Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a4781e6b-d849-4429-a725-c3a994ed0946/87ca8d01-c0cf-3d97-b06d-3239aa53887f.roa
File:                     87ca8d01-c0cf-3d97-b06d-3239aa53887f.roa (raw, json)
Hash identifier:          2OVlx+6eds5DggtqLim0kJxvtkzpsYuJhdmDGK0IwJQ=
Subject key identifier:   96:97:58:48:67:4D:A9:50:50:47:92:84:FB:61:9B:13:04:07:18:B3
Certificate issuer:       /CN=a4781e6b-d849-4429-a725-c3a994ed0946
Certificate serial:       010D0C9F432858472405D167D42BA8D7475C4C80
Authority key identifier: 73:F8:D7:38:7C:9E:57:F8:94:34:BE:4C:63:86:73:1E:30:AD:B1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a4781e6b-d849-4429-a725-c3a994ed0946.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a4781e6b-d849-4429-a725-c3a994ed0946/87ca8d01-c0cf-3d97-b06d-3239aa53887f.roa
Signing time:             Sun 08 Sep 2024 01:00:31 +0000
ROA not before:           Sun 08 Sep 2024 01:00:31 +0000
ROA not after:            Sat 07 Dec 2024 02:00:31 +0000
asID:                     40335
IP address blocks:        2607:2400::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a4781e6b-d849-4429-a725-c3a994ed0946/a4781e6b-d849-4429-a725-c3a994ed0946.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a4781e6b-d849-4429-a725-c3a994ed0946/a4781e6b-d849-4429-a725-c3a994ed0946.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a4781e6b-d849-4429-a725-c3a994ed0946.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:24:05:d1:67:d4:2b:a8:d7:47:5c:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4781e6b-d849-4429-a725-c3a994ed0946
        Validity
            Not Before: Sep  8 01:00:31 2024 GMT
            Not After : Dec  7 02:00:31 2024 GMT
        Subject: CN=c7d292d4-06c1-4725-bea2-a3965f734e2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9b:3e:00:b8:cc:02:8b:13:5c:34:df:47:5a:
                    fd:81:ac:21:12:d7:1d:13:a1:e0:9d:e4:eb:62:35:
                    50:98:f4:67:6c:20:2a:55:d7:89:b4:da:55:e4:7a:
                    2f:b0:d7:cf:00:ad:48:c5:75:cb:80:81:5b:d0:2f:
                    8f:f5:58:4a:b1:e4:7d:c5:3b:89:75:1f:d2:44:2c:
                    9e:80:2e:38:4f:12:34:db:83:d7:f8:ed:58:01:72:
                    30:aa:51:d9:d6:86:7d:1a:2f:6a:13:ae:c0:84:0b:
                    b2:80:d7:9d:95:a0:08:a0:0c:d7:ac:76:b5:8c:e5:
                    cd:5f:73:c0:fe:41:3e:09:52:92:a5:19:6c:7a:d5:
                    06:27:76:a6:d8:9b:28:9c:cc:f0:cd:96:65:48:e2:
                    56:1a:89:9f:e3:91:62:00:b1:6d:fa:0f:70:ae:48:
                    67:ac:bb:fa:67:38:a1:cf:3d:e4:a4:4d:d8:ab:18:
                    dd:a6:17:0b:3d:51:12:4f:ce:6b:33:8f:72:1a:5f:
                    b8:85:fd:86:0e:62:dd:9b:24:57:aa:59:89:e1:05:
                    09:0d:55:5c:d4:69:48:18:f4:11:61:85:66:51:66:
                    97:00:60:5a:94:09:57:66:7e:56:97:0c:32:cc:89:
                    47:e2:b8:1e:7d:4c:89:2c:26:70:37:b4:bc:f4:e8:
                    c2:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:97:58:48:67:4D:A9:50:50:47:92:84:FB:61:9B:13:04:07:18:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a4781e6b-d849-4429-a725-c3a994ed0946/87ca8d01-c0cf-3d97-b06d-3239aa53887f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a4781e6b-d849-4429-a725-c3a994ed0946/a4781e6b-d849-4429-a725-c3a994ed0946.crl

            X509v3 Authority Key Identifier:
                keyid:73:F8:D7:38:7C:9E:57:F8:94:34:BE:4C:63:86:73:1E:30:AD:B1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a4781e6b-d849-4429-a725-c3a994ed0946.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:2400::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:77:ec:69:0e:ba:82:91:83:7e:b4:a7:92:80:57:2f:28:64:
         30:1f:26:96:8f:70:01:d0:1f:b8:fa:e4:f9:64:0f:72:52:bc:
         25:f7:3a:38:bf:35:0d:82:23:b4:66:f7:20:f0:59:b4:c3:4c:
         a6:84:6d:da:a5:9a:30:4e:f7:eb:65:6e:2f:fe:83:0f:81:16:
         b3:c8:99:d1:3f:47:e7:43:82:db:0f:c1:a1:af:c9:5c:98:6e:
         b6:39:d2:e1:46:aa:b8:d9:09:97:36:1f:b1:16:c4:09:9e:c9:
         d4:33:f7:05:76:22:08:6c:6b:22:0a:f5:5f:1a:69:0c:cb:2e:
         fc:a1:d6:eb:ad:98:84:66:75:cb:96:5f:eb:17:4a:e7:b9:72:
         ac:75:e5:ef:8f:99:e3:20:ac:41:d9:ae:34:47:0a:3b:51:3e:
         ec:de:20:8a:ec:24:a7:b3:60:fe:6a:b6:b3:4a:4f:a2:59:36:
         d5:e7:03:73:3c:5e:2a:88:eb:c9:59:ce:00:41:b0:fd:09:49:
         eb:8f:4f:14:54:e6:b1:9e:57:5e:50:ec:6f:ce:ac:74:13:39:
         ba:bf:20:d5:6b:f9:1b:e7:19:54:08:82:99:c2:32:da:ad:76:
         c6:de:76:5b:d2:c8:a3:a4:af:e2:b8:41:56:99:cd:f1:ec:e5:
         6d:8c:5a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:38:42 2024 by rpki-client on console-fra.rpki-client.org