Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/a9ccb72e-2783-3fd9-8638-95d8d918072b.roa
File:                     a9ccb72e-2783-3fd9-8638-95d8d918072b.roa (raw, json)
Hash identifier:          sWQMKKL9GV6WJXZNDUa8RGElKB1tjgoCucChsCoTAZI=
Subject key identifier:   65:B5:3F:BF:3A:36:12:DE:FA:A5:E6:1C:06:6A:28:90:67:A4:BC:AF
Certificate issuer:       /CN=f81bacd8-f7d9-47d7-aa24-5391049f9c82
Certificate serial:       010D0C9F432858475A76391B75A761B04573DB60
Authority key identifier: EC:FD:C8:EB:B2:36:F3:BB:96:DA:C4:64:EB:92:D9:A9:A9:F7:13:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/a9ccb72e-2783-3fd9-8638-95d8d918072b.roa
Signing time:             Fri 27 Sep 2024 13:00:41 +0000
ROA not before:           Fri 27 Sep 2024 13:00:41 +0000
ROA not after:            Thu 26 Dec 2024 14:00:41 +0000
asID:                     400544
IP address blocks:        2607:76c0:30::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/f81bacd8-f7d9-47d7-aa24-5391049f9c82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/f81bacd8-f7d9-47d7-aa24-5391049f9c82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5a:76:39:1b:75:a7:61:b0:45:73:db:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f81bacd8-f7d9-47d7-aa24-5391049f9c82
        Validity
            Not Before: Sep 27 13:00:41 2024 GMT
            Not After : Dec 26 14:00:41 2024 GMT
        Subject: CN=a38cef42-70c2-4c18-b98a-54d2391d5267
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:22:85:9a:9e:0a:da:4f:fb:61:d3:fa:5e:4a:
                    89:7f:00:7c:1e:de:35:96:39:c9:92:61:1e:36:d8:
                    62:0e:34:e5:df:eb:b7:87:5e:fd:39:b0:26:e3:4d:
                    77:5d:8e:cf:d6:fb:77:dd:f9:3e:3f:eb:eb:d2:b7:
                    39:8a:38:29:4c:dc:1e:a3:ef:4e:72:1e:a3:be:5a:
                    bd:da:72:e7:38:b3:7e:0a:08:cd:a8:83:0b:c3:2a:
                    dd:61:ee:de:d8:74:b6:96:50:f0:e6:c5:8e:93:8f:
                    ce:7f:19:50:39:90:ca:d2:80:54:1e:ca:0b:83:dc:
                    40:e9:c3:2c:0e:5e:3b:ab:fb:f9:67:96:e0:27:77:
                    37:50:39:e7:02:44:4e:78:86:ca:b7:d3:8f:8f:b1:
                    a3:25:06:13:70:91:2a:53:c1:4f:e4:52:ac:f4:6f:
                    5e:c3:94:66:00:4c:a6:ec:02:f9:b6:05:a2:1d:cd:
                    35:b0:2e:a3:fb:93:27:f9:5c:45:5d:76:89:ec:ec:
                    2b:0b:a4:6d:58:1c:e0:fe:51:b2:41:c2:1e:c7:97:
                    4b:d8:e3:b0:0b:d3:44:dc:64:ec:b6:b9:40:74:dc:
                    42:8c:f7:49:26:ba:cb:50:1f:04:a6:80:5b:dd:af:
                    88:dc:dd:49:c8:79:b1:78:94:86:b4:d7:38:ae:7f:
                    6f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:B5:3F:BF:3A:36:12:DE:FA:A5:E6:1C:06:6A:28:90:67:A4:BC:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/a9ccb72e-2783-3fd9-8638-95d8d918072b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/f81bacd8-f7d9-47d7-aa24-5391049f9c82.crl

            X509v3 Authority Key Identifier:
                keyid:EC:FD:C8:EB:B2:36:F3:BB:96:DA:C4:64:EB:92:D9:A9:A9:F7:13:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:76c0:30::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:8c:08:b5:a9:45:6e:12:f0:e8:37:de:94:0a:05:e1:15:7b:
         f1:8f:26:ed:b6:67:91:72:76:41:4f:4b:05:cd:35:b2:ed:f5:
         d1:e3:ea:c6:10:39:49:ad:f9:12:3b:7f:70:30:8d:b0:b1:dd:
         e9:bb:66:02:60:b7:39:9e:9c:ef:ea:c9:18:28:82:33:4d:f7:
         05:47:90:fd:8f:d0:09:be:49:09:18:d8:4c:56:ce:72:65:b1:
         83:2b:7f:ac:b4:ce:98:f3:9a:72:ab:8b:d4:ec:0c:9a:02:2b:
         a1:06:b9:6e:be:63:c2:c6:15:f3:73:d1:41:74:43:24:a9:07:
         c6:4a:c7:5e:e7:39:0f:4c:26:e9:41:71:9e:b6:fe:96:a1:a0:
         18:8b:62:4a:36:3f:fb:84:f1:66:e9:12:ea:0d:2f:2d:78:7d:
         0e:e5:7c:0d:fd:54:3a:d8:ff:a6:63:7e:7a:07:bb:6c:92:f7:
         cf:89:4b:44:f1:d6:52:5f:c1:37:a0:bb:66:79:70:73:0a:b0:
         7a:a4:38:7c:22:ba:a2:ac:64:1f:93:94:8e:fd:8e:a8:c9:6b:
         c1:52:7e:73:dd:d1:bc:6e:ff:aa:6f:23:41:48:7a:ea:31:bf:
         47:a5:82:89:97:97:6c:dd:d8:56:7f:2f:61:39:9b:7d:fe:83:
         84:26:f5:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:38:05 2024 by rpki-client on console-ams.rpki-client.org