Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/3dcf6f67-8a4f-3e3d-a035-083713d6ced3.roa
File:                     3dcf6f67-8a4f-3e3d-a035-083713d6ced3.roa (raw, json)
Hash identifier:          qzJd8U/X9Cs3UF+k70yxO0rY6R266gC+sJV0hWVTKnw=
Subject key identifier:   25:CA:81:19:B5:E9:E5:70:97:52:4B:1F:15:C0:2A:2A:4E:B2:1D:4C
Certificate issuer:       /CN=28df346d-3f66-4555-b2ab-67f450efdcb3
Certificate serial:       010D0C9F43285847C4AA179BC764A89A5460EC00
Authority key identifier: D1:31:34:B4:B4:77:2C:0C:8A:FF:F5:82:03:50:28:76:EA:E5:1D:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/3dcf6f67-8a4f-3e3d-a035-083713d6ced3.roa
Signing time:             Mon 04 Nov 2024 14:00:48 +0000
ROA not before:           Mon 04 Nov 2024 14:00:48 +0000
ROA not after:            Sun 02 Feb 2025 14:00:48 +0000
asID:                     14230
IP address blocks:        2607:fb20::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Nov 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c4:aa:17:9b:c7:64:a8:9a:54:60:ec:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28df346d-3f66-4555-b2ab-67f450efdcb3
        Validity
            Not Before: Nov  4 14:00:48 2024 GMT
            Not After : Feb  2 14:00:48 2025 GMT
        Subject: CN=7cae9a56-bfa7-4019-9360-9d211aba6dd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:34:c1:d9:ba:a7:50:dd:ef:6c:7b:e3:a4:48:
                    13:8f:6a:e0:19:6a:62:eb:1b:9f:5f:06:60:9f:a6:
                    63:c5:57:86:ee:77:bf:a6:22:7c:9a:a5:41:72:a3:
                    1a:f2:77:da:b6:ec:65:d5:43:bd:95:f8:f1:e6:83:
                    97:f7:52:ae:b3:55:44:fc:fe:5e:8c:e3:9e:5f:ba:
                    2f:54:f3:7f:e4:64:d9:5d:ad:36:ad:9e:0d:72:cf:
                    04:87:26:b3:70:fd:db:0f:25:83:56:af:31:87:c4:
                    84:f5:ca:46:d5:e1:86:29:5c:11:9a:00:50:69:ae:
                    0a:45:6d:29:35:04:ee:3b:46:be:74:44:89:ec:07:
                    7b:57:c2:fb:ed:ad:d7:a7:69:f6:e8:17:38:13:76:
                    4d:d3:61:0e:6a:fd:20:d4:b5:ba:3e:0e:13:f4:d9:
                    97:67:60:81:ce:40:8e:8c:e2:b7:12:07:a0:5d:28:
                    58:5c:6a:88:31:3b:86:dc:da:14:14:aa:ba:07:44:
                    07:f8:a1:f4:b8:76:fb:cb:15:c4:9a:52:6f:35:a3:
                    2c:96:ae:66:15:fa:90:e0:78:3b:ff:64:a9:ae:39:
                    52:82:cd:7a:10:68:c4:c9:6a:05:dc:51:e3:e4:4a:
                    f8:d6:92:e9:b5:2f:2d:d9:63:b1:04:e6:96:67:de:
                    0b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:CA:81:19:B5:E9:E5:70:97:52:4B:1F:15:C0:2A:2A:4E:B2:1D:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/3dcf6f67-8a4f-3e3d-a035-083713d6ced3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.crl

            X509v3 Authority Key Identifier:
                keyid:D1:31:34:B4:B4:77:2C:0C:8A:FF:F5:82:03:50:28:76:EA:E5:1D:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fb20::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:cf:35:fe:c2:94:ae:6a:7c:89:69:d2:28:d7:c9:37:29:ae:
         38:b8:59:42:fb:2c:76:b3:6b:42:ac:83:75:6b:81:31:3b:2d:
         2d:6f:a4:7c:a2:63:d3:22:cf:8f:61:bb:24:d9:d3:36:43:08:
         a8:0d:95:80:d0:0a:66:15:c6:c7:c9:58:88:c6:16:1d:f3:d9:
         91:6b:4f:f9:fb:73:cf:11:d0:7a:0a:b0:4b:64:24:b0:f4:ed:
         f0:eb:5f:62:08:a8:6a:a1:05:ed:04:f7:e5:d9:d4:34:9f:8a:
         e7:6f:e6:9f:77:50:ff:93:d0:42:e7:fc:44:0a:cf:68:19:43:
         cd:1d:b1:30:ae:fa:0e:bc:27:20:d4:e8:11:32:c6:d4:00:69:
         e9:84:5a:c4:f4:d7:ad:fc:ae:bc:9a:6c:08:32:1f:41:f9:f8:
         7e:49:cf:3e:67:dd:00:c3:56:47:d0:ec:1c:bf:36:8a:13:3d:
         b6:eb:df:5d:e4:f3:49:53:9e:38:87:a1:39:62:ad:6a:09:ad:
         27:95:91:d6:74:93:92:34:50:85:16:4d:b7:f6:1d:c5:30:b6:
         8a:fa:47:5e:4d:4b:fa:f6:32:09:b1:ad:5e:1d:01:f9:a4:d8:
         2f:0e:5f:31:79:b4:51:34:19:ea:85:bf:fd:7b:d3:b7:46:c8:
         54:83:f1:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:31:29 2024 by rpki-client on console-ams.rpki-client.org