Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/92c1cb93-0047-3ead-a242-787bb2bfc6bf.roa
File:                     92c1cb93-0047-3ead-a242-787bb2bfc6bf.roa (raw, json)
Hash identifier:          S+pNjtQcr9+6myAZnAP44hTpsGWLbgNUh+C6mv/lF6Y=
Subject key identifier:   5A:F4:85:3A:8E:B6:B5:F9:22:22:58:A1:18:CA:E3:91:B8:1F:72:AF
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584765FF4EC67B038F4FB970DC04
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/92c1cb93-0047-3ead-a242-787bb2bfc6bf.roa
Signing time:             Tue 01 Oct 2024 16:11:00 +0000
ROA not before:           Tue 01 Oct 2024 16:11:00 +0000
ROA not after:            Mon 30 Dec 2024 17:11:00 +0000
asID:                     397242
IP address blocks:        2610:a1:3300::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:65:ff:4e:c6:7b:03:8f:4f:b9:70:dc:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Oct  1 16:11:00 2024 GMT
            Not After : Dec 30 17:11:00 2024 GMT
        Subject: CN=aadc3e26-785b-4df7-b83e-938d24f80ce6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:bc:6e:22:9a:dd:74:c2:92:a6:bc:0b:41:77:
                    33:1a:e3:b0:37:cc:9d:4f:e0:83:02:ec:6c:d6:d2:
                    56:d2:77:f8:9e:f2:a4:3b:22:c8:2b:e1:df:5a:96:
                    d6:af:35:ae:52:71:60:5a:64:85:02:fd:7f:84:8e:
                    49:a3:b8:78:b8:5a:4e:22:32:59:b7:cd:a6:67:e0:
                    87:df:e2:15:6e:d7:d1:c7:d7:df:b1:47:a0:eb:17:
                    10:60:69:47:f4:a5:3a:e2:a8:1a:df:03:c2:e0:5d:
                    18:49:cb:b6:b0:68:2f:fd:69:bc:b0:f2:b0:ea:7c:
                    19:0a:3a:d4:e9:2d:aa:f6:50:8c:4f:c2:47:44:f9:
                    4c:ae:b2:bf:bb:b3:85:63:49:eb:a3:f5:5c:9b:75:
                    e8:3e:1d:49:af:ba:6e:c5:00:e2:2b:67:42:9f:af:
                    45:14:97:91:9b:a7:d6:dd:1c:54:c4:5b:7b:c2:6c:
                    79:2f:6c:9e:d8:bb:f5:81:19:ae:fa:70:f4:d4:8b:
                    e7:de:1b:54:c1:64:ec:7e:d5:9a:5b:50:68:85:b6:
                    ba:ff:4f:87:dd:69:77:62:7c:6b:34:d2:b1:30:4f:
                    bd:47:82:bc:59:05:34:31:bd:9b:e3:6f:39:cb:cb:
                    ae:98:35:55:29:cd:a6:2c:90:84:dd:f0:8d:2d:30:
                    67:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:F4:85:3A:8E:B6:B5:F9:22:22:58:A1:18:CA:E3:91:B8:1F:72:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/92c1cb93-0047-3ead-a242-787bb2bfc6bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:a1:3300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:64:c7:d5:dc:39:1b:c8:14:40:57:1f:14:a3:a7:29:0a:d6:
         76:e3:8a:10:ca:b3:62:2e:fc:e9:0f:99:1d:53:13:9f:ca:88:
         24:0a:5d:b3:15:9e:7c:df:6b:56:5f:06:5d:b3:12:e6:2c:82:
         4c:d1:b5:d5:bd:bb:1a:3d:4e:f4:82:b8:37:73:bd:79:cc:b9:
         6c:b6:0b:d6:61:65:2c:2f:79:0b:23:ed:7b:e4:b8:2d:e2:a0:
         97:0e:4d:1d:88:9d:c5:0a:7b:5a:b8:88:3c:3c:5d:a5:f0:70:
         99:c8:ad:87:bd:4c:f4:4b:2c:3e:07:72:df:b1:78:d3:41:09:
         09:54:95:44:ef:68:a2:f9:3e:ad:16:5a:89:60:66:84:93:fb:
         b8:c6:b8:57:d8:d9:9c:74:5c:c0:a9:91:57:a6:b4:bd:29:d1:
         26:91:65:d8:b2:46:95:2b:bb:e4:b3:0b:2f:62:67:96:1a:d7:
         9c:bb:64:72:b9:76:18:1d:d7:4f:c1:3d:87:c8:8f:f8:29:d2:
         7f:12:d7:b5:a3:14:da:7b:01:38:71:b7:e6:80:ac:ca:54:62:
         6a:25:e5:fb:20:03:4c:71:a6:84:27:89:54:f1:b8:1b:93:7b:
         26:98:e8:84:81:9e:a9:22:93:16:9a:ad:70:65:55:b6:68:5b:
         00:18:e4:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 20:18:55 2024 by rpki-client on console-fra.rpki-client.org