Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/83dfd9c6-2e0a-3d95-9ea1-c1c0c143fa25.roa
File:                     83dfd9c6-2e0a-3d95-9ea1-c1c0c143fa25.roa (raw, json)
Hash identifier:          uOdGRAyoA4gnIakdZ4ys1hqX4QL5dXidikI3gtnxsBI=
Subject key identifier:   16:C0:4B:2E:56:20:6F:C7:45:74:22:37:06:B7:AA:D0:BF:9A:53:24
Certificate issuer:       /CN=f81bacd8-f7d9-47d7-aa24-5391049f9c82
Certificate serial:       010D0C9F432858475A76390F05A2B608911A7280
Authority key identifier: EC:FD:C8:EB:B2:36:F3:BB:96:DA:C4:64:EB:92:D9:A9:A9:F7:13:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/83dfd9c6-2e0a-3d95-9ea1-c1c0c143fa25.roa
Signing time:             Fri 27 Sep 2024 13:00:41 +0000
ROA not before:           Fri 27 Sep 2024 13:00:41 +0000
ROA not after:            Thu 26 Dec 2024 14:00:41 +0000
asID:                     400544
IP address blocks:        2607:76c0:20::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/f81bacd8-f7d9-47d7-aa24-5391049f9c82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/f81bacd8-f7d9-47d7-aa24-5391049f9c82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5a:76:39:0f:05:a2:b6:08:91:1a:72:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f81bacd8-f7d9-47d7-aa24-5391049f9c82
        Validity
            Not Before: Sep 27 13:00:41 2024 GMT
            Not After : Dec 26 14:00:41 2024 GMT
        Subject: CN=ab9b0d13-ca0b-46ec-a061-505a7dbd49c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:2f:6e:09:cc:21:06:0a:c6:7e:09:46:4f:70:
                    97:21:26:03:81:31:a5:3c:87:b4:d7:3d:c9:d0:08:
                    bf:ef:eb:a3:bf:4a:da:d7:50:28:b6:c1:b3:72:f7:
                    8c:86:af:1a:2b:28:bf:7a:8d:c9:ba:cc:73:4b:f8:
                    93:d3:dc:00:21:06:f3:8c:62:a0:c1:21:d4:34:f6:
                    d4:64:63:fa:4a:60:82:87:e0:a0:e2:22:c1:6c:ff:
                    32:6f:c5:08:c1:ef:ec:dc:e8:45:08:b4:fb:56:bc:
                    dd:5a:bc:82:3e:64:3a:c0:ab:f9:77:c6:8f:ee:cc:
                    bc:8b:6f:00:98:a4:de:7b:38:3b:02:6c:a1:db:e9:
                    eb:c3:14:c0:3e:ec:b3:8a:28:4b:80:8f:bf:e3:fd:
                    1a:e6:5a:94:d2:a9:f4:e7:f5:5a:7a:af:1e:53:53:
                    13:20:93:ca:4c:45:e1:02:e2:b5:c4:cc:af:de:f7:
                    4a:10:8b:d5:7c:af:68:f9:0a:e0:c6:a1:c7:a3:eb:
                    05:e7:b1:a5:e5:0f:5e:4d:41:c5:cf:59:7d:14:a5:
                    b3:73:80:c3:04:bc:4a:3f:35:2d:02:de:36:02:84:
                    c0:1d:e4:0d:30:34:35:8c:b6:d3:07:c9:1b:d7:86:
                    41:c6:28:f2:fd:0e:73:75:47:fc:49:4a:99:49:3a:
                    e4:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:C0:4B:2E:56:20:6F:C7:45:74:22:37:06:B7:AA:D0:BF:9A:53:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/83dfd9c6-2e0a-3d95-9ea1-c1c0c143fa25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/f81bacd8-f7d9-47d7-aa24-5391049f9c82.crl

            X509v3 Authority Key Identifier:
                keyid:EC:FD:C8:EB:B2:36:F3:BB:96:DA:C4:64:EB:92:D9:A9:A9:F7:13:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:76c0:20::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:f0:19:cb:f3:a8:a9:60:4b:9f:9c:0d:dd:08:0b:9e:c2:b4:
         0e:d4:b6:8d:88:50:0b:ad:21:7e:60:ff:a2:db:c2:c1:7d:4b:
         48:c2:09:5a:a6:af:79:fd:63:00:24:0a:8d:3c:4a:49:5f:06:
         fb:95:6e:82:28:79:06:52:64:95:d8:d0:41:6e:f7:fb:fe:6e:
         03:f6:0a:11:10:c3:59:e6:d4:49:4f:80:61:0d:bf:00:b9:70:
         d0:ef:8c:ab:98:6d:21:e8:2f:ff:5c:e2:c1:6f:ac:b1:e9:48:
         53:a4:17:88:14:1f:e7:c8:66:2b:b7:f2:17:a1:cc:0e:ca:d3:
         87:9e:c7:42:08:ca:b1:69:d1:93:74:98:6c:98:a2:cf:c9:aa:
         81:33:52:c6:09:f8:97:16:2e:3a:1e:19:dd:c0:8e:d5:67:3e:
         2e:d5:bb:80:44:fd:cd:b0:20:ef:6d:8a:ca:48:8b:49:63:ce:
         f0:4d:54:d7:06:e1:8e:b5:a8:e6:04:66:ec:0f:74:0c:be:a9:
         e5:e1:d8:c6:e6:7a:b4:29:4c:33:8f:6e:6d:61:81:ab:90:eb:
         89:62:e3:ed:de:a8:5f:cf:24:fc:31:96:a5:35:8c:79:1d:bb:
         35:db:f7:6b:89:3a:8e:51:e6:33:7c:0c:c4:e1:5b:27:82:63:
         9e:8f:d9:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:38:05 2024 by rpki-client on console-ams.rpki-client.org