Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/09bf9db5-cf5a-36c2-b82b-a6dd9872cecc.roa
File:                     09bf9db5-cf5a-36c2-b82b-a6dd9872cecc.roa (raw, json)
Hash identifier:          Q66MkNoGHFvbdkKLd4i8bK1++6o0T83++ts/X/845cM=
Subject key identifier:   29:91:B0:84:5C:EC:FC:03:79:95:75:E3:36:DC:33:6C:2B:F6:B1:85
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285847527C1628DBE168390A5A5500
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/09bf9db5-cf5a-36c2-b82b-a6dd9872cecc.roa
Signing time:             Tue 24 Sep 2024 16:26:15 +0000
ROA not before:           Tue 24 Sep 2024 16:26:15 +0000
ROA not after:            Mon 23 Dec 2024 17:26:15 +0000
asID:                     397231
IP address blocks:        2001:500:3682::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Oct 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:52:7c:16:28:db:e1:68:39:0a:5a:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 24 16:26:15 2024 GMT
            Not After : Dec 23 17:26:15 2024 GMT
        Subject: CN=9d083923-57f7-4ff4-95d3-8251f89cf8a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:08:c5:19:6a:e9:e0:8e:d6:3d:5b:64:76:92:
                    dd:65:c9:f2:e6:ab:e1:7d:f7:ef:dc:cf:e9:1e:0d:
                    93:12:a8:57:ce:60:18:de:34:13:12:d5:41:88:89:
                    b4:0e:f5:a0:2d:1f:1b:b2:2a:2b:29:53:bf:19:37:
                    a3:0b:77:73:a8:52:37:97:01:42:8f:34:a3:97:82:
                    28:38:59:25:5f:80:d6:71:35:7d:bc:5e:23:72:89:
                    9a:dc:34:7f:2c:2e:cd:d7:ea:2a:08:90:ca:b4:dd:
                    5d:09:a2:16:d5:1a:22:62:ea:a4:ff:0b:3e:a9:99:
                    00:11:ed:79:c4:33:c7:8a:ad:ee:29:b2:06:7a:25:
                    12:25:20:c4:29:bc:3b:b4:97:47:18:d6:44:ec:9d:
                    f3:bf:05:a1:31:9e:82:20:35:ec:0d:26:ef:6c:c4:
                    46:27:fb:dd:e2:0f:ab:d7:f0:37:7e:67:ff:a7:a9:
                    6e:bd:51:6c:4c:a8:6c:ab:1b:f4:39:dc:5d:69:17:
                    5a:75:1d:5b:45:68:5d:b6:10:be:b3:37:4b:01:99:
                    eb:c0:b3:24:6c:d2:cc:5c:82:bc:b1:bb:68:6e:05:
                    ce:f6:9f:56:8b:76:dd:d4:3c:5f:57:20:03:62:17:
                    e9:75:9b:37:10:e5:2e:12:ae:05:a2:2e:bd:ef:ea:
                    a7:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:91:B0:84:5C:EC:FC:03:79:95:75:E3:36:DC:33:6C:2B:F6:B1:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/09bf9db5-cf5a-36c2-b82b-a6dd9872cecc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:3682::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:fa:4d:ed:9f:55:c7:5a:32:ab:c5:7d:ae:d2:42:79:62:f3:
         12:05:46:6f:b9:cf:9a:f2:fb:b5:17:6a:7e:4c:be:11:33:e8:
         d2:e3:5e:23:1c:0f:7c:00:2e:ae:6d:12:8d:f5:e0:c0:09:1e:
         21:6a:71:fb:f9:9c:9e:d3:c4:99:a0:20:0e:2c:ba:95:70:56:
         43:0b:6d:d3:98:8b:42:89:5b:81:08:de:ec:17:a1:ac:2f:88:
         a5:4b:ff:f7:e5:7b:2c:f1:22:59:af:02:d1:28:51:d6:d0:23:
         22:98:e6:2a:ff:a7:fb:5e:e2:5e:15:e0:69:fc:6f:3d:a0:9c:
         8d:74:02:c6:25:12:c7:2f:f9:4d:56:fa:a5:28:cf:af:ff:bd:
         71:1c:66:5f:1a:77:41:8a:bf:b5:89:4a:2f:ed:dc:74:a0:bf:
         71:53:72:78:80:45:2d:3d:88:74:b1:de:de:c4:c1:64:6f:50:
         40:40:4a:01:f8:69:63:0a:2d:b5:b7:1e:84:db:69:65:f1:94:
         5b:83:5c:ef:e4:11:8f:a7:3a:f0:86:e6:d3:26:c5:09:91:5f:
         c1:fd:53:cf:f3:ff:f2:48:29:51:06:22:17:80:47:26:8d:f7:
         59:77:b1:32:cd:0b:0b:7f:ad:d4:81:e8:b2:97:4c:37:ff:c6:
         6f:b2:0b:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 18:47:24 2024 by rpki-client on console-fra.rpki-client.org