Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6fee5bbd-f96a-3995-b189-134429e99cd1.roa
File:                     6fee5bbd-f96a-3995-b189-134429e99cd1.roa (raw, json)
Hash identifier:          /SvR+6iAlJgKXJE/Pz3PWUmY2BUF9+X5PZJbj26OdTk=
Subject key identifier:   4D:59:1F:C8:8C:F9:34:7D:78:0F:1C:5D:4C:38:94:EF:F7:6D:B6:8E
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584765FF4B9A6F0C2DE6148CDBC0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6fee5bbd-f96a-3995-b189-134429e99cd1.roa
Signing time:             Tue 01 Oct 2024 16:10:59 +0000
ROA not before:           Tue 01 Oct 2024 16:10:59 +0000
ROA not after:            Mon 30 Dec 2024 17:10:59 +0000
asID:                     399155
IP address blocks:        2610:a1:3200::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Oct 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:65:ff:4b:9a:6f:0c:2d:e6:14:8c:db:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Oct  1 16:10:59 2024 GMT
            Not After : Dec 30 17:10:59 2024 GMT
        Subject: CN=af30dd7a-3cfd-433e-ad88-a0e8781baa32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:3c:a9:f5:3d:d6:a0:cf:c5:eb:27:ce:66:3f:
                    ac:e1:18:4d:6f:37:fa:f5:8d:af:dc:a4:05:0b:68:
                    c8:d0:27:2d:36:23:d9:f0:f3:8d:7b:39:9b:52:4c:
                    e9:30:e6:4a:83:52:ac:ce:86:ed:50:2a:db:79:11:
                    00:cd:8a:ba:fc:c1:d8:46:f8:46:69:63:f4:1c:4a:
                    c7:25:85:b9:00:bc:3f:8f:d8:1e:f5:a5:e3:07:af:
                    1c:0d:94:58:84:48:f5:dd:65:38:3b:ad:34:8f:10:
                    c0:ae:6c:06:46:fa:be:57:e9:e2:36:6f:0b:83:aa:
                    a6:a5:e6:f5:66:20:3b:af:83:af:44:51:0c:2b:d6:
                    62:b5:93:b9:b4:c5:a9:44:c5:22:b8:14:9c:43:36:
                    fb:f8:50:c8:9f:a2:d8:bf:3e:89:3b:cc:63:e0:e7:
                    6c:e8:dd:d1:fd:00:43:0d:cb:2b:6a:ba:c4:69:51:
                    30:f5:0a:fb:5e:4d:c8:09:fb:a6:c5:19:e4:c5:5b:
                    37:ce:61:41:38:c0:cb:86:c4:df:df:89:48:b5:50:
                    74:4f:72:0c:ed:4e:52:93:66:84:df:4e:e0:37:19:
                    2c:db:3b:e6:62:68:b1:dc:f7:00:ae:a3:69:95:7e:
                    8f:59:46:4e:93:dc:9c:83:1b:63:95:6d:16:25:11:
                    d9:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:59:1F:C8:8C:F9:34:7D:78:0F:1C:5D:4C:38:94:EF:F7:6D:B6:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6fee5bbd-f96a-3995-b189-134429e99cd1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:a1:3200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:61:1d:aa:33:48:28:3f:18:9c:e3:5f:9d:26:7d:c8:64:53:
         e8:83:d2:87:c1:5f:2b:f6:7d:01:4b:99:06:87:76:68:8e:a6:
         49:e3:a5:ad:44:6f:d6:12:25:79:8e:cd:e4:bf:47:38:66:ff:
         42:ed:93:24:aa:5e:70:ef:df:fa:05:b8:a5:58:5d:ea:03:ee:
         b6:22:1a:b6:79:8b:a4:70:35:6e:57:73:5a:8c:b5:93:b4:87:
         9b:51:dc:97:65:1c:20:12:7b:d6:fe:86:c2:2e:3d:ed:2d:a1:
         12:57:6e:ee:e9:2d:2e:09:84:81:a3:88:a9:e4:03:b1:c6:c0:
         cd:50:44:67:c1:a3:f8:8a:1b:1b:e4:ce:a7:19:52:5c:c8:80:
         64:1e:e6:68:d3:1f:a4:c5:b2:21:2b:6c:41:65:ee:fc:48:cc:
         0f:27:d1:ac:61:24:01:a9:35:be:22:ed:06:30:a6:8b:35:d5:
         c3:5f:f0:1f:86:f0:12:b8:f0:fb:78:41:f2:e0:d4:b3:82:80:
         4a:2c:80:5f:df:0d:82:1a:9c:c2:8f:00:3b:1d:d4:ef:36:18:
         4b:3d:68:7d:8c:67:5a:66:7e:14:0f:41:77:ae:6b:31:90:fa:
         b0:e0:c5:18:5d:de:8e:2c:d7:a5:a0:94:5f:36:f4:8d:65:d3:
         9f:1c:c1:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 18:47:30 2024 by rpki-client on console-fra.rpki-client.org