Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f206706-c108-40c1-8f2d-14fbbf92d951/fd4b4cc4-8678-3ff3-b5a6-110051e3583d.roa
File:                     fd4b4cc4-8678-3ff3-b5a6-110051e3583d.roa (raw, json)
Hash identifier:          6wRlthDJSFhq6OVOFTdhioH3WSsvyOE2ZjgDINmNBsQ=
Subject key identifier:   3A:3A:41:A2:B5:F7:6E:09:5A:E4:67:D9:21:1E:C3:28:02:2C:52:FA
Certificate issuer:       /CN=6f206706-c108-40c1-8f2d-14fbbf92d951
Certificate serial:       010D0C9F43285847DC64A10190D2CBB69014FB80
Authority key identifier: 1B:AB:C7:C1:2D:FF:2F:79:6E:9C:4B:DD:F6:2D:47:B8:5F:C3:EF:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f206706-c108-40c1-8f2d-14fbbf92d951.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f206706-c108-40c1-8f2d-14fbbf92d951/fd4b4cc4-8678-3ff3-b5a6-110051e3583d.roa
Signing time:             Wed 13 Nov 2024 02:00:28 +0000
ROA not before:           Wed 13 Nov 2024 02:00:28 +0000
ROA not after:            Tue 11 Feb 2025 02:00:28 +0000
asID:                     32484
IP address blocks:        2607:2ac0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f206706-c108-40c1-8f2d-14fbbf92d951/6f206706-c108-40c1-8f2d-14fbbf92d951.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f206706-c108-40c1-8f2d-14fbbf92d951/6f206706-c108-40c1-8f2d-14fbbf92d951.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f206706-c108-40c1-8f2d-14fbbf92d951.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:dc:64:a1:01:90:d2:cb:b6:90:14:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f206706-c108-40c1-8f2d-14fbbf92d951
        Validity
            Not Before: Nov 13 02:00:28 2024 GMT
            Not After : Feb 11 02:00:28 2025 GMT
        Subject: CN=42cb2dff-56b6-426c-a656-6e502011ddf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:45:6b:3c:46:f2:51:0d:23:c9:ca:2a:40:11:
                    3e:d5:fd:1c:ca:b3:e7:b7:18:a1:61:e0:18:48:5b:
                    2e:de:94:ee:d1:e9:06:73:ab:93:40:ae:2e:85:fb:
                    6d:10:53:09:e6:2c:db:d0:e5:87:70:82:c7:b6:94:
                    1f:35:a7:0c:0a:f3:f7:83:31:50:ff:c2:a3:50:2d:
                    ae:c3:26:b9:95:04:ca:82:eb:8f:57:f4:6f:e8:bc:
                    69:80:47:75:72:b0:0f:41:6e:50:71:13:8c:9e:9f:
                    6e:bb:78:5b:78:30:1e:58:2f:b5:f2:72:7c:90:2a:
                    b6:e5:37:a7:6a:a8:0c:4a:b7:a6:1b:7b:54:a9:7d:
                    8c:f5:6d:89:96:18:ed:0a:3a:c1:51:33:95:8f:31:
                    f5:3a:1c:53:53:ab:a1:4c:74:f9:0e:00:8c:32:4b:
                    5b:d8:e5:85:c9:d6:ee:4c:c8:17:6a:46:90:9c:41:
                    32:62:5b:57:d1:3a:11:c5:99:59:48:70:08:33:f7:
                    cd:a4:c3:be:e3:59:1c:3d:17:59:5c:f3:26:5f:84:
                    88:22:80:76:9a:38:cb:29:b1:71:36:ec:9a:b5:ef:
                    36:b4:d6:c2:9d:b1:90:05:fe:f6:51:02:94:03:4f:
                    a7:3e:cc:cc:86:da:85:2f:1e:b4:f5:02:60:bb:05:
                    d7:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:3A:41:A2:B5:F7:6E:09:5A:E4:67:D9:21:1E:C3:28:02:2C:52:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f206706-c108-40c1-8f2d-14fbbf92d951/fd4b4cc4-8678-3ff3-b5a6-110051e3583d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f206706-c108-40c1-8f2d-14fbbf92d951/6f206706-c108-40c1-8f2d-14fbbf92d951.crl

            X509v3 Authority Key Identifier:
                keyid:1B:AB:C7:C1:2D:FF:2F:79:6E:9C:4B:DD:F6:2D:47:B8:5F:C3:EF:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f206706-c108-40c1-8f2d-14fbbf92d951.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:2ac0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:51:25:b0:83:ee:36:0d:9b:26:65:bc:b9:e5:ac:7e:7d:d5:
         5b:8e:9e:b5:f6:1d:f3:cf:5a:8c:09:b0:e0:89:58:08:46:c8:
         2f:4a:65:55:ac:88:14:a1:f6:cc:ab:4a:e5:30:c9:5e:05:b5:
         5e:88:bf:76:1d:af:fc:0c:66:ae:1e:9e:20:37:b7:ca:86:76:
         78:15:e3:6b:42:22:f5:14:a5:08:38:df:8d:66:b5:90:31:66:
         7f:5c:10:67:ed:08:93:9b:9a:d1:fd:64:3f:65:c0:ee:a8:cf:
         5b:00:b6:c5:38:5e:fe:83:23:bc:d4:a9:82:60:2f:bf:8d:91:
         7b:55:fc:c3:87:ce:b0:b5:bf:32:a2:b0:40:81:f2:62:50:65:
         b8:6b:db:5b:92:0f:58:08:c0:37:74:97:88:c4:6b:70:f3:dd:
         22:0e:c9:fb:6b:b6:ef:98:6e:15:e1:e0:b4:d6:62:88:87:5b:
         39:b5:b1:55:e8:59:60:c2:bd:6c:f2:3a:c6:52:cd:aa:ec:e5:
         65:ca:c5:91:61:90:1c:65:3d:95:3c:c4:a1:f1:60:55:5a:62:
         98:da:1f:af:d3:d0:54:80:d8:cc:ab:ba:95:ee:92:8a:e2:1e:
         31:b9:6d:8b:ea:f4:61:4c:bb:82:78:fe:53:0c:eb:24:79:90:
         90:e6:0f:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 18:43:53 2024 by rpki-client on console-ams.rpki-client.org