Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/a546cbb8-2a70-392d-873e-3968c05e710f.roa
File:                     a546cbb8-2a70-392d-873e-3968c05e710f.roa (raw, json)
Hash identifier:          ocw/xIkK8QuDT+xpXFbG24FAzPZRxqlwskt3wH/fgfM=
Subject key identifier:   05:C7:85:6B:9A:D3:0D:C7:E7:C6:49:9C:3D:ED:BD:6F:33:A4:72:48
Certificate issuer:       /CN=6e10601c-e280-4510-9d84-b6d2b02b8446
Certificate serial:       010D0C9F43285847E78F6AB4894562BCC2720E80
Authority key identifier: 4E:ED:44:97:58:9A:1C:39:9A:33:B8:A5:80:07:96:D7:83:3A:8A:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/a546cbb8-2a70-392d-873e-3968c05e710f.roa
Signing time:             Sun 17 Nov 2024 02:00:28 +0000
ROA not before:           Sun 17 Nov 2024 02:00:28 +0000
ROA not after:            Sat 15 Feb 2025 02:00:28 +0000
asID:                     393397
IP address blocks:        2607:8c80::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/6e10601c-e280-4510-9d84-b6d2b02b8446.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/6e10601c-e280-4510-9d84-b6d2b02b8446.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e7:8f:6a:b4:89:45:62:bc:c2:72:0e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e10601c-e280-4510-9d84-b6d2b02b8446
        Validity
            Not Before: Nov 17 02:00:28 2024 GMT
            Not After : Feb 15 02:00:28 2025 GMT
        Subject: CN=a9de131e-2a7e-477d-90dd-30ed15e244b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:86:9c:29:a8:4f:19:cb:72:20:da:0d:69:3a:
                    ce:e8:53:92:a9:09:65:ad:07:43:65:a8:4a:e4:a4:
                    3d:b7:51:2a:32:23:d1:35:b3:1f:89:aa:45:22:4d:
                    a6:7a:8f:a6:81:86:3f:86:e1:2a:89:99:a7:a5:e7:
                    7c:8c:59:eb:c7:6c:fc:3a:a7:45:a8:eb:10:73:dd:
                    3c:83:a7:e0:5d:76:6b:f0:b9:d5:45:3b:7e:e5:6c:
                    7f:0a:76:44:85:7b:17:8d:43:2d:1f:b2:71:ea:cd:
                    d5:6e:28:8a:80:33:cb:95:c0:4a:c6:24:8b:0a:4f:
                    19:93:e8:28:34:3b:81:2b:19:ee:de:46:de:cb:86:
                    dc:3b:51:d2:06:17:3a:83:f2:72:c7:ec:29:3e:2a:
                    ef:06:16:18:b1:37:cb:67:99:2f:3c:7d:e1:2d:bb:
                    cd:d3:49:1e:32:5e:ba:fc:9e:d7:ef:ab:68:56:a5:
                    eb:e8:49:ac:f7:f2:f8:a9:a8:fe:dc:0d:87:b2:93:
                    c8:fb:ab:98:1d:17:41:27:ec:3a:e8:d3:ba:d6:cb:
                    6a:6b:10:e7:86:9c:d2:e5:cd:05:ae:76:66:aa:0f:
                    b6:fc:82:fb:47:e2:59:6f:f8:e4:56:67:85:33:75:
                    5e:2c:7c:87:e2:2c:ee:62:11:a3:91:63:01:6b:ce:
                    36:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:C7:85:6B:9A:D3:0D:C7:E7:C6:49:9C:3D:ED:BD:6F:33:A4:72:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/a546cbb8-2a70-392d-873e-3968c05e710f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/6e10601c-e280-4510-9d84-b6d2b02b8446.crl

            X509v3 Authority Key Identifier:
                keyid:4E:ED:44:97:58:9A:1C:39:9A:33:B8:A5:80:07:96:D7:83:3A:8A:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8c80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:d4:c1:34:22:fb:ff:5b:55:f9:60:62:98:63:60:a6:f1:31:
         6e:86:96:fe:2a:51:cb:3b:14:d5:9c:c7:c7:3f:01:04:3d:41:
         8d:43:a6:05:8b:e7:7d:45:37:ef:7f:f6:03:59:10:9b:f9:04:
         cc:b0:5b:c1:b1:55:a5:60:79:9c:2a:b7:b4:77:0f:18:69:ad:
         46:09:1e:00:50:90:74:75:ff:0b:d7:36:c7:9f:c5:6c:0b:d2:
         59:e9:f2:50:6e:10:48:0f:0c:ca:9e:d6:1c:bf:60:4a:36:b4:
         8d:69:b6:d0:cd:47:33:09:29:64:d1:cc:a6:02:b1:b3:46:58:
         c6:64:c4:dd:8b:5f:19:a9:83:bb:f7:d5:36:4c:3c:fc:0a:98:
         39:e5:06:c0:b1:02:f2:17:88:2d:c2:a7:59:a2:92:19:3c:d0:
         84:80:2c:06:71:de:4f:da:98:74:9a:e7:1b:85:85:36:09:ee:
         db:f4:6c:8e:c9:5b:8c:c9:37:6c:08:e6:b3:a9:a6:03:98:7b:
         fb:ba:ff:f2:9b:32:4f:a0:ed:1d:9e:35:1c:5f:58:8e:f7:29:
         f7:50:ec:90:26:8b:b0:1c:62:21:e3:01:c0:c7:95:40:80:63:
         67:59:b6:38:99:b4:96:28:c4:f2:8a:09:ac:a8:93:d6:15:ec:
         40:f8:5d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 21:54:53 2024 by rpki-client on console-fra.rpki-client.org