Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/bc927572-990f-3e55-b4de-e822d05a347d.roa
File:                     bc927572-990f-3e55-b4de-e822d05a347d.roa (raw, json)
Hash identifier:          FUH/tbypok7Scgv0P5w2HbpvPegbEIj1iknYii+Ya1Q=
Subject key identifier:   F8:91:B7:FD:73:74:80:21:28:15:E0:E0:B2:AB:0D:73:A4:28:1C:35
Certificate issuer:       /CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
Certificate serial:       010D0C9F43285847ED24C9925CE50ED25DF83E80
Authority key identifier: DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/bc927572-990f-3e55-b4de-e822d05a347d.roa
Signing time:             Tue 19 Nov 2024 02:00:27 +0000
ROA not before:           Tue 19 Nov 2024 02:00:27 +0000
ROA not after:            Mon 17 Feb 2025 02:00:27 +0000
asID:                     36391
IP address blocks:        2607:f8f0:661::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ed:24:c9:92:5c:e5:0e:d2:5d:f8:3e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
        Validity
            Not Before: Nov 19 02:00:27 2024 GMT
            Not After : Feb 17 02:00:27 2025 GMT
        Subject: CN=6ff5a9bb-737e-4684-b042-bdff3ced8a4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:67:09:20:2c:01:39:6d:8a:49:e9:b9:77:de:
                    6e:a1:60:b2:b5:a6:2f:5b:4a:76:cf:94:96:5e:4c:
                    42:b5:c6:65:e9:c6:3c:9b:c2:9f:3d:3a:d5:53:a8:
                    33:12:ad:8d:9b:07:7b:c6:f3:c7:bc:cc:a1:60:fa:
                    be:f4:7b:9f:4b:3c:8a:60:48:ef:70:4c:1d:d1:5c:
                    f2:6e:5d:22:fb:d4:d0:bd:af:a2:b1:ec:77:06:27:
                    5f:bb:a6:93:77:3f:31:9c:10:4a:20:6c:76:16:db:
                    5c:1d:d1:05:8b:14:aa:a1:c5:87:d7:99:60:c3:ff:
                    f8:de:24:2e:c1:1e:f9:59:a4:3a:16:07:22:ca:57:
                    79:ea:79:51:c3:0b:16:6b:28:ca:4c:be:c9:83:fc:
                    7f:d0:ac:13:2f:ed:06:0e:c7:98:f4:18:6b:04:95:
                    0e:ab:bd:86:14:1e:ae:f4:2e:f3:b3:8e:5f:49:6e:
                    35:d9:86:ed:de:46:fd:f9:40:ba:dd:5f:78:61:36:
                    7a:24:7b:8b:d1:04:1c:99:da:42:84:47:72:01:03:
                    5d:a0:95:5e:d2:90:94:bb:f7:29:e1:f2:2b:21:c2:
                    a0:58:1d:47:76:c6:58:66:da:9d:7c:4a:f6:a4:77:
                    d2:e9:b3:13:91:59:8e:e3:29:0d:b0:90:68:8c:e0:
                    7d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:91:B7:FD:73:74:80:21:28:15:E0:E0:B2:AB:0D:73:A4:28:1C:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/bc927572-990f-3e55-b4de-e822d05a347d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl

            X509v3 Authority Key Identifier:
                keyid:DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f8f0:661::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:04:0d:9c:fb:c7:17:28:04:ac:76:e3:fc:f9:e1:89:0b:24:
         9a:dd:50:fa:75:f9:4f:51:4b:8b:85:74:e3:57:5a:28:6c:ce:
         9f:f4:8c:2b:84:18:d9:f6:83:42:04:d4:b5:08:3e:4e:bc:fc:
         fb:0a:84:b7:99:ac:08:7d:df:d2:af:ed:1b:4a:13:d9:5c:55:
         a2:a5:22:42:8d:d4:78:0d:1b:a1:66:f6:31:0d:bd:9f:ce:53:
         75:ae:df:99:cc:0c:62:39:38:5f:7b:df:c5:a2:80:7a:ed:41:
         0f:ed:4a:de:24:6a:77:55:50:ff:68:8e:c8:d9:6a:04:a0:01:
         97:3e:5b:76:cf:b5:5d:29:1c:cb:d3:c0:f7:9b:b8:ef:be:db:
         7f:eb:2c:45:27:87:31:fa:b0:8c:f9:43:ff:72:00:6e:0d:53:
         83:60:84:52:e5:e1:35:18:e9:99:82:3c:79:45:c3:9c:7d:26:
         8d:f3:84:d9:39:6b:1c:07:3a:e5:1c:e0:c2:02:ce:2a:31:9e:
         7d:b3:b2:78:71:47:51:a0:c9:2c:60:0c:4b:ff:db:25:5a:c5:
         9c:b6:67:c8:98:ce:0b:c3:c7:c2:b9:70:e8:a3:01:45:89:17:
         37:9f:c7:38:42:8f:d9:54:8b:c3:1a:13:f8:2a:d4:e2:58:8b:
         73:11:7a:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:58 2024 by rpki-client on console-fra.rpki-client.org