Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/32915dae-42f2-38d7-86d4-d902e4d35a8d.roa
File:                     32915dae-42f2-38d7-86d4-d902e4d35a8d.roa (raw, json)
Hash identifier:          Fj2qzz9kxSm0CsSZbVlpr2facogVTtGdRohzp9O28wM=
Subject key identifier:   FC:1B:D7:40:66:36:E0:57:CF:96:93:E5:AE:AD:96:DF:A0:7F:CE:E9
Certificate issuer:       /CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
Certificate serial:       010D0C9F4328584750B0A919140A941E20B57E80
Authority key identifier: DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/32915dae-42f2-38d7-86d4-d902e4d35a8d.roa
Signing time:             Tue 24 Sep 2024 01:00:31 +0000
ROA not before:           Tue 24 Sep 2024 01:00:31 +0000
ROA not after:            Mon 23 Dec 2024 02:00:31 +0000
asID:                     271
IP address blocks:        2607:f8f0:250::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:50:b0:a9:19:14:0a:94:1e:20:b5:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
        Validity
            Not Before: Sep 24 01:00:31 2024 GMT
            Not After : Dec 23 02:00:31 2024 GMT
        Subject: CN=65feab10-ca01-4201-a2cc-f7c2a0feab0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:07:37:ca:53:fd:9a:d3:4b:91:9e:a2:81:a5:
                    56:eb:1a:7e:2c:f4:f6:54:ea:d7:f3:32:c1:b8:2f:
                    2f:9a:f9:76:39:a1:94:4a:16:f0:89:08:1d:26:4d:
                    33:e4:46:bb:bc:a4:f3:aa:c0:51:62:57:ce:04:00:
                    47:53:8b:52:92:71:c8:0e:50:f2:23:1a:19:97:62:
                    57:15:e9:d0:36:fb:46:30:5d:3d:0b:3b:3c:4b:1c:
                    65:31:12:81:3b:42:86:29:76:57:a0:f8:05:4c:c7:
                    ea:db:3c:fa:e2:37:6d:75:ef:01:2a:fc:da:e0:c6:
                    ed:a4:be:f5:c0:77:d5:1b:8d:67:f9:04:d6:c6:33:
                    8c:59:1b:49:70:32:9e:fe:59:28:0a:01:d3:50:56:
                    c7:52:76:1f:b3:71:da:ba:cd:07:be:63:23:5b:41:
                    a7:67:68:41:b4:81:31:91:4f:69:0e:4e:d2:48:d8:
                    97:05:92:6e:4a:96:a4:84:b6:11:f7:6e:05:67:6e:
                    a5:f6:e9:f2:11:d6:a6:2c:60:0b:88:df:12:bb:32:
                    9a:dc:8b:94:ba:33:f8:77:8d:87:d5:04:b8:c0:df:
                    05:5e:0e:77:bf:77:2e:bd:fc:ea:fd:39:ed:78:23:
                    6d:79:4c:0b:6d:4e:64:6b:e6:18:0a:92:9c:ee:00:
                    40:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:1B:D7:40:66:36:E0:57:CF:96:93:E5:AE:AD:96:DF:A0:7F:CE:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/32915dae-42f2-38d7-86d4-d902e4d35a8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl

            X509v3 Authority Key Identifier:
                keyid:DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f8f0:250::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:f0:7b:da:d5:70:89:d0:22:12:77:fa:89:d0:d8:26:31:94:
         4a:21:9a:9a:5d:06:84:8c:a1:87:74:01:5f:df:9e:7b:7e:27:
         d7:53:b6:3a:56:e9:c3:d2:99:0c:8e:b2:06:4d:b7:9e:db:bd:
         e2:f9:73:22:f2:7b:37:40:60:79:fa:b2:cd:7e:72:5a:4a:0d:
         b4:e0:8e:57:b5:31:ab:68:82:17:04:e2:aa:13:a9:c5:bb:6d:
         d6:4a:42:4a:95:1e:39:00:e7:3c:4c:19:77:ad:be:b8:24:b4:
         16:c1:8e:a2:d3:69:2f:09:77:dc:c0:4d:4e:ea:ff:c6:96:a6:
         77:56:30:31:bd:7f:81:42:9e:d3:d1:39:fe:02:7c:8c:3e:c5:
         7a:fd:a3:51:c2:1c:e2:c3:67:38:29:9d:fd:4b:d2:73:18:4d:
         6d:7f:4f:06:57:50:bc:24:44:bc:46:e5:0d:31:68:9c:c6:2e:
         64:ab:fd:fb:3c:94:5a:94:50:33:ad:43:46:80:6d:87:7b:eb:
         70:ff:92:9a:19:fd:d5:d1:90:60:1e:1e:54:53:f4:ed:2e:60:
         1c:34:fc:d8:23:06:b8:3d:34:ed:63:9f:4f:9b:54:1e:0e:1f:
         c4:15:c0:d2:40:5e:e3:88:3b:79:69:ee:47:95:32:9f:7a:f7:
         db:f2:f2:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:49:14 2024 by rpki-client on console-ams.rpki-client.org