Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/a18254c5-4fbb-38b3-ba01-06849550db5f.roa
File:                     a18254c5-4fbb-38b3-ba01-06849550db5f.roa (raw, json)
Hash identifier:          qyzDv7s0R+sQdjWDbznsYf09Ga/8HjDYQ9Dw/PfiCbc=
Subject key identifier:   87:65:E6:1C:66:84:50:CE:32:E9:D4:18:B0:62:96:D0:21:CA:80:1F
Certificate issuer:       /CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
Certificate serial:       010D0C9F4328584750B0AA774A1930F42FA35980
Authority key identifier: DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/a18254c5-4fbb-38b3-ba01-06849550db5f.roa
Signing time:             Tue 24 Sep 2024 01:00:31 +0000
ROA not before:           Tue 24 Sep 2024 01:00:31 +0000
ROA not after:            Mon 23 Dec 2024 02:00:31 +0000
asID:                     271
IP address blocks:        2607:f8f0:210::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:50:b0:aa:77:4a:19:30:f4:2f:a3:59:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
        Validity
            Not Before: Sep 24 01:00:31 2024 GMT
            Not After : Dec 23 02:00:31 2024 GMT
        Subject: CN=daa7386a-5ee9-4635-933c-068ed8b00f09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d0:2b:bd:ad:70:a7:85:08:14:08:a2:be:37:
                    98:25:1f:b7:c5:32:2e:9a:0f:2f:57:f9:8a:4c:59:
                    eb:46:89:6d:a3:bb:a5:82:5d:d4:8b:b5:b3:9b:c3:
                    7a:97:18:01:b0:dc:7c:e9:0c:ce:79:c2:1d:f4:0e:
                    7b:c3:1f:db:c7:86:12:f8:9f:3a:64:90:75:9d:a0:
                    3d:26:00:f8:f5:bc:60:8f:74:e3:5d:49:f5:f7:a3:
                    b1:72:17:05:20:04:f4:f9:6a:a3:e5:6c:d3:ae:6c:
                    ea:60:70:3d:35:c4:38:e3:1d:ab:bf:bf:20:7a:0c:
                    48:08:9e:e7:ed:8a:dd:5c:89:47:c0:6e:83:5c:aa:
                    d9:c8:43:7f:06:34:c2:9e:5c:34:a0:00:0b:47:88:
                    8f:6d:47:ef:a8:5b:1b:29:93:16:29:a9:0d:79:20:
                    1b:9b:4b:8f:07:9b:e8:06:82:1b:47:15:05:61:47:
                    5b:c6:b4:66:66:ad:83:2a:81:87:c8:79:96:8d:50:
                    68:c6:d2:24:46:b4:32:cd:d9:32:97:1c:5f:cd:4f:
                    e5:86:eb:da:98:9b:c4:2a:a9:30:35:05:d5:72:21:
                    cb:74:18:c8:a1:e2:3e:0c:ff:a2:26:d9:02:bd:ed:
                    2d:e2:f5:7f:a1:9a:d7:f8:a9:e9:5f:6c:d6:7f:32:
                    41:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:65:E6:1C:66:84:50:CE:32:E9:D4:18:B0:62:96:D0:21:CA:80:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/a18254c5-4fbb-38b3-ba01-06849550db5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl

            X509v3 Authority Key Identifier:
                keyid:DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f8f0:210::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:6c:a9:85:4d:b9:ae:f7:e2:58:3d:47:87:07:eb:17:92:e9:
         4f:9a:fa:79:85:64:ac:8b:31:0e:4b:06:1c:85:15:c3:00:10:
         db:42:b4:9d:45:7c:53:4d:7e:53:d1:ac:0f:07:05:3e:63:da:
         ad:76:69:04:0e:ed:b0:39:13:7e:13:06:a2:79:b3:01:bf:d8:
         5d:11:51:b0:50:a8:c3:2a:4c:58:63:1b:05:a5:12:54:fa:33:
         9c:d2:e5:9c:89:7d:6b:af:ce:50:57:bf:63:45:2c:d4:b5:39:
         38:5c:9c:a1:0d:64:a7:06:cf:1e:46:4c:f4:31:67:1e:1b:72:
         ca:c7:7a:59:02:26:3a:9d:93:00:e3:25:97:0f:f3:32:90:92:
         c7:0c:a7:35:fa:98:a5:92:09:60:f8:17:05:c5:69:98:4c:cf:
         75:ea:de:e5:2d:3a:ee:79:f9:c2:67:12:87:1c:a7:c2:69:5f:
         b2:c0:57:41:0b:f2:31:25:47:59:b9:3b:8c:ac:0a:31:25:18:
         4a:db:36:a1:72:1c:d4:12:82:e8:76:f6:21:be:01:7a:6f:48:
         55:e3:76:f1:21:ef:1f:2b:f0:b9:4e:65:8d:ca:b0:a8:54:56:
         32:ed:da:0b:68:5e:b6:ff:db:37:1a:6c:e9:3e:95:6b:78:ac:
         3c:0b:74:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:58 2024 by rpki-client on console-fra.rpki-client.org