Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/981f4e6f-86f4-3bd1-bba0-b1d2e65c6ac7.roa
File:                     981f4e6f-86f4-3bd1-bba0-b1d2e65c6ac7.roa (raw, json)
Hash identifier:          XwT52iYMLzZoFFB9+TKD6ingCMIiekKnCwkfA4MzI5Q=
Subject key identifier:   9C:82:8B:25:64:A2:E0:1D:37:04:93:A6:91:4A:12:DB:E1:5D:A8:4D
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285847527C1B6ADD5B924BAB01EE40
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/981f4e6f-86f4-3bd1-bba0-b1d2e65c6ac7.roa
Signing time:             Tue 24 Sep 2024 16:26:18 +0000
ROA not before:           Tue 24 Sep 2024 16:26:18 +0000
ROA not after:            Mon 23 Dec 2024 17:26:18 +0000
asID:                     397239
IP address blocks:        2001:502:2eda::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Oct 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:52:7c:1b:6a:dd:5b:92:4b:ab:01:ee:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 24 16:26:18 2024 GMT
            Not After : Dec 23 17:26:18 2024 GMT
        Subject: CN=132fb605-2ecc-4ef4-961c-b2ae0c1220ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:6c:36:e8:e0:1a:d9:69:d6:ef:73:29:d4:1e:
                    a0:69:31:44:34:f6:7d:94:cc:53:fd:4d:f4:e0:9b:
                    df:cb:b4:5b:6b:2d:71:08:73:e1:2d:8d:68:ed:7c:
                    09:81:0d:88:31:21:f0:cb:6c:65:b1:17:7d:89:9a:
                    67:23:52:42:82:78:96:a7:33:72:f7:eb:e2:14:4b:
                    bf:0b:4a:be:21:4d:f9:5c:1f:74:b4:36:29:cc:f8:
                    c2:9b:0f:76:60:2c:f3:56:31:da:31:9c:6b:54:91:
                    7b:11:91:4f:34:5d:57:5c:b4:1c:49:af:a3:51:46:
                    2e:06:6f:de:e3:e8:31:6c:5b:74:3c:ca:31:e7:47:
                    cf:af:50:38:40:ae:55:cb:8b:5f:7b:84:d1:b1:b0:
                    6c:b3:58:a1:5c:df:7a:a1:be:44:ea:a1:fc:54:4a:
                    d7:44:92:bf:5f:95:2c:a1:cd:a7:63:1a:e0:52:b4:
                    a5:05:25:40:9c:a1:f8:b8:86:55:74:2c:cd:33:91:
                    6a:03:0e:71:a6:e5:9b:e6:23:7a:d2:86:32:b8:98:
                    6e:13:aa:d2:8a:f6:b2:ca:e4:fb:24:60:a4:f2:bc:
                    8f:0f:db:8c:51:3c:f6:a3:73:a1:cb:67:e4:ad:7a:
                    a5:e3:74:f7:3f:2f:59:93:62:9c:c1:66:ac:93:de:
                    ab:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:82:8B:25:64:A2:E0:1D:37:04:93:A6:91:4A:12:DB:E1:5D:A8:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/981f4e6f-86f4-3bd1-bba0-b1d2e65c6ac7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:2eda::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:aa:b0:02:d5:63:08:ec:79:ef:ef:d6:9a:cb:1a:1b:f3:70:
         cf:67:c9:2d:9c:ed:fd:9a:9f:29:8a:62:aa:33:0f:9b:8d:52:
         19:73:a6:0f:fe:ff:33:1f:a5:d9:24:d3:94:60:a2:74:76:05:
         b7:07:af:0a:af:06:42:f4:b5:d4:aa:3e:5a:df:4d:b5:11:c1:
         29:c1:51:8a:c5:a3:c2:7a:18:b6:45:85:fe:99:65:d8:4b:7f:
         dc:69:fa:52:41:57:a5:e7:4a:26:33:b4:44:bb:32:e2:57:34:
         b0:2c:f6:e8:6f:f7:70:83:3e:c9:3c:c4:2a:bb:dc:38:9b:8f:
         bf:e4:01:d2:25:0c:da:78:3b:2c:0c:89:88:dd:5f:5f:a3:27:
         9b:9a:45:81:2b:62:17:44:bb:90:10:c1:57:d5:b3:5c:07:fb:
         4b:9f:8e:bf:ac:c8:3d:b8:2e:48:84:a8:8e:73:43:0f:20:3c:
         a6:01:6d:95:70:9c:5c:32:ad:92:2d:15:91:4a:13:4e:fb:4b:
         3c:6f:78:21:52:ee:8e:ac:9c:a3:95:86:e6:c5:f6:02:32:6a:
         eb:01:2f:7c:8f:6a:9f:d6:ad:8f:79:e9:55:ea:06:de:b8:c2:
         47:74:b8:36:2f:a8:71:5d:c6:ce:57:40:2b:2a:b2:8b:b6:42:
         a1:f2:fe:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 18:47:33 2024 by rpki-client on console-fra.rpki-client.org