Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/048a3109-db11-313b-a682-3462d66d1f6a.roa
File:                     048a3109-db11-313b-a682-3462d66d1f6a.roa (raw, json)
Hash identifier:          yLrZ7SibUClDrg9lW4g6y2jqY+/Z9rhNhStryAvhMws=
Subject key identifier:   B2:22:C0:6C:AA:36:2D:DE:27:53:9C:57:96:B0:B7:75:2F:40:25:BE
Certificate issuer:       /CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
Certificate serial:       010D0C9F432858479946732EA4293B1CA0195200
Authority key identifier: DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/048a3109-db11-313b-a682-3462d66d1f6a.roa
Signing time:             Sun 20 Oct 2024 01:00:30 +0000
ROA not before:           Sun 20 Oct 2024 01:00:30 +0000
ROA not after:            Sat 18 Jan 2025 02:00:30 +0000
asID:                     271
IP address blocks:        2607:f8f0:204::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:99:46:73:2e:a4:29:3b:1c:a0:19:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
        Validity
            Not Before: Oct 20 01:00:30 2024 GMT
            Not After : Jan 18 02:00:30 2025 GMT
        Subject: CN=7090450f-7e8d-4ca9-b15d-d00bf122a363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4a:a2:80:2d:52:e2:e9:4b:7d:d0:34:52:dd:
                    41:4c:38:b8:47:76:ac:0d:54:f1:cd:87:2d:06:69:
                    4b:5e:13:f0:4d:5c:ba:1e:66:aa:ff:94:1e:36:7e:
                    ae:2a:e1:4b:77:79:24:4c:e3:85:8d:05:8d:a1:c2:
                    e2:d4:ea:7d:76:8d:4d:a9:8c:bd:2a:28:01:25:9c:
                    dc:72:9e:b9:e9:49:6c:d2:65:3e:fc:c7:96:0d:7e:
                    e3:a3:41:92:58:bc:8d:51:30:aa:0f:a1:19:a0:c6:
                    87:6b:a2:2b:04:a3:3b:fb:ab:1a:d4:19:df:18:14:
                    d2:f3:c5:39:93:42:67:b9:91:5e:96:e0:7d:3a:41:
                    33:9f:0c:e1:85:8f:a6:b9:c2:39:a7:26:67:65:24:
                    15:4b:f5:9d:e6:6f:bc:65:8e:0b:d5:aa:98:90:83:
                    d2:28:0d:f9:de:26:5e:cf:ad:c0:7c:d3:d8:3a:8b:
                    b7:bf:93:8d:56:8a:d1:f3:10:20:9d:bd:05:3e:b0:
                    dd:c4:ae:6a:0b:98:89:f9:3a:e1:e1:2b:9c:e8:50:
                    55:a0:2a:08:3e:ce:fc:9f:25:a8:09:02:33:11:46:
                    fd:2a:e2:5f:2b:8e:c2:50:b3:ec:9b:18:86:3d:ed:
                    bd:23:de:03:ef:21:2b:2e:3f:e1:36:53:7b:10:76:
                    bf:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:22:C0:6C:AA:36:2D:DE:27:53:9C:57:96:B0:B7:75:2F:40:25:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/048a3109-db11-313b-a682-3462d66d1f6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl

            X509v3 Authority Key Identifier:
                keyid:DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f8f0:204::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:3f:39:b5:25:55:64:65:1c:b6:f0:ca:30:aa:3b:3e:e5:70:
         20:90:73:74:9f:5a:5d:08:1f:08:49:57:71:74:4d:57:f1:f6:
         5d:ae:da:ec:71:7f:c7:ea:3a:53:c2:aa:ab:00:ab:02:19:9c:
         02:5e:af:d2:c7:de:bc:30:9a:91:9a:be:3d:ec:1e:33:a7:69:
         ce:2e:29:ac:d3:9b:ff:63:dc:cc:73:14:08:c6:fd:96:21:33:
         2f:27:ec:41:fe:ac:4b:1e:24:1d:c5:c1:32:fc:83:d8:87:d4:
         f1:41:eb:b4:4c:71:a7:08:47:30:6e:27:81:36:a5:64:34:dc:
         ae:b0:b8:84:6d:61:6e:d6:37:53:11:81:ac:60:e2:71:18:4b:
         fa:d3:56:d9:75:16:79:88:cd:b6:1a:53:46:c9:54:22:9f:6a:
         79:6b:6e:e1:49:52:d5:7c:4b:bf:91:1d:1e:f2:5a:26:da:52:
         cb:51:10:cb:6f:4a:11:6f:84:54:3c:16:dd:d2:0d:da:1f:1e:
         b4:12:2a:9d:1a:29:93:fa:b5:29:97:0f:c3:77:f9:21:17:d4:
         94:ca:33:62:4d:27:ba:b2:5a:96:ab:19:f7:ca:43:16:8a:3a:
         84:89:26:11:f5:20:34:38:a5:66:3b:aa:1f:d4:28:5a:2b:b9:
         28:d5:4b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:49:14 2024 by rpki-client on console-ams.rpki-client.org