Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/7b74aee8-6c21-37d0-8b01-48497d6f2ef1.roa
File:                     7b74aee8-6c21-37d0-8b01-48497d6f2ef1.roa (raw, json)
Hash identifier:          HklWDgx7DsYEhXuOJJoOd8Z7C++VqJHzW+VSyaGxWWw=
Subject key identifier:   DF:3B:14:0D:EF:41:22:D1:7D:86:AA:D4:53:14:DB:B7:FC:DF:99:04
Certificate issuer:       /CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
Certificate serial:       010D0C9F4328584750B0A90613BA093E60461D60
Authority key identifier: DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/7b74aee8-6c21-37d0-8b01-48497d6f2ef1.roa
Signing time:             Tue 24 Sep 2024 01:00:31 +0000
ROA not before:           Tue 24 Sep 2024 01:00:31 +0000
ROA not after:            Mon 23 Dec 2024 02:00:31 +0000
asID:                     271
IP address blocks:        2607:f8f0:240::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:50:b0:a9:06:13:ba:09:3e:60:46:1d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
        Validity
            Not Before: Sep 24 01:00:31 2024 GMT
            Not After : Dec 23 02:00:31 2024 GMT
        Subject: CN=2444a0cd-e0de-4d14-ba73-d31432a2c97b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:dc:31:b6:e4:47:ea:eb:ad:31:ad:82:46:e2:
                    77:73:64:e0:0c:7a:66:f2:c1:07:62:43:27:2a:27:
                    5e:dd:8c:ab:e3:e4:aa:a3:46:f3:7d:d9:35:dd:f1:
                    db:d2:d1:3c:e7:d6:e3:9e:70:d4:bf:55:06:4d:bf:
                    75:c9:a7:f5:e6:18:6d:39:7a:fa:e8:34:25:71:7a:
                    af:4a:20:72:83:28:94:08:f2:bc:52:c0:26:62:88:
                    2a:6c:e7:e4:d4:8e:f7:cc:2d:0b:bb:3c:67:0c:8e:
                    3d:97:9d:5c:7a:57:db:85:ab:99:dd:26:d1:28:3d:
                    e0:7e:f5:9f:53:e0:17:bc:d8:60:16:6f:26:28:a8:
                    7d:9f:f7:20:a4:c0:d3:47:e1:10:1c:35:22:b9:65:
                    dd:ff:0c:93:cb:a3:c7:ea:19:9f:a1:20:0f:23:a5:
                    89:af:1e:a1:6e:26:dc:20:8b:b3:03:4f:1a:7b:cc:
                    84:4a:fd:87:ae:0b:e9:85:df:1f:33:75:3e:f8:8b:
                    bf:d1:86:b6:cd:2f:6e:21:66:39:66:6d:c3:0d:36:
                    15:02:e0:dd:e1:30:e2:7e:f5:4f:87:37:01:c7:3c:
                    03:95:d5:e5:dd:bb:c0:12:62:b5:fc:d3:11:b5:f5:
                    e0:5b:43:41:bc:53:f8:43:26:97:e3:bc:8c:fc:19:
                    23:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:3B:14:0D:EF:41:22:D1:7D:86:AA:D4:53:14:DB:B7:FC:DF:99:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/7b74aee8-6c21-37d0-8b01-48497d6f2ef1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl

            X509v3 Authority Key Identifier:
                keyid:DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f8f0:240::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:99:60:f6:59:5c:8c:4e:89:9e:3c:7b:56:7d:10:10:c3:dc:
         4b:5d:72:44:d3:31:ec:b2:3b:80:d6:0c:a4:24:d2:bd:d4:4b:
         f6:19:ff:39:a3:5a:28:c8:d9:b3:c4:18:5b:83:00:b9:e8:82:
         ec:d6:c5:20:f5:23:96:7e:f1:2a:34:f4:27:db:3b:8b:de:13:
         69:cf:cd:ca:a7:7b:c0:6b:b6:91:88:15:53:30:6a:c9:70:8e:
         9c:e3:3c:79:d9:05:dc:b6:07:f1:f9:70:d9:2a:a9:d7:82:a3:
         b8:d8:b5:94:f8:de:0c:95:bc:4d:60:e2:20:2e:45:91:30:9d:
         90:72:12:cc:6b:ad:b6:20:ee:81:28:d3:0f:33:bb:ad:e5:62:
         17:84:d2:33:82:e4:0a:33:b4:2b:8e:b4:45:48:50:04:42:17:
         69:dc:43:66:35:57:0f:a2:8c:59:b9:b8:ae:2c:3a:4d:d9:4e:
         5b:8b:22:fa:b0:86:48:79:f4:06:29:a9:29:26:05:8b:5f:7c:
         2e:45:d8:fd:55:48:f5:a5:70:ca:d8:a2:61:3d:a6:5b:24:25:
         12:29:24:bf:81:26:c1:90:9b:5d:f8:37:f2:a3:56:b6:b2:6c:
         7e:7b:e9:cc:f2:2f:5c:c0:19:71:eb:37:81:3f:19:b2:ee:f2:
         52:6d:fa:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:49:14 2024 by rpki-client on console-ams.rpki-client.org