Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a04b5188-7d31-4ad3-8474-090b809c8408/f2d37b6c-01db-38f2-a7d6-c2e13f7c3ca3.roa
File:                     f2d37b6c-01db-38f2-a7d6-c2e13f7c3ca3.roa (raw, json)
Hash identifier:          NGqYQZDcXbGmI7XCFiPIW+FxBI7F5pwqc1rkNNkhyk0=
Subject key identifier:   EF:F8:FD:79:EF:DB:6A:0B:37:AB:74:0C:24:6D:87:B4:2E:35:C0:76
Certificate issuer:       /CN=a04b5188-7d31-4ad3-8474-090b809c8408
Certificate serial:       010D0C9F43285847FC7F978D03701F6AAA69CF00
Authority key identifier: B0:18:60:2E:01:71:DA:52:1B:53:D3:C1:02:21:0A:C9:43:3C:F8:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a04b5188-7d31-4ad3-8474-090b809c8408.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a04b5188-7d31-4ad3-8474-090b809c8408/f2d37b6c-01db-38f2-a7d6-c2e13f7c3ca3.roa
Signing time:             Sun 24 Nov 2024 14:00:39 +0000
ROA not before:           Sun 24 Nov 2024 14:00:39 +0000
ROA not after:            Sat 22 Feb 2025 14:00:39 +0000
asID:                     54235
IP address blocks:        2604:d980::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a04b5188-7d31-4ad3-8474-090b809c8408/a04b5188-7d31-4ad3-8474-090b809c8408.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a04b5188-7d31-4ad3-8474-090b809c8408/a04b5188-7d31-4ad3-8474-090b809c8408.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a04b5188-7d31-4ad3-8474-090b809c8408.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:fc:7f:97:8d:03:70:1f:6a:aa:69:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a04b5188-7d31-4ad3-8474-090b809c8408
        Validity
            Not Before: Nov 24 14:00:39 2024 GMT
            Not After : Feb 22 14:00:39 2025 GMT
        Subject: CN=c13de39c-eb56-4e48-8a7a-74f3afa4f9aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:6c:2b:80:9c:29:03:4a:7c:e8:39:8a:1e:85:
                    d9:cc:d9:9a:43:e6:e2:d0:3a:ef:b4:7e:4b:79:e6:
                    57:3d:1a:30:30:99:8d:41:de:04:03:8c:e5:71:2f:
                    98:2e:5b:e4:99:df:3d:10:d2:f9:56:9d:20:0f:ab:
                    bd:0c:ed:4e:4d:0d:a2:2d:46:d2:8f:83:ec:9f:f6:
                    db:77:1c:80:61:b5:ff:8e:17:ad:19:77:8a:98:fb:
                    5d:8b:3f:dd:07:7d:75:1e:d0:9a:ac:f7:d0:87:43:
                    95:1c:d2:16:a3:c1:70:00:1f:74:b6:34:4c:53:e1:
                    6f:88:3b:9c:f0:d7:ec:65:1c:ae:49:76:90:b9:ac:
                    4a:f6:cd:c9:4c:2a:4c:e2:d9:18:35:11:2c:dc:f5:
                    89:e7:3a:82:47:f1:fe:af:5f:45:e9:4d:01:b3:8f:
                    8d:27:2e:d2:4e:d5:ae:19:2e:a1:89:46:8e:4b:d1:
                    f3:8a:47:f5:78:70:4c:bf:f3:b4:d0:1e:77:16:70:
                    a4:a1:ad:c6:c7:83:44:ad:31:f9:39:e6:83:83:ba:
                    f3:c3:2c:4d:01:a0:bf:a8:5e:b4:9f:84:b9:0d:d1:
                    a8:a5:12:6c:b7:5d:1f:5b:78:7e:37:ea:6c:38:f1:
                    01:a8:1b:8a:1d:b1:83:5f:d7:c7:1d:67:e9:e7:c4:
                    11:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:F8:FD:79:EF:DB:6A:0B:37:AB:74:0C:24:6D:87:B4:2E:35:C0:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a04b5188-7d31-4ad3-8474-090b809c8408/f2d37b6c-01db-38f2-a7d6-c2e13f7c3ca3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a04b5188-7d31-4ad3-8474-090b809c8408/a04b5188-7d31-4ad3-8474-090b809c8408.crl

            X509v3 Authority Key Identifier:
                keyid:B0:18:60:2E:01:71:DA:52:1B:53:D3:C1:02:21:0A:C9:43:3C:F8:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a04b5188-7d31-4ad3-8474-090b809c8408.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:d980::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:b1:0b:d5:47:40:ae:01:04:61:6c:d0:6c:d0:a6:b9:98:1a:
         9c:f5:56:77:d7:da:18:fb:73:2f:31:00:91:6e:e7:55:bd:72:
         69:da:f4:e4:94:29:d2:03:63:51:de:8b:dc:b5:9f:1c:d4:25:
         4c:8a:0f:3e:2a:f6:d0:18:0c:30:82:03:94:7e:43:39:eb:a8:
         0e:e3:7f:f8:95:af:b8:1f:ae:17:f1:42:ec:7c:9d:86:40:b4:
         17:5b:dc:1c:f8:5e:9c:e6:90:21:9a:2e:50:15:bb:cc:d8:b9:
         76:e9:01:99:45:57:87:a6:08:c6:3c:7b:ba:06:bf:fe:d1:fa:
         99:d9:8e:a0:23:69:04:3f:eb:1e:28:d7:92:01:96:6c:fb:71:
         5c:6b:cb:88:e1:b2:b7:18:2f:2d:74:5a:a6:0c:af:ae:75:ff:
         e5:3c:7c:bb:14:cc:52:09:a6:e3:ce:8f:27:fe:78:66:49:72:
         b6:ef:79:17:10:64:41:64:ea:a7:64:c6:c7:3a:42:09:22:c0:
         61:9e:02:92:62:e4:97:29:ba:d7:1d:ce:78:ae:87:55:ee:4c:
         68:03:ad:2a:2d:28:15:f9:28:bd:11:ca:c3:21:be:82:71:f7:
         8d:f1:4b:52:c2:41:29:8d:d8:b1:95:3d:3b:8f:9e:df:e1:d7:
         98:ab:fe:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:30:58 2024 by rpki-client on console-fra.rpki-client.org