Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/348d3713-8fd7-4568-b353-ff9d07414f1a/fb1a1f02-6277-383b-861c-529b8e6cbcc3.roa
File:                     fb1a1f02-6277-383b-861c-529b8e6cbcc3.roa (raw, json)
Hash identifier:          XHPbMf9hpL9RpZSeSCSn8fpdmKnU0eUPFwXRXDgShFM=
Subject key identifier:   C9:56:B2:AC:0D:92:42:3D:AC:FC:08:19:9C:85:1D:D5:30:C5:FA:D0
Certificate issuer:       /CN=348d3713-8fd7-4568-b353-ff9d07414f1a
Certificate serial:       010D0C9F43285847CA3F80573AF621D8FDD81B00
Authority key identifier: 83:D0:17:90:7B:6F:EF:76:18:C3:EF:03:EC:E9:A8:34:5E:14:8D:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/348d3713-8fd7-4568-b353-ff9d07414f1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/348d3713-8fd7-4568-b353-ff9d07414f1a/fb1a1f02-6277-383b-861c-529b8e6cbcc3.roa
Signing time:             Wed 06 Nov 2024 14:00:41 +0000
ROA not before:           Wed 06 Nov 2024 14:00:41 +0000
ROA not after:            Tue 04 Feb 2025 14:00:41 +0000
asID:                     400025
IP address blocks:        2620:12b:e000::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/348d3713-8fd7-4568-b353-ff9d07414f1a/348d3713-8fd7-4568-b353-ff9d07414f1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/348d3713-8fd7-4568-b353-ff9d07414f1a/348d3713-8fd7-4568-b353-ff9d07414f1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/348d3713-8fd7-4568-b353-ff9d07414f1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ca:3f:80:57:3a:f6:21:d8:fd:d8:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=348d3713-8fd7-4568-b353-ff9d07414f1a
        Validity
            Not Before: Nov  6 14:00:41 2024 GMT
            Not After : Feb  4 14:00:41 2025 GMT
        Subject: CN=dbbf5e08-fe0a-4cf1-9a63-3b6e431e0bd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:de:58:01:a2:81:4b:e8:34:2e:90:f1:79:98:
                    f9:e1:4b:9b:d3:f4:59:f5:7d:d6:9d:68:e1:3c:a9:
                    3c:d7:c5:7f:fb:fd:52:d7:5d:73:26:95:48:47:b7:
                    f2:db:aa:46:de:23:7a:c1:0a:fc:2d:46:d8:18:0d:
                    5b:d7:26:5b:87:52:95:d3:1a:eb:42:c0:f8:fb:7e:
                    67:d6:72:84:9c:7f:0b:14:c0:b3:b3:e0:9d:c6:bb:
                    8f:d0:7d:13:0d:ce:cc:6d:85:70:51:59:1e:9f:af:
                    a2:32:73:18:81:fc:58:23:8a:29:f4:80:ea:48:05:
                    f7:66:76:b7:08:a4:25:b1:51:1c:53:17:fd:64:ec:
                    ea:a1:59:c5:91:08:d0:bb:7e:3a:fb:02:d3:ce:d5:
                    b0:3a:62:f6:c0:2c:fa:95:46:2c:b7:80:bf:3f:92:
                    d1:0e:a5:a6:45:44:e7:c1:eb:b5:dc:26:77:a5:cd:
                    20:a4:bf:86:17:88:79:cc:55:55:e0:80:2b:c6:ea:
                    48:aa:48:1e:c1:5a:46:03:9b:ea:63:1e:f4:ad:36:
                    f8:0b:bc:3d:b0:84:0d:2d:44:73:fc:a2:16:15:01:
                    40:58:c7:40:ce:40:0e:d8:1c:c2:92:0d:8e:0e:64:
                    ce:c5:b6:47:27:36:d5:8f:da:35:74:ee:47:b1:05:
                    e5:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:56:B2:AC:0D:92:42:3D:AC:FC:08:19:9C:85:1D:D5:30:C5:FA:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/348d3713-8fd7-4568-b353-ff9d07414f1a/fb1a1f02-6277-383b-861c-529b8e6cbcc3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/348d3713-8fd7-4568-b353-ff9d07414f1a/348d3713-8fd7-4568-b353-ff9d07414f1a.crl

            X509v3 Authority Key Identifier:
                keyid:83:D0:17:90:7B:6F:EF:76:18:C3:EF:03:EC:E9:A8:34:5E:14:8D:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/348d3713-8fd7-4568-b353-ff9d07414f1a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:12b:e000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:d5:b0:78:df:71:83:e8:a1:85:b9:f9:f5:d5:5a:fa:d4:d3:
         ed:b0:48:25:ee:5c:64:bb:3c:48:f8:cc:84:18:33:65:9a:fc:
         df:44:9c:ee:89:18:69:b2:04:52:0f:d3:59:5e:f7:49:30:18:
         26:4d:86:7e:87:ab:69:3f:30:cd:3e:b4:8c:d1:60:6d:0a:2e:
         02:67:6f:7f:fa:d6:07:24:e5:d5:31:e8:4c:51:a3:73:c8:27:
         c3:3e:c1:2b:09:e8:c4:bb:a6:2d:47:b6:01:aa:a0:66:c3:4c:
         22:28:63:06:91:1d:5b:34:72:b1:66:50:bf:ed:d5:45:dc:38:
         3a:0a:e7:2b:57:af:03:f1:ab:9e:b6:23:e3:3a:34:7c:25:70:
         4d:18:86:8c:ce:db:c8:b7:eb:55:bc:3a:cf:79:db:95:e3:f1:
         c3:7a:61:33:f9:a3:05:7e:98:a8:07:d4:0a:df:a2:73:07:06:
         a7:bd:2a:25:db:44:cb:34:10:77:74:bb:db:80:5a:c9:b6:8d:
         81:de:92:49:6c:d0:33:19:a9:4c:4c:a0:37:8a:e2:21:26:63:
         19:14:0b:30:e4:0d:7f:85:ec:21:cb:03:f8:49:a3:12:79:03:
         13:cb:8c:d4:20:c7:72:34:e2:84:8f:38:6a:03:f1:43:3b:06:
         12:de:d0:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 20:22:48 2024 by rpki-client on console-ams.rpki-client.org