identifier: 0E:84:CA:F5:7E:88:73:D1:27:C9:63:1E:5A:A1:37:56:0F:88:83:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81aef195-0247-4104-9f46-f88e0dfd6ca9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81aef195-0247-4104-9f46-f88e0dfd6ca9/bcc17495-d59c-36cb-ab2f-497dbe63a80e.roa
Signing time:             Mon 23 Sep 2024 13:00:40 +0000
ROA not before:           Mon 23 Sep 2024 13:00:40 +0000
ROA not after:            Sun 22 Dec 2024 14:00:40 +0000
asID:                     21858
IP address blocks:        2607:ffa8::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81aef195-0247-4104-9f46-f88e0dfd6ca9/81aef195-0247-4104-9f46-f88e0dfd6ca9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81aef195-0247-4104-9f46-f88e0dfd6ca9/81aef195-0247-4104-9f46-f88e0dfd6ca9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81aef195-0247-4104-9f46-f88e0dfd6ca9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4f:4b:76:8b:e2:78:c6:aa:4d:87:f2:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81aef195-0247-4104-9f46-f88e0dfd6ca9
        Validity
            Not Before: Sep 23 13:00:40 2024 GMT
            Not After : Dec 22 14:00:40 2024 GMT
        Subject: CN=5e9b94e6-9450-4630-8b3a-b75d994a5c7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2f:05:ea:67:58:a8:1c:55:16:55:69:bf:9c:
                    54:65:9b:02:28:b0:f9:5a:a8:89:90:12:e5:e4:ad:
                    5f:c7:39:47:ac:eb:4e:2d:05:97:cf:ca:98:a5:6a:
                    38:00:78:06:28:c7:05:49:a0:29:c5:54:81:ca:5b:
                    41:25:16:a7:a8:07:cc:59:77:f6:21:81:7e:24:8f:
                    c4:03:77:de:17:c1:2f:1a:de:05:9f:4e:be:4e:8b:
                    a8:37:2b:f3:e5:f0:d4:de:f3:af:ba:dd:ec:ca:21:
                    94:82:a2:59:bf:bb:44:4a:ce:b9:ec:8c:41:8a:eb:
                    53:a7:b8:87:60:23:a6:d0:8a:f2:42:81:d9:ab:be:
                    56:ec:54:32:ec:07:8b:5d:51:68:a0:96:52:de:6a:
                    98:6d:e4:93:66:ca:8c:8f:84:1d:fb:2b:1b:ed:5a:
                    79:28:e5:dd:d3:58:2c:4b:48:c0:7b:18:33:6d:b4:
                    39:48:e8:ab:32:82:7f:a7:c2:eb:1e:ee:a0:60:28:
                    43:58:80:99:0f:6c:68:99:32:1d:f5:f7:5f:59:70:
                    f9:da:e6:75:50:9b:98:5d:c5:c9:d6:a8:e5:78:36:
                    43:f8:90:5d:f1:7f:f0:e7:e2:7b:39:9a:e8:90:3f:
                    90:3e:22:cb:f3:e8:f1:41:49:7d:4e:a6:9c:6b:d4:
                    81:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:F2:D1:69:5F:D7:65:A5:97:49:EA:2B:AE:56:23:B6:C2:3C:EC:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81aef195-0247-4104-9f46-f88e0dfd6ca9/bcc17495-d59c-36cb-ab2f-497dbe63a80e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81aef195-0247-4104-9f46-f88e0dfd6ca9/81aef195-0247-4104-9f46-f88e0dfd6ca9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:84:CA:F5:7E:88:73:D1:27:C9:63:1E:5A:A1:37:56:0F:88:83:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81aef195-0247-4104-9f46-f88e0dfd6ca9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:ffa8::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:50:0c:65:c5:7e:88:8b:ce:35:52:47:46:02:18:91:6c:58:
         18:a9:be:e1:5c:d3:ff:b6:3d:0b:33:1c:61:83:c3:c3:4b:7e:
         ff:8c:7c:b4:0a:15:16:db:db:f6:35:27:03:69:b8:c4:de:b2:
         b3:fc:35:fd:a0:e1:e0:83:f0:3f:dd:86:0c:bb:3f:e0:ed:03:
         6a:a4:45:34:13:10:b7:cf:08:0c:93:3c:0d:d0:38:63:db:c7:
         e5:61:64:f8:26:3c:69:4f:2c:78:24:ea:5a:d7:98:af:dd:bd:
         c5:de:0e:d4:82:3c:ad:ed:ff:39:63:88:15:02:a9:f5:e0:fa:
         67:ee:62:bf:57:7d:17:a2:98:75:cb:e0:e7:23:24:95:64:c2:
         7f:3d:c8:cb:f8:a2:d3:a5:0f:af:4e:a2:b9:b1:6b:78:2f:d1:
         f5:c3:b5:10:b0:c8:93:c9:18:85:bb:99:33:28:69:3d:ee:c8:
         75:6e:73:ba:2f:56:a1:6d:70:d1:0e:3d:5a:d1:11:8c:6f:59:
         2a:74:cb:58:18:60:31:a9:1e:03:b9:ea:01:9c:8f:e3:6e:50:
         37:c8:08:89:3b:40:28:10:19:81:15:21:c0:09:db:76:0d:3c:
         14:2e:5f:ba:7b:02:15:74:35:eb:42:c0:92:2a:6f:a4:63:3c:
         2c:be:7c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:15:47 2024 by rpki-client on console-fra.rpki-client.org