Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/a588bbaf-450f-36f1-ae20-8742ee82982c.roa
File:                     a588bbaf-450f-36f1-ae20-8742ee82982c.roa (raw, json)
Hash identifier:          0R9bmAnY0KpOrO49e9gd2b/jlLm/gqYl4f+eoL4gEL8=
Subject key identifier:   65:2C:A1:B6:5F:10:19:12:D0:6F:22:1C:A9:F0:3B:11:EB:5A:0A:66
Certificate issuer:       /CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
Certificate serial:       010D0C9F432858473D2606228E07DF78D808CACC
Authority key identifier: DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/a588bbaf-450f-36f1-ae20-8742ee82982c.roa
Signing time:             Tue 17 Sep 2024 01:00:31 +0000
ROA not before:           Tue 17 Sep 2024 01:00:31 +0000
ROA not after:            Mon 16 Dec 2024 02:00:31 +0000
asID:                     271
IP address blocks:        2607:f8f0:600::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3d:26:06:22:8e:07:df:78:d8:08:ca:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
        Validity
            Not Before: Sep 17 01:00:31 2024 GMT
            Not After : Dec 16 02:00:31 2024 GMT
        Subject: CN=f90a36d5-37db-428b-997a-a028866c3682
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:8e:8e:e5:d1:de:71:ae:98:4c:68:2a:c1:c5:
                    b6:15:eb:11:7b:e6:84:46:23:20:bd:78:bc:ff:18:
                    35:5a:11:dd:27:48:85:44:1c:93:37:41:39:43:ba:
                    00:e2:52:d9:d8:5e:40:43:1d:80:5d:a7:99:f1:e4:
                    77:ed:9c:d0:db:80:8b:ea:13:d2:df:14:99:60:3d:
                    aa:5c:1e:6c:0f:29:cd:88:d3:12:cd:2c:7d:f6:82:
                    14:f8:43:e4:53:9c:96:76:28:0a:6b:8f:93:91:51:
                    99:0b:4b:fa:19:54:74:1a:dc:4d:b4:0f:53:e4:40:
                    90:e4:96:7e:5c:a5:03:d4:67:5d:13:cb:83:89:6d:
                    86:39:90:46:39:dd:77:cd:8d:3e:5a:8e:5e:ef:e6:
                    69:1e:83:84:af:55:3a:7f:e5:57:07:1b:ff:d7:64:
                    9f:02:26:39:72:a8:2a:5b:2f:86:d7:60:ab:52:67:
                    ad:9e:1c:2b:45:6c:62:f9:48:b5:32:91:e3:ee:8a:
                    00:f6:79:68:f6:af:5e:11:cb:45:38:90:ee:1d:fd:
                    8d:c2:11:22:6e:32:45:1b:6b:df:df:32:21:6b:e4:
                    9f:a8:b7:9d:ee:80:2f:a4:a8:e7:f6:90:8f:35:69:
                    70:e2:99:53:3f:3f:c2:de:96:c9:81:70:f1:e0:6f:
                    59:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:2C:A1:B6:5F:10:19:12:D0:6F:22:1C:A9:F0:3B:11:EB:5A:0A:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/a588bbaf-450f-36f1-ae20-8742ee82982c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl

            X509v3 Authority Key Identifier:
                keyid:DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f8f0:600::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:32:f4:2b:06:0b:21:b9:e9:7a:bb:9f:d2:65:7e:2c:55:4a:
         20:49:bb:a9:35:5f:6b:b6:34:b0:8b:df:d9:af:29:ef:67:a3:
         4f:fe:d1:f4:2e:0a:c4:99:5c:dd:04:68:c9:f1:45:40:fc:f1:
         cd:24:63:71:15:6b:65:26:aa:01:36:d4:93:c8:82:bb:ef:8d:
         08:86:30:de:a7:71:7f:a7:9c:ca:fe:4e:18:67:a1:45:0e:c9:
         b9:13:e8:2e:63:47:2a:31:5a:93:60:f0:01:00:d0:5f:76:ea:
         2b:cb:5d:86:89:b5:00:c8:60:a2:f9:53:0d:20:6d:a9:48:72:
         fc:64:22:11:34:5e:66:95:ea:78:e6:62:6f:83:02:76:00:0a:
         bf:d6:c4:57:76:24:52:74:f4:ab:f2:2a:39:04:b7:66:c5:b4:
         e5:ca:69:1b:58:cf:60:7b:20:c2:9e:aa:76:30:69:1b:4d:fa:
         94:7d:6e:49:6f:c9:c7:10:71:47:06:fd:09:b2:f2:b5:10:45:
         2b:ac:55:d0:61:89:07:38:a5:e7:1f:8a:35:11:1d:23:a8:d8:
         52:cd:16:e8:d6:ec:fe:98:4f:a4:5d:48:9c:c1:a6:0e:ed:9c:
         a1:9d:e2:5e:c6:b7:ba:58:43:8b:af:ab:d4:24:00:39:8d:79:
         a1:92:19:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:49:14 2024 by rpki-client on console-ams.rpki-client.org