Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26/a8bce116-f9c1-3ab1-a05b-f6475a01916a.roa
File:                     a8bce116-f9c1-3ab1-a05b-f6475a01916a.roa (raw, json)
Hash identifier:          nNSoUlKzSPLLkQbE1ehSXmz4epMVQA9Q5ve+tox9jFM=
Subject key identifier:   96:AF:31:A8:2F:84:B3:8C:8A:64:EA:91:96:A1:15:CA:53:55:1C:58
Certificate issuer:       /CN=9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26
Certificate serial:       010D0C9F43285847A5D6A521EA41F270A374C8A0
Authority key identifier: 74:72:3E:BF:C2:5D:67:28:C0:C1:10:60:A7:68:80:8F:9E:BA:5C:50
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26/a8bce116-f9c1-3ab1-a05b-f6475a01916a.roa
Signing time:             Thu 24 Oct 2024 13:00:42 +0000
ROA not before:           Thu 24 Oct 2024 13:00:42 +0000
ROA not after:            Wed 22 Jan 2025 14:00:42 +0000
asID:                     54098
IP address blocks:        2607:2740::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a5:d6:a5:21:ea:41:f2:70:a3:74:c8:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26
        Validity
            Not Before: Oct 24 13:00:42 2024 GMT
            Not After : Jan 22 14:00:42 2025 GMT
        Subject: CN=6b1b69ac-dce1-432f-b57c-0daf2e582292
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:be:e2:c7:21:39:20:71:46:a0:07:3a:39:09:
                    8b:ea:77:dd:48:dd:2a:c7:16:bf:ae:26:bc:c8:1a:
                    9e:f6:7a:a0:fe:4e:12:4a:2b:b6:90:a6:fd:91:dd:
                    45:21:1f:1d:52:7a:09:2d:d1:f9:55:f5:e0:69:d7:
                    b1:c7:47:7b:36:0e:93:59:64:0c:e5:de:4d:d5:82:
                    c7:e6:ff:f3:9a:01:4a:98:78:85:58:f8:1b:2f:66:
                    3a:83:53:86:d6:63:5f:e3:63:4a:2e:a9:63:19:4b:
                    ea:0e:86:a4:ac:33:3f:0d:b6:75:45:c9:a0:fa:2c:
                    58:51:b8:e3:85:34:91:e7:39:44:7c:d0:05:59:df:
                    96:f9:0e:a9:c2:2b:11:a3:cb:de:e2:ae:8b:50:e4:
                    ef:19:0e:f3:93:dc:33:ab:55:a4:5c:aa:33:4f:2a:
                    c9:20:7e:a9:37:16:d1:bc:22:95:c4:fd:2b:b7:a8:
                    d4:5c:34:71:7b:cd:9e:d9:8e:51:fe:5b:aa:cc:ee:
                    d5:c6:53:a3:70:bc:a1:6f:b0:cf:32:e9:d7:11:ee:
                    34:5f:79:74:bf:8e:0d:b3:81:d6:6a:fd:98:7a:7a:
                    de:cb:38:d5:f9:8e:18:57:84:ac:f0:b7:29:48:bc:
                    77:21:ca:26:da:8b:8a:ba:f9:90:5c:fe:a6:0f:31:
                    fd:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:AF:31:A8:2F:84:B3:8C:8A:64:EA:91:96:A1:15:CA:53:55:1C:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26/a8bce116-f9c1-3ab1-a05b-f6475a01916a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26.crl

            X509v3 Authority Key Identifier:
                keyid:74:72:3E:BF:C2:5D:67:28:C0:C1:10:60:A7:68:80:8F:9E:BA:5C:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:2740::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:5f:96:be:d5:af:4d:4c:d1:d4:da:63:4e:8f:25:6f:5f:cc:
         32:88:74:7b:8e:11:76:38:f5:db:0a:76:9a:76:15:67:69:fd:
         28:00:fb:53:22:e9:05:48:bc:0d:5f:e7:1b:90:0d:a1:90:e5:
         98:42:b8:af:90:2d:fe:51:9f:f1:ae:16:3e:54:2c:7e:85:b5:
         87:cf:a6:2b:bc:10:e1:48:a6:f8:70:b6:a4:89:e3:43:5c:b2:
         a2:a1:30:f7:ca:7a:42:64:36:5b:4d:54:b0:76:37:8f:60:62:
         38:62:a7:3e:7b:ba:b9:18:09:83:31:0a:24:7b:8c:1f:96:40:
         43:dd:d8:6e:40:14:04:d8:62:de:ff:0e:27:48:ed:31:94:cc:
         17:00:2f:66:12:db:16:9d:eb:ab:6c:b0:f9:46:26:88:71:25:
         33:4c:94:e7:f3:7d:34:84:cf:50:7e:f6:45:ce:64:51:96:bd:
         87:18:37:f3:d8:dd:95:d2:80:fa:7c:23:5b:e3:ee:25:d6:13:
         1b:ea:18:bc:08:fd:15:b9:11:04:2b:3a:fc:f7:bc:97:2e:6b:
         bd:63:43:64:79:6d:f9:71:20:15:16:b8:95:41:5a:7f:18:eb:
         33:79:67:c4:8f:07:a5:24:f5:83:ed:f7:0a:93:c2:fa:7c:ff:
         bf:e4:3c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 07:01:54 2024 by rpki-client on console-fra.rpki-client.org