Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/1c2f5541-75b2-3321-97f2-a972858e185b.roa
File:                     1c2f5541-75b2-3321-97f2-a972858e185b.roa (raw, json)
Hash identifier:          B2OEzU/6guW8vVHuFy8gyw1Fu4lN4LiP2vthx0qUN4o=
Subject key identifier:   0F:44:B8:61:1B:F7:FB:FE:BD:97:1B:12:F3:08:3E:A8:49:48:55:0A
Certificate issuer:       /CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
Certificate serial:       010D0C9F43285847CD09F0A7FFEF4D6F3E002980
Authority key identifier: DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/1c2f5541-75b2-3321-97f2-a972858e185b.roa
Signing time:             Thu 07 Nov 2024 14:00:39 +0000
ROA not before:           Thu 07 Nov 2024 14:00:39 +0000
ROA not after:            Wed 05 Feb 2025 14:00:39 +0000
asID:                     393249
IP address blocks:        2607:f8f0:1211::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cd:09:f0:a7:ff:ef:4d:6f:3e:00:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
        Validity
            Not Before: Nov  7 14:00:39 2024 GMT
            Not After : Feb  5 14:00:39 2025 GMT
        Subject: CN=722826a6-6b3b-42dd-848e-28237d203feb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:32:c9:84:c7:9e:7c:25:f9:75:3a:e4:a3:da:
                    5d:68:9c:17:ba:57:13:4f:0a:16:6d:ea:20:f6:8a:
                    af:1a:19:77:48:3a:d9:6d:4d:fa:3a:24:a1:56:24:
                    ae:f1:6a:ae:98:8a:bc:9f:8f:42:ef:fa:eb:b5:79:
                    7b:5f:c8:92:aa:b3:5f:19:f6:16:e3:e2:f0:23:85:
                    96:18:31:97:32:05:ca:09:83:a6:c3:0d:ff:80:c0:
                    9b:5d:8f:f3:b3:74:b0:8f:a1:67:78:cc:81:df:fb:
                    ad:07:a2:c2:dc:6d:1c:c1:74:5f:a1:83:42:b7:d7:
                    a3:93:d1:ce:ab:92:2d:3e:ce:03:8f:3c:2a:55:b6:
                    b5:7b:f2:86:44:63:ed:52:67:96:fd:7e:82:b3:ee:
                    ed:61:29:28:3b:34:a0:9a:b5:be:cf:f3:d3:cd:0d:
                    12:cb:f8:47:05:60:73:f8:00:51:36:66:24:8c:19:
                    44:7f:07:2d:da:cc:65:2b:8e:f4:4a:b5:b5:00:bc:
                    fa:33:14:52:60:15:bb:44:8d:7f:d8:0e:95:9c:1a:
                    22:9f:dc:bc:59:43:b1:48:ca:60:a0:97:ea:1c:be:
                    1d:c6:af:3b:28:a5:7f:38:62:ff:be:5f:61:ed:ba:
                    f8:be:d6:32:fa:0a:8f:7d:ae:bc:ae:57:8d:68:fa:
                    c3:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:44:B8:61:1B:F7:FB:FE:BD:97:1B:12:F3:08:3E:A8:49:48:55:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/1c2f5541-75b2-3321-97f2-a972858e185b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl

            X509v3 Authority Key Identifier:
                keyid:DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f8f0:1211::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:18:90:00:55:43:24:24:dd:90:42:fb:8a:e8:03:b9:f9:f0:
         10:b0:e6:c2:e7:bf:b7:57:2b:a8:23:f5:f9:82:bf:1d:99:cc:
         cf:98:f3:71:dd:12:aa:73:3e:a8:6b:13:28:42:c6:5c:03:38:
         19:30:c6:cf:78:d3:31:b6:a1:4e:1e:a5:b7:cc:16:2c:00:26:
         79:dc:8a:b8:a2:59:9f:4e:3e:b7:7c:bf:0b:5c:e7:c3:16:cc:
         d3:44:a2:2c:c3:ed:12:4e:82:9c:4e:a8:18:86:d9:d8:0f:77:
         4e:b0:37:1c:77:9c:70:06:de:03:74:dd:f4:ef:d8:5a:a3:25:
         df:06:e5:e8:5b:b4:b0:5d:cf:b3:bd:26:68:93:a7:09:fd:ce:
         6e:bd:23:5f:32:52:e6:56:9b:d1:38:b8:2f:71:57:98:85:41:
         f3:81:c5:0f:c8:9d:f6:71:66:98:84:2e:1a:2f:98:fb:3e:76:
         7a:73:94:d3:9e:8f:6f:6b:7a:fc:69:21:18:e5:de:d5:08:b5:
         54:4a:85:f2:0a:63:62:04:d9:62:1b:7c:59:35:8f:30:5d:7b:
         b0:f1:3b:44:5f:eb:93:2f:6e:85:fe:ff:25:e8:06:ec:5c:bb:
         6d:1e:f4:34:4c:ff:5f:39:1e:2a:df:67:47:69:db:ac:53:7b:
         8f:df:67:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:58 2024 by rpki-client on console-fra.rpki-client.org