Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/88758dac-1644-3cb7-bba8-fd7423d915a7.roa
File:                     88758dac-1644-3cb7-bba8-fd7423d915a7.roa (raw, json)
Hash identifier:          GQKr+gAh8G9rZF9OqezG2pX7nfOOSDr0Jzkdk/9xBzg=
Subject key identifier:   D1:12:BE:A7:0E:3A:FD:2C:24:69:F1:97:08:44:B4:B5:5A:89:96:59
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285847527C11F5DBDE26B2B5C31B80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/88758dac-1644-3cb7-bba8-fd7423d915a7.roa
Signing time:             Tue 24 Sep 2024 16:26:13 +0000
ROA not before:           Tue 24 Sep 2024 16:26:13 +0000
ROA not after:            Mon 23 Dec 2024 17:26:13 +0000
asID:                     397235
IP address blocks:        2610:a1:1000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Oct 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:52:7c:11:f5:db:de:26:b2:b5:c3:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 24 16:26:13 2024 GMT
            Not After : Dec 23 17:26:13 2024 GMT
        Subject: CN=32733d51-2986-46d0-89fe-ac22ecf3c3fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:76:24:50:ba:08:25:b9:7d:f2:b7:6b:74:a0:
                    68:31:d0:82:29:88:cd:56:65:a8:f0:d7:5b:c7:0d:
                    22:81:58:e0:14:2e:60:52:d6:f6:0a:7c:8e:45:49:
                    ce:29:41:45:3a:e4:7a:3c:77:d3:f4:61:31:ea:38:
                    21:63:4a:62:ff:82:3d:05:63:d7:a1:28:c4:f8:dd:
                    cb:0d:f2:03:55:cc:df:40:c6:52:0c:20:13:bc:05:
                    03:22:99:62:94:62:69:f9:a6:37:87:c0:32:94:01:
                    53:4b:89:a8:74:39:90:4b:a5:90:79:02:17:97:16:
                    04:49:52:9f:91:8f:04:39:b7:11:53:53:3d:d3:5a:
                    9d:34:6f:b5:34:65:53:c0:db:7e:ff:0b:be:fd:7a:
                    45:fe:1f:a5:d1:b8:19:70:d2:5f:dd:a7:32:65:dd:
                    ff:bb:8b:9c:f6:af:50:67:e0:49:e4:19:d0:63:1f:
                    38:b6:8c:99:c6:07:9d:f3:4d:24:20:91:ed:f6:df:
                    f3:99:d0:43:56:c5:45:e8:b9:f0:f3:5d:3c:41:82:
                    55:b1:7b:e2:76:74:c5:4b:52:36:6d:e6:84:7c:fe:
                    13:ed:5a:13:35:c1:8c:37:3c:3a:7e:67:93:08:22:
                    f0:dd:af:f2:77:5b:e2:7d:9c:7b:af:1a:12:ee:36:
                    22:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:12:BE:A7:0E:3A:FD:2C:24:69:F1:97:08:44:B4:B5:5A:89:96:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/88758dac-1644-3cb7-bba8-fd7423d915a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:a1:1000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:21:0b:1b:b4:cd:35:f0:27:0d:25:8c:03:e1:e8:d9:a7:91:
         16:fb:63:8f:a4:61:c8:c5:b3:30:15:68:27:14:c4:1d:b5:f5:
         41:6e:79:38:69:13:e3:d9:29:67:48:66:f9:5a:6c:f8:39:4b:
         b3:f4:6a:f0:b4:23:c9:8b:39:a5:3c:d1:0e:1f:11:09:e2:c6:
         87:15:00:e2:0a:6d:58:d1:89:41:24:3e:54:c5:cd:36:af:de:
         1c:3d:e3:ac:00:aa:47:93:24:57:5f:d5:e9:f8:d6:a5:7a:d1:
         e3:82:c0:70:3f:a6:74:b7:12:25:4b:ff:38:f9:ee:59:a9:8e:
         8c:f9:7d:ef:11:83:74:c6:6d:2b:8e:b2:fc:75:05:c0:1e:dc:
         df:1e:2c:83:11:ed:23:f2:db:cd:67:bb:2c:1b:8f:f7:ba:7d:
         40:0e:25:5c:d5:26:e6:5f:2c:43:f0:61:f0:dc:03:ea:5c:4b:
         ad:a9:79:ff:d1:16:eb:e0:c8:c5:11:16:fb:ef:49:20:fc:56:
         d9:a5:28:64:2f:a3:75:9e:23:7b:fd:c1:bc:ff:8b:c9:c6:cd:
         61:09:f4:36:12:b7:d4:08:32:60:7e:8d:6a:03:38:7e:70:a5:
         b6:4e:a8:a2:e9:60:83:a4:f3:45:9a:ff:70:e1:5c:2e:5d:f6:
         ed:fd:9e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 18:47:32 2024 by rpki-client on console-fra.rpki-client.org