Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1ddffba0-3e53-333f-853a-e50b07b5c118.roa
File:                     1ddffba0-3e53-333f-853a-e50b07b5c118.roa (raw, json)
Hash identifier:          MWXgBTvCgPCloxZxOyovHxi7CjuN4UzsolZwtYNdt5s=
Subject key identifier:   1B:0B:CC:D4:EA:FD:3B:EB:B7:9F:AA:7C:09:72:E0:6D:E2:D9:23:8D
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584765FF4F2E0FAA0CE9A462A700
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1ddffba0-3e53-333f-853a-e50b07b5c118.roa
Signing time:             Tue 01 Oct 2024 16:11:01 +0000
ROA not before:           Tue 01 Oct 2024 16:11:01 +0000
ROA not after:            Mon 30 Dec 2024 17:11:01 +0000
asID:                     399157
IP address blocks:        2610:a1:3300::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:65:ff:4f:2e:0f:aa:0c:e9:a4:62:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Oct  1 16:11:01 2024 GMT
            Not After : Dec 30 17:11:01 2024 GMT
        Subject: CN=d0003b34-7554-43a1-a5ba-8989e83c0754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f2:8f:dc:02:72:29:0e:b9:1e:7a:c0:2d:d0:
                    d4:c9:6e:dc:b3:77:83:a4:d1:52:7d:9b:8a:41:9c:
                    9a:f9:5c:c1:ec:5f:ba:94:bf:ec:65:7d:fb:d9:de:
                    6b:b4:9a:9a:e1:fd:b7:98:eb:5e:c8:f5:a7:3a:69:
                    ed:cc:7a:be:4d:6d:32:bb:9a:df:51:33:dd:1b:bf:
                    72:5d:25:ea:8a:1e:8a:78:72:f7:67:f1:41:9e:66:
                    5f:85:47:ae:e1:12:94:10:2f:95:55:cf:49:0e:35:
                    82:8a:00:53:4c:bb:92:3d:8a:8f:4b:17:cc:a4:2f:
                    17:83:a8:b3:38:0a:d9:bf:e9:4f:e2:79:bf:0f:f3:
                    26:5e:be:51:69:66:cb:49:08:d9:5f:11:bc:1d:30:
                    e1:6b:54:c4:b3:b3:1e:69:fb:50:23:e2:e0:06:15:
                    2c:76:82:fd:86:8b:81:46:52:69:e4:ed:7a:2f:08:
                    e3:2b:64:6a:f8:de:3b:9d:78:9d:59:0a:9c:0f:ac:
                    5f:b1:b4:f3:6f:94:7d:6e:53:d0:28:6a:ef:b4:ee:
                    52:66:1c:76:f1:8f:85:38:91:cb:b0:9f:ca:76:b5:
                    58:59:96:7b:7d:66:de:9b:0b:a9:9c:8a:86:4f:86:
                    83:51:78:28:d2:e3:68:9c:38:59:b4:23:1a:80:1c:
                    d9:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:0B:CC:D4:EA:FD:3B:EB:B7:9F:AA:7C:09:72:E0:6D:E2:D9:23:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1ddffba0-3e53-333f-853a-e50b07b5c118.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:a1:3300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:0e:ef:f5:0a:3c:9e:4c:ab:5e:08:01:70:1f:e7:c5:3c:29:
         f1:a1:48:c8:74:97:74:d5:d1:8f:ac:1c:86:c9:df:da:24:3e:
         35:d4:4e:72:0c:30:e0:f9:f4:97:5f:cf:1c:7a:e5:32:f2:11:
         fa:63:a7:a8:4b:02:c0:34:81:fb:41:b6:ef:e3:3d:8c:ae:44:
         1b:23:f9:ee:5d:1d:87:fe:03:23:b8:f5:32:42:da:ee:75:a1:
         22:07:6f:b3:83:80:b6:eb:8a:e0:37:c9:6b:1a:5b:86:17:7b:
         82:97:45:6f:b0:4a:65:c2:48:25:d3:c4:b1:a0:23:1b:5c:ed:
         d7:d0:b8:42:1e:ef:62:f3:11:3a:ac:f2:b7:18:83:8b:15:41:
         45:eb:8e:bf:ef:6e:1e:5b:a9:df:df:dc:68:51:0d:cf:77:16:
         6d:ef:10:91:b4:98:d1:64:28:84:db:44:5b:60:ce:51:40:5a:
         81:e1:3b:77:b3:dd:40:c9:e9:86:de:1b:e6:86:eb:6d:ed:fa:
         68:25:8e:0c:36:58:7d:6c:48:96:97:45:7d:1e:2d:a5:34:5d:
         96:bb:7a:12:ba:d9:93:7f:54:58:9e:42:a0:a6:14:89:0c:a4:
         52:3d:a5:2e:0c:ec:3e:7b:5c:42:90:d1:5d:2d:01:9a:58:44:
         e5:a3:13:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 07:01:58 2024 by rpki-client on console-fra.rpki-client.org