Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/3ab62027-bb39-349c-ac20-5407d444c869.roa
File:                     3ab62027-bb39-349c-ac20-5407d444c869.roa (raw, json)
Hash identifier:          mv433+kAjDvdk/Mm3vsPNLWKmEcGZoKCgX0S5FzTzEc=
Subject key identifier:   3B:A7:F4:F7:B9:F2:C8:86:D4:93:BA:F4:DB:5E:3F:78:C3:A9:D0:25
Certificate issuer:       /CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
Certificate serial:       010D0C9F43285846B9EFB203AFACDB7F74346C00
Authority key identifier: DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/3ab62027-bb39-349c-ac20-5407d444c869.roa
Signing time:             Thu 01 Aug 2024 01:00:28 +0000
ROA not before:           Thu 01 Aug 2024 01:00:28 +0000
ROA not after:            Wed 30 Oct 2024 01:00:28 +0000
asID:                     271
IP address blocks:        2607:f8f0:202::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Sep 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:b9:ef:b2:03:af:ac:db:7f:74:34:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
        Validity
            Not Before: Aug  1 01:00:28 2024 GMT
            Not After : Oct 30 01:00:28 2024 GMT
        Subject: CN=39645a21-b7a0-4c15-aa02-94f68da5c9bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:ac:d8:50:ea:2c:07:6e:b3:13:09:7a:79:34:
                    e1:4a:26:89:5b:3a:70:2d:d8:7b:4e:2a:fd:8c:ed:
                    58:56:c9:3a:e7:f7:21:ed:f5:82:58:c5:6d:dc:55:
                    b5:59:74:27:50:c9:93:08:ad:ed:0b:b0:63:55:2d:
                    f3:e6:63:dc:27:b0:d0:79:30:e6:48:db:1c:1a:4b:
                    f2:91:27:b6:d8:0c:32:a6:37:f0:67:30:41:e8:ec:
                    88:98:09:30:dd:a3:7c:11:c3:c0:be:75:2f:66:79:
                    d3:eb:46:4e:5b:1c:86:3a:6e:a7:91:6f:85:f9:18:
                    ff:40:f9:8e:00:fa:01:7e:6a:93:fc:24:38:c2:2d:
                    6e:9d:da:ba:f0:4b:a4:fc:28:76:6d:c3:00:83:c7:
                    93:71:20:09:3f:ec:6c:b7:83:b7:4f:57:22:ba:9c:
                    46:0a:13:4b:bc:fa:37:9f:71:73:9e:f7:3f:bb:6d:
                    50:8a:66:bf:eb:6d:ca:ff:75:dd:a5:6c:22:2a:d8:
                    98:15:a9:26:36:18:9a:8a:ad:2d:0e:95:f8:27:5a:
                    3e:5f:e5:1d:94:96:78:e2:00:40:a2:65:05:a6:e9:
                    59:09:42:d4:64:20:6a:ae:fe:10:c8:c9:53:d7:3c:
                    cb:25:89:cb:ae:dd:e5:b7:15:b7:f2:d7:51:0f:8d:
                    a7:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:A7:F4:F7:B9:F2:C8:86:D4:93:BA:F4:DB:5E:3F:78:C3:A9:D0:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/3ab62027-bb39-349c-ac20-5407d444c869.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl

            X509v3 Authority Key Identifier:
                keyid:DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f8f0:202::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:0f:d6:7a:1c:a2:0c:5a:f9:68:5d:20:58:45:5e:dd:e4:94:
         bb:e7:77:b1:09:e4:fc:61:63:a1:d1:20:27:81:21:be:11:f7:
         ac:66:8c:e2:4a:89:e2:46:f3:e9:55:c3:6c:c8:e6:98:c7:00:
         cf:b2:eb:13:b0:f4:44:8c:4a:6f:d5:26:98:73:d9:eb:42:6d:
         42:58:c2:0c:05:46:61:6e:a3:5c:48:69:99:67:b3:17:28:21:
         26:e2:d1:f1:94:79:c3:be:bc:88:85:a3:e2:0b:eb:5a:e6:37:
         ba:42:09:ec:45:c1:88:9d:2a:78:24:23:7e:e3:f2:15:5f:1b:
         bc:0f:d0:fb:e7:be:55:6d:ee:0c:08:a3:49:63:38:86:8e:f0:
         bd:8f:65:4b:d4:33:19:5b:09:00:e6:17:72:19:c9:d6:23:b6:
         eb:31:b6:13:2d:8a:26:3f:dd:12:b2:47:43:74:15:44:f3:99:
         37:9d:a2:4c:cb:26:2b:4e:26:ef:40:99:21:b4:4a:5b:a8:fd:
         8d:16:80:61:0d:c2:9e:a6:35:ec:90:6a:0d:d8:0c:1f:a9:3f:
         0b:00:09:6a:8b:86:e2:91:08:e4:d7:8e:c4:7b:ad:62:71:02:
         ef:b7:6c:e1:85:f8:88:87:09:4e:94:de:6f:f7:39:03:08:f4:
         4e:ec:b8:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 14:08:01 2024 by rpki-client on console-fra.rpki-client.org