Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/20be478e-0aab-34ed-9839-01e6439a77d5.roa
File:                     20be478e-0aab-34ed-9839-01e6439a77d5.roa (raw, json)
Hash identifier:          jn40cD6mS1ARsyEHZt/uIgBIeUWin8S+8seMp49JEEo=
Subject key identifier:   CB:16:79:58:DF:9A:8D:81:49:72:0E:75:BE:20:26:3E:CC:96:30:68
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285847527C1501F0F5A685BBBF1280
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/20be478e-0aab-34ed-9839-01e6439a77d5.roa
Signing time:             Tue 24 Sep 2024 16:26:15 +0000
ROA not before:           Tue 24 Sep 2024 16:26:15 +0000
ROA not after:            Mon 23 Dec 2024 17:26:15 +0000
asID:                     397214
IP address blocks:        2001:500:3682::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:52:7c:15:01:f0:f5:a6:85:bb:bf:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 24 16:26:15 2024 GMT
            Not After : Dec 23 17:26:15 2024 GMT
        Subject: CN=3ce0bb5a-ca20-4109-a9da-7219d381a82e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:17:02:1f:d7:cb:77:e8:5b:43:c8:40:6f:1b:
                    bf:d4:72:e4:25:07:f9:94:02:80:e1:7a:c9:4b:80:
                    e6:be:6e:c9:d0:98:ab:b2:6a:76:49:7d:d1:6a:a9:
                    40:fa:46:66:05:fa:ec:77:47:97:14:7f:11:4c:d9:
                    ea:c7:41:db:58:b1:97:0f:0b:3f:f3:7d:03:ba:af:
                    83:24:1a:24:0d:25:90:18:85:ea:36:28:c2:82:d5:
                    1c:ac:30:28:95:b4:33:78:a1:82:08:27:d9:4e:4b:
                    e1:e8:34:30:eb:4d:79:e1:8a:c7:28:85:a6:99:13:
                    67:53:13:e8:ac:ef:0d:94:a0:90:d6:01:a2:b7:14:
                    a7:36:a4:25:a2:86:02:9e:64:d0:e4:67:88:fe:8b:
                    5b:78:36:18:9d:9d:8c:32:6a:13:dd:40:23:20:2a:
                    bf:1a:e9:dd:d7:79:22:f1:87:d3:53:55:cc:a0:af:
                    aa:0c:79:1a:18:d6:f8:65:d0:24:62:85:fe:e6:c5:
                    67:67:f7:90:33:ac:50:fb:84:83:cd:f4:0b:3b:ac:
                    ac:29:a5:31:ca:10:4a:4c:d7:7f:67:53:a4:b7:13:
                    21:df:ce:0d:f4:bc:68:cb:20:c3:97:ac:b3:a5:41:
                    14:26:36:43:ff:a3:f0:18:3a:82:9d:1e:29:36:f0:
                    6d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:16:79:58:DF:9A:8D:81:49:72:0E:75:BE:20:26:3E:CC:96:30:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/20be478e-0aab-34ed-9839-01e6439a77d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:3682::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:38:64:aa:e2:b4:bd:5b:b5:30:a3:6d:1d:52:d7:ed:f3:14:
         1e:de:b1:e0:b8:d4:74:63:43:30:21:6e:1a:79:3e:78:a8:28:
         e1:70:24:96:cd:b4:ce:ed:5f:93:81:c3:a0:d7:82:86:35:67:
         10:e8:bc:6b:fa:8e:54:b4:35:aa:cc:30:03:3f:e5:67:f6:d0:
         df:73:23:b9:71:37:4f:f7:b8:21:60:55:85:28:cd:a6:7b:24:
         d1:8a:41:51:21:f8:a8:5d:5b:91:12:5f:39:21:f5:2a:af:4a:
         b2:ec:93:ca:27:9f:7a:c1:72:f6:dd:72:91:7a:e7:5b:1e:61:
         f3:e8:16:c1:10:9e:74:a3:e7:f2:50:2c:f1:c5:b3:84:1e:00:
         27:22:88:56:37:5e:82:35:7c:fb:71:98:d7:fb:2d:f5:ce:bf:
         3d:66:e9:07:63:53:7a:07:5d:78:cc:42:29:6a:c1:b7:af:5b:
         95:e1:99:76:28:57:7c:11:1a:2d:f4:79:a7:06:58:cc:11:97:
         ab:2f:ab:99:90:de:ec:65:c5:a2:c7:ea:a1:ad:5e:76:a7:39:
         22:a6:5b:89:98:f9:77:59:2e:e6:13:32:ae:37:02:8e:5d:5f:
         32:a4:2c:18:70:ce:4c:b8:74:e7:04:fc:0d:fc:a2:39:76:44:
         0d:32:4f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:30:53 2024 by rpki-client on console-ams.rpki-client.org