Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/e645c012-c626-34db-bc9b-1cc63aba011f.roa
File:                     e645c012-c626-34db-bc9b-1cc63aba011f.roa (raw, json)
Hash identifier:          udVwEeGkBO2CPY0rcCJWKIHmEbRSQZanOaTyVVoafCo=
Subject key identifier:   73:F1:80:2F:55:E8:3C:64:8D:45:82:0F:0B:62:2B:F9:55:17:5B:AE
Certificate issuer:       /CN=b6f28d10-5739-4e40-a446-935c60d79169
Certificate serial:       010D0C9F43285847AF9BEB8C2908D95A90FEDDC0
Authority key identifier: E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/e645c012-c626-34db-bc9b-1cc63aba011f.roa
Signing time:             Mon 28 Oct 2024 01:00:32 +0000
ROA not before:           Mon 28 Oct 2024 01:00:32 +0000
ROA not after:            Sun 26 Jan 2025 02:00:32 +0000
asID:                     16532
IP address blocks:        2605:2a00::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:af:9b:eb:8c:29:08:d9:5a:90:fe:dd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6f28d10-5739-4e40-a446-935c60d79169
        Validity
            Not Before: Oct 28 01:00:32 2024 GMT
            Not After : Jan 26 02:00:32 2025 GMT
        Subject: CN=7a1f44a5-3bba-4654-a20b-aeab7c4a2be9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:14:8f:46:05:08:6b:9e:60:26:62:d5:ea:20:
                    a0:50:1c:04:84:c6:6c:91:b1:c0:fc:01:99:ed:fc:
                    93:3b:83:32:0b:bf:3c:4f:a0:a3:7a:e0:bc:d4:3c:
                    a0:7d:2e:2a:ef:80:c3:eb:12:55:84:1f:7a:0e:34:
                    e5:67:bf:53:cc:41:6d:57:6d:3f:7c:21:66:61:6d:
                    e3:2a:97:73:b4:c7:ba:e7:0d:3f:2e:43:1c:7f:78:
                    90:20:f4:18:33:90:dd:7b:3e:a1:c9:c6:68:27:f7:
                    3d:4b:b7:c3:d9:47:9c:01:e8:16:4a:50:f5:ca:49:
                    31:79:00:cb:e4:8e:43:c2:79:2c:a6:27:1d:60:93:
                    43:24:9a:3b:f4:bf:73:cc:a9:57:9d:67:63:d5:a9:
                    d1:86:48:7e:a4:49:d2:55:a3:1d:36:2b:d9:4a:2a:
                    b2:95:70:dc:ca:63:03:d0:90:ea:44:71:98:2e:f2:
                    b7:7b:40:16:9b:45:cb:a1:d9:4f:70:68:50:89:01:
                    06:39:94:eb:c3:4e:65:fb:89:c2:5b:49:34:6c:0a:
                    17:9c:e4:68:3f:f4:8d:11:c8:2a:de:cb:dd:60:80:
                    ed:26:f8:51:fd:ad:ec:e9:2b:0d:54:f7:09:36:3c:
                    b3:56:a2:20:d8:fb:b2:3f:55:ae:1f:0f:23:8c:f1:
                    7d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:F1:80:2F:55:E8:3C:64:8D:45:82:0F:0B:62:2B:F9:55:17:5B:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/e645c012-c626-34db-bc9b-1cc63aba011f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl

            X509v3 Authority Key Identifier:
                keyid:E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:2a00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:cc:9d:a2:4b:71:16:59:8d:40:f2:ad:38:55:7f:8a:50:cb:
         56:97:29:dc:c8:a1:00:18:57:3d:d4:20:46:df:48:eb:d9:26:
         e7:ce:db:f1:d9:13:78:77:03:9b:fa:c3:eb:e7:87:38:21:6f:
         bb:3b:2b:01:05:0f:44:92:a2:fb:d5:94:a6:77:c1:cc:32:dd:
         8a:20:01:d4:fd:38:1a:f3:cf:c4:83:3a:b5:ef:66:f8:2a:c0:
         12:cb:8f:b8:0c:95:b0:ac:52:b5:f7:b7:9e:58:bc:77:eb:11:
         fc:0b:93:0c:23:54:c7:13:44:23:99:7b:73:63:da:84:8d:0f:
         b1:68:01:23:bb:16:f2:fd:4e:e0:16:47:74:43:05:b1:ad:1b:
         82:9b:3c:f1:88:c1:7d:64:fa:c5:1f:3f:25:0d:89:6a:62:63:
         c2:9d:29:60:87:9c:b1:d6:1e:2b:a7:f6:a8:a8:57:ea:37:4d:
         39:5a:40:b5:af:24:1e:9a:b1:6a:62:88:41:ea:d1:19:12:f7:
         90:65:1c:d7:ac:4a:ee:b3:01:b3:f3:d9:fa:87:2b:b8:e8:a5:
         91:f7:eb:25:ca:37:6d:1d:56:69:41:3c:72:d6:75:60:04:04:
         24:61:34:8d:73:68:62:3d:63:82:cc:70:3b:a1:1c:09:a2:c5:
         f8:b0:1e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:56:43 2024 by rpki-client on console-ams.rpki-client.org