Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/4d824316-795d-32a9-baba-f1c71b14a2f8.roa
File:                     4d824316-795d-32a9-baba-f1c71b14a2f8.roa (raw, json)
Hash identifier:          E/Iyaej6fsjpvXRYaCuyDwvKKIWH4BbetFItO15Hj4Y=
Subject key identifier:   DC:A1:F3:EF:14:F2:4B:14:A1:D5:E8:81:F4:59:CB:E9:C0:4F:DD:5E
Certificate issuer:       /CN=f81bacd8-f7d9-47d7-aa24-5391049f9c82
Certificate serial:       010D0C9F432858475A7638FF44E2E22B1B0C5800
Authority key identifier: EC:FD:C8:EB:B2:36:F3:BB:96:DA:C4:64:EB:92:D9:A9:A9:F7:13:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/4d824316-795d-32a9-baba-f1c71b14a2f8.roa
Signing time:             Fri 27 Sep 2024 13:00:41 +0000
ROA not before:           Fri 27 Sep 2024 13:00:41 +0000
ROA not after:            Thu 26 Dec 2024 14:00:41 +0000
asID:                     400544
IP address blocks:        2607:76c0:17::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/f81bacd8-f7d9-47d7-aa24-5391049f9c82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/f81bacd8-f7d9-47d7-aa24-5391049f9c82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5a:76:38:ff:44:e2:e2:2b:1b:0c:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f81bacd8-f7d9-47d7-aa24-5391049f9c82
        Validity
            Not Before: Sep 27 13:00:41 2024 GMT
            Not After : Dec 26 14:00:41 2024 GMT
        Subject: CN=8b749312-38c0-491b-a6af-33948bf8af27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:1f:0c:18:65:d5:3c:a3:82:57:12:df:18:34:
                    a8:ee:91:c5:cd:ee:da:bc:6e:ca:5e:a8:81:0f:5e:
                    4f:6d:b0:70:53:4a:ce:71:62:cc:f7:69:69:0c:82:
                    0e:76:46:24:6c:4c:f1:3d:a5:40:55:42:ff:8b:1c:
                    25:f0:9d:d6:57:a9:6c:2f:f7:85:5e:73:0d:5c:b7:
                    c0:30:3c:7c:68:44:dd:3b:e9:15:47:07:35:ed:ac:
                    8d:ad:0e:1a:6f:64:4d:b6:4d:9e:b5:5d:12:2f:e6:
                    41:9a:0b:d9:17:89:61:91:00:12:7e:f0:83:a0:8d:
                    ba:70:94:e3:25:b4:4a:be:dd:1b:40:8a:52:21:81:
                    32:77:ec:69:ca:62:4b:a6:09:82:03:32:df:24:b9:
                    69:c0:81:d3:25:24:dd:c2:50:1c:3c:b6:33:95:2d:
                    c7:e8:85:6f:d0:c4:57:47:c8:fe:81:3d:cc:76:25:
                    3c:87:5c:c3:65:b2:e3:77:97:61:e7:56:5f:24:51:
                    0c:ba:11:3f:f0:af:12:bb:2c:c2:8e:e0:14:43:ed:
                    c5:0f:ae:8e:f8:62:e2:4c:42:c8:4c:ea:9e:13:52:
                    4c:04:7a:47:87:3e:4b:74:4d:97:9c:18:7d:c8:e4:
                    9e:24:52:59:54:dc:ef:33:b6:54:8f:0b:be:ac:50:
                    34:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:A1:F3:EF:14:F2:4B:14:A1:D5:E8:81:F4:59:CB:E9:C0:4F:DD:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/4d824316-795d-32a9-baba-f1c71b14a2f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/f81bacd8-f7d9-47d7-aa24-5391049f9c82.crl

            X509v3 Authority Key Identifier:
                keyid:EC:FD:C8:EB:B2:36:F3:BB:96:DA:C4:64:EB:92:D9:A9:A9:F7:13:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:76c0:17::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:17:90:b3:59:6b:c6:79:87:c1:b8:49:57:cd:10:03:5a:14:
         1d:b8:a8:54:e7:4f:47:93:93:b7:e8:00:3b:11:5b:64:69:ae:
         40:fd:46:3c:46:d6:ac:e6:de:dd:d6:f2:fd:0d:79:65:60:0c:
         97:14:15:3b:dd:d0:fe:4a:01:6c:d9:8c:15:1c:9a:5d:a1:61:
         f2:cf:21:0c:bf:91:64:7d:ec:ba:45:18:b3:a4:1c:a9:a0:f5:
         a0:58:2b:3e:8b:8b:62:4b:47:ba:90:30:e6:3d:7d:b5:84:81:
         4a:af:59:0e:38:af:d7:04:51:a7:38:bd:5a:90:fe:1b:45:c5:
         b9:bf:7a:30:fd:60:ee:f0:2f:58:f2:3b:13:7b:98:46:22:a9:
         12:8a:4f:14:6a:bb:bf:dd:b6:90:03:f9:ad:0e:b3:8e:59:73:
         d5:84:b0:c9:9f:e2:5e:73:ad:9f:45:5c:b2:53:9c:75:eb:19:
         08:03:7e:f4:39:32:51:d1:95:81:a7:f8:86:90:4d:58:83:1f:
         81:95:ed:d3:59:67:03:72:c9:d6:e2:e6:de:94:cf:b6:74:92:
         eb:fd:ad:10:90:5d:6b:d7:8e:f7:6c:ab:a3:ae:da:51:1d:98:
         7d:ee:14:62:c4:8c:fa:c1:ff:d8:78:0e:d1:6a:62:8f:5d:90:
         6e:68:3b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:37:04 2024 by rpki-client on console-fra.rpki-client.org