Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/15659ee5-dcb0-3023-9e26-dac8c2e072c6.roa
File:                     15659ee5-dcb0-3023-9e26-dac8c2e072c6.roa (raw, json)
Hash identifier:          iXbXLeEPucKcBhNm2KlUIWV2hoUEOCdiKDQV8rq5wNE=
Subject key identifier:   08:D0:0B:3C:57:6D:B1:7C:85:6C:AA:67:4C:2A:6C:F0:3D:0A:EF:FA
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285847527C20AABEDA426DA1FDC940
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/15659ee5-dcb0-3023-9e26-dac8c2e072c6.roa
Signing time:             Tue 24 Sep 2024 16:26:20 +0000
ROA not before:           Tue 24 Sep 2024 16:26:20 +0000
ROA not after:            Mon 23 Dec 2024 17:26:20 +0000
asID:                     397241
IP address blocks:        2001:502:ad09::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Oct 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:52:7c:20:aa:be:da:42:6d:a1:fd:c9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 24 16:26:20 2024 GMT
            Not After : Dec 23 17:26:20 2024 GMT
        Subject: CN=8bd14786-06cd-41f8-8810-c08c1ced3590
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:85:47:6f:ac:48:d2:d5:24:13:8f:de:0b:bd:
                    55:a3:3e:45:d1:d9:6d:92:16:f2:8a:3a:12:06:c8:
                    49:90:68:59:97:d2:4b:f6:47:73:a1:b8:30:e1:97:
                    41:87:0d:a5:9f:2b:c4:f7:ed:9b:a8:5d:1c:b7:3d:
                    a8:5e:97:90:9e:56:2d:92:a7:3c:26:39:f3:f7:0a:
                    88:3b:cd:22:9e:88:80:38:95:19:cc:ec:12:ab:dc:
                    7c:b7:fb:88:62:fa:e9:a3:04:6c:90:0e:7f:96:33:
                    2e:47:95:87:5d:54:e5:59:61:d3:62:56:a8:ed:f6:
                    c2:d0:7c:1d:ed:c7:27:58:59:ad:a8:da:8a:a2:0e:
                    22:5b:aa:cd:53:6e:de:9c:ed:59:ea:7e:6b:ea:e7:
                    a3:52:2c:cd:51:76:36:38:0c:2a:4e:eb:83:6c:db:
                    b0:82:28:3c:d1:c1:df:97:8a:7f:e3:3e:65:b3:cf:
                    fe:46:c4:22:8e:d0:28:a1:c9:4d:7f:2a:70:71:58:
                    da:e1:1d:96:2a:a2:2e:28:29:26:3d:35:37:5e:6d:
                    97:ac:aa:a3:a1:45:af:56:4c:be:0a:08:1f:3f:7d:
                    50:52:ff:d1:26:af:fc:fd:81:85:c5:15:61:c7:87:
                    87:a0:2c:84:64:1c:4c:2b:d8:84:c5:c1:e1:fa:17:
                    44:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:D0:0B:3C:57:6D:B1:7C:85:6C:AA:67:4C:2A:6C:F0:3D:0A:EF:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/15659ee5-dcb0-3023-9e26-dac8c2e072c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:ad09::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:05:dc:8a:8a:64:7b:99:68:09:4d:5c:dc:10:d2:82:d5:6e:
         5e:d1:30:74:63:8a:08:38:66:76:86:b4:20:b8:92:7e:63:d0:
         29:61:31:c9:ad:48:57:c4:45:a1:53:44:a2:a3:13:a4:c4:81:
         46:aa:7b:11:3c:0e:2c:fd:99:e6:bd:ed:a4:61:bc:30:04:d5:
         ec:9e:31:ea:f1:98:48:57:f6:72:b1:7e:7b:96:39:c7:94:8c:
         58:17:3a:40:a3:00:03:62:76:ed:d8:34:49:2b:26:87:a0:66:
         fb:49:c5:9e:27:3a:f2:a8:db:b5:3c:70:7f:f7:d3:e6:7f:76:
         49:fc:c0:cc:d1:31:bb:29:a8:1c:75:d2:70:69:3a:74:bd:88:
         53:14:f5:dd:62:0f:5d:e5:5a:1f:d2:c8:86:14:f4:21:26:79:
         6d:14:eb:cb:4d:41:80:e2:cb:41:42:07:2e:90:ce:dc:8f:5c:
         ac:cc:9b:f3:8a:4c:b7:77:2e:3e:6c:22:26:97:77:eb:db:97:
         03:6c:fd:cd:6e:36:b0:38:35:29:7e:69:0e:a9:d1:bb:b3:21:
         4e:59:07:20:b7:fc:06:07:7a:69:78:c0:48:98:98:9e:20:c1:
         73:d7:7d:22:fb:27:07:d6:44:45:3c:dc:1e:4f:ca:3d:6e:a1:
         1d:b4:55:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 18:47:25 2024 by rpki-client on console-fra.rpki-client.org