Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/80a237cc-f6a0-3aab-b3a5-0e3a30d683db.roa
File:                     80a237cc-f6a0-3aab-b3a5-0e3a30d683db.roa (raw, json)
Hash identifier:          HQJIwZYTSK4oVaD24SUJe1kRai7BxN0dPfZoN4RhFCA=
Subject key identifier:   FE:1B:49:E6:CA:A3:C6:25:D5:9B:DC:BF:EE:EF:7B:28:69:98:D9:BF
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584765FF4EE932564F1AC3329CC0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/80a237cc-f6a0-3aab-b3a5-0e3a30d683db.roa
Signing time:             Tue 01 Oct 2024 16:11:00 +0000
ROA not before:           Tue 01 Oct 2024 16:11:00 +0000
ROA not after:            Mon 30 Dec 2024 17:11:00 +0000
asID:                     399153
IP address blocks:        2610:a1:3300::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Oct 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:65:ff:4e:e9:32:56:4f:1a:c3:32:9c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Oct  1 16:11:00 2024 GMT
            Not After : Dec 30 17:11:00 2024 GMT
        Subject: CN=68877271-0fd5-43b5-b398-76ba2bd95340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:26:1f:16:9f:90:5b:c6:18:98:13:e2:dd:3c:
                    29:3f:59:cd:b7:3c:7c:11:76:81:51:01:d5:f8:9a:
                    f4:a6:e1:3a:74:92:41:36:ed:08:52:58:a0:ed:4b:
                    1a:c3:52:62:dc:d4:fc:d4:7f:bf:2d:d4:e0:42:76:
                    0f:ac:9f:54:be:7f:d6:16:e5:d1:25:ed:88:f5:94:
                    df:7a:c6:7a:da:10:66:bc:03:3e:53:48:aa:78:c0:
                    e9:03:b9:12:5f:0a:91:57:e2:b1:6a:5b:9b:74:c3:
                    e9:5f:fc:06:03:fa:e2:47:ff:54:93:e3:cc:15:57:
                    34:2c:06:af:43:61:73:69:21:bf:60:0c:1c:60:4d:
                    8c:04:da:b0:a2:d9:2c:39:f2:2d:2e:58:5c:29:c0:
                    a8:1f:96:a3:7c:69:12:a6:77:1e:3c:c2:ed:02:33:
                    88:a5:43:c2:d3:6d:95:4c:da:c9:d3:fd:58:9a:7a:
                    98:bb:5d:96:68:87:ed:9d:3c:3a:cc:0b:11:6f:c1:
                    28:26:f7:52:49:16:1d:79:c4:79:89:f0:d3:8e:eb:
                    9e:56:71:90:09:5a:d4:6e:c5:e7:fe:b5:7b:c3:e5:
                    f5:c3:7c:7e:cc:3b:b7:c8:06:3f:3a:28:6d:e1:54:
                    98:80:16:a4:f8:28:22:e9:6a:a1:ec:a6:ae:15:5e:
                    62:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:1B:49:E6:CA:A3:C6:25:D5:9B:DC:BF:EE:EF:7B:28:69:98:D9:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/80a237cc-f6a0-3aab-b3a5-0e3a30d683db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:a1:3300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:70:fe:a5:0c:c2:ec:71:bc:2b:51:88:25:3f:a5:09:6a:1b:
         47:8e:c8:ca:44:66:93:3b:88:67:84:41:96:c6:18:69:42:c3:
         17:72:b9:97:63:aa:fa:ec:90:ac:f9:06:c2:78:bb:71:1f:a0:
         d4:66:13:c8:8a:e6:29:05:02:88:30:dd:02:62:b7:16:b2:46:
         8f:61:66:d1:b4:18:73:08:dd:60:cd:7e:c0:6c:0b:4d:63:c3:
         55:5e:e7:9c:8c:2c:af:50:ce:bb:51:39:6d:73:ff:a5:2f:5e:
         22:4b:95:d6:44:a5:65:b3:c8:7a:d1:bb:ed:04:d6:bd:90:c2:
         11:d6:46:13:77:cb:b5:42:5d:57:55:e0:7e:6b:55:41:f7:df:
         0a:af:ec:6a:6e:12:5a:a1:4e:a1:f8:b5:48:11:ca:a8:08:4a:
         d2:7f:e1:6e:1f:0e:9d:b6:4f:80:f3:4c:cf:b3:22:e9:3f:fe:
         3b:82:27:0f:3a:d7:9c:1e:90:e6:02:49:95:5a:22:ae:66:f9:
         d3:94:b3:78:39:ab:88:d1:56:0b:da:fd:6e:46:ab:36:88:e0:
         19:bc:88:e7:40:bb:43:f9:14:f5:0c:4d:9e:8a:f2:32:96:e2:
         7f:33:e4:eb:5d:02:d7:4d:db:86:c6:ed:7c:af:fd:a0:64:6e:
         ad:df:bb:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 18:47:31 2024 by rpki-client on console-fra.rpki-client.org