Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/18d10fc1-0e5f-3f86-8e13-3cadda7fde55.roa
File:                     18d10fc1-0e5f-3f86-8e13-3cadda7fde55.roa (raw, json)
Hash identifier:          /GUlJoiXkKx15cG9nFGJYGneC42ZQjmkLVqFDMsCA70=
Subject key identifier:   66:18:82:E0:3B:A9:8D:A4:FD:AF:97:AA:A7:53:BA:10:40:A5:59:64
Certificate issuer:       /CN=f81bacd8-f7d9-47d7-aa24-5391049f9c82
Certificate serial:       010D0C9F432858475A7638B01EC34B44CC45D400
Authority key identifier: EC:FD:C8:EB:B2:36:F3:BB:96:DA:C4:64:EB:92:D9:A9:A9:F7:13:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/18d10fc1-0e5f-3f86-8e13-3cadda7fde55.roa
Signing time:             Fri 27 Sep 2024 13:00:41 +0000
ROA not before:           Fri 27 Sep 2024 13:00:41 +0000
ROA not after:            Thu 26 Dec 2024 14:00:41 +0000
asID:                     400544
IP address blocks:        2607:76c0:23::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/f81bacd8-f7d9-47d7-aa24-5391049f9c82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/f81bacd8-f7d9-47d7-aa24-5391049f9c82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5a:76:38:b0:1e:c3:4b:44:cc:45:d4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f81bacd8-f7d9-47d7-aa24-5391049f9c82
        Validity
            Not Before: Sep 27 13:00:41 2024 GMT
            Not After : Dec 26 14:00:41 2024 GMT
        Subject: CN=ba276210-ae22-4c80-8757-aef9125dcc45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a7:aa:49:17:0c:55:0a:4a:87:c8:de:d1:df:
                    22:d8:5a:3d:51:14:74:82:99:40:cc:98:a0:8d:8d:
                    e7:ac:b3:70:0e:6d:fa:1d:08:d4:cc:b9:2a:c9:5e:
                    58:6a:e8:64:b9:24:7d:37:f2:3f:3e:85:60:d2:21:
                    60:c3:c5:8c:3f:2d:02:83:66:94:f2:64:78:ed:1d:
                    8c:d8:8b:5a:16:c1:89:2b:00:bf:a5:01:e0:da:d7:
                    95:be:ee:99:5c:6a:a5:1f:fb:b7:dd:0e:09:ff:f8:
                    37:2c:25:38:77:fc:50:39:84:b0:a4:78:74:6a:49:
                    a0:65:d5:7d:b1:2d:31:77:1d:b5:92:de:bd:30:4f:
                    ec:8f:45:94:50:54:a3:4d:1e:d1:d7:65:19:79:4e:
                    38:4d:96:d1:1c:dc:23:75:9e:ca:f9:02:62:73:11:
                    79:56:e4:0b:1d:a0:42:9b:79:f5:cf:fa:77:fe:5f:
                    28:e8:3b:4f:e9:fb:7c:95:6b:6a:0d:47:32:cc:52:
                    f9:1d:ab:e5:74:da:91:79:33:95:fb:97:d8:2a:01:
                    da:82:99:67:74:5a:25:f4:d0:49:58:7e:b8:55:ed:
                    e6:c3:c0:ea:4c:e7:3f:0b:e2:a7:1b:7a:40:55:ea:
                    63:f7:c7:85:05:9d:81:f9:b4:e1:45:c7:74:32:88:
                    84:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:18:82:E0:3B:A9:8D:A4:FD:AF:97:AA:A7:53:BA:10:40:A5:59:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/18d10fc1-0e5f-3f86-8e13-3cadda7fde55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/f81bacd8-f7d9-47d7-aa24-5391049f9c82.crl

            X509v3 Authority Key Identifier:
                keyid:EC:FD:C8:EB:B2:36:F3:BB:96:DA:C4:64:EB:92:D9:A9:A9:F7:13:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:76c0:23::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:b0:e0:70:ca:87:5d:83:36:b6:cf:d1:ec:c0:68:10:57:96:
         20:05:5f:5f:44:f5:2b:3d:dc:0e:5a:29:42:a9:93:b1:f3:5b:
         b0:62:bf:af:5c:ef:d7:a7:48:9a:b1:8a:d6:8b:10:0e:38:ae:
         ef:81:af:e7:59:cf:80:09:40:e1:f0:e9:92:8d:87:cb:01:96:
         84:9c:3f:61:ce:ff:9b:48:d6:5a:75:16:9b:78:75:c3:a1:9a:
         9a:7c:d5:33:70:dd:cb:94:d0:8b:89:10:59:d9:8f:6c:09:98:
         28:40:b0:2a:96:56:af:25:05:68:0a:d0:eb:e7:f7:04:ce:fc:
         7d:a9:f4:ed:cc:01:ed:6e:b5:6f:a4:cd:b6:59:e3:5f:0b:3e:
         60:45:df:6c:a1:45:0b:65:51:fb:24:aa:c7:82:41:88:60:0e:
         82:29:8e:0b:4c:91:a4:da:69:d9:de:46:75:32:a9:35:cf:65:
         72:3c:52:2b:22:40:c1:66:27:40:71:91:84:8c:00:5d:79:5a:
         17:9a:6f:2c:5d:89:45:a8:98:56:30:64:21:e3:21:7b:85:eb:
         25:47:b8:71:96:5a:37:20:bb:15:64:a6:86:d8:81:de:a6:00:
         66:ca:06:28:e7:e6:fe:3d:cf:a1:4c:7d:2d:a3:89:4f:0f:91:
         1c:65:ab:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:37:04 2024 by rpki-client on console-fra.rpki-client.org