Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a5851ac4-2221-385e-9e3a-3d7789702b10.roa
File:                     a5851ac4-2221-385e-9e3a-3d7789702b10.roa (raw, json)
Hash identifier:          yMWHXWpAzul1tKF6em/7YxfBu8oDEDH6JGP8XixJ0kQ=
Subject key identifier:   A3:AF:25:25:C4:EA:E6:3A:1C:CB:EF:40:B5:65:A7:D0:35:A1:C3:47
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285847527C13AFA5544F3047D20260
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a5851ac4-2221-385e-9e3a-3d7789702b10.roa
Signing time:             Tue 24 Sep 2024 16:26:14 +0000
ROA not before:           Tue 24 Sep 2024 16:26:14 +0000
ROA not after:            Mon 23 Dec 2024 17:26:14 +0000
asID:                     397228
IP address blocks:        2610:a1:3000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:52:7c:13:af:a5:54:4f:30:47:d2:02:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 24 16:26:14 2024 GMT
            Not After : Dec 23 17:26:14 2024 GMT
        Subject: CN=0d5d9f9d-f51a-4de0-8c06-0126a945414b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ef:42:db:ad:79:a5:82:e8:77:d8:8d:32:30:
                    d5:b2:1b:00:c3:c9:d7:5c:82:7b:b7:ba:9e:0d:7b:
                    d5:09:27:80:f0:dc:1d:6b:b5:f0:05:19:94:fd:ac:
                    fc:9a:cf:bf:ac:9e:da:de:5a:19:4b:53:0a:6f:dc:
                    cd:a7:43:86:3c:0e:e8:89:7b:bb:cc:5a:e4:2a:90:
                    65:9b:a1:72:28:47:c9:40:31:b4:22:bc:fa:a6:3b:
                    ac:16:b2:48:61:ca:c2:33:b6:c1:9c:43:61:82:03:
                    d7:e8:77:7f:c6:36:b3:c7:59:d6:a9:c1:d8:c4:f7:
                    bc:91:c0:b1:43:7a:01:81:1c:ff:31:9e:58:1c:7d:
                    5a:81:58:27:8a:ba:02:04:d9:bb:14:bb:a1:11:99:
                    00:21:64:2a:03:75:f2:19:9f:a8:7f:8a:48:c9:9c:
                    65:92:ec:22:ad:ab:57:e8:b0:c9:3f:84:f8:92:7e:
                    a1:9c:ca:7e:aa:e2:78:69:df:50:8f:fd:ee:da:43:
                    33:4a:36:f5:d8:07:95:b0:a8:d7:22:f8:ea:a5:f5:
                    99:af:c4:18:06:2c:1f:d6:28:d6:d8:9b:45:07:09:
                    0d:e6:97:b0:1d:d0:42:93:eb:af:f9:a3:14:80:cb:
                    28:ec:96:2a:a0:8a:23:e6:e2:59:66:41:f0:b1:ab:
                    26:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:AF:25:25:C4:EA:E6:3A:1C:CB:EF:40:B5:65:A7:D0:35:A1:C3:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a5851ac4-2221-385e-9e3a-3d7789702b10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:a1:3000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:90:e9:84:25:22:c8:45:74:eb:91:9b:81:d5:6a:22:a9:bd:
         30:b8:42:ce:93:88:32:6e:08:79:60:1a:86:6b:e3:00:10:9b:
         da:53:42:09:60:7b:58:ab:03:ce:2c:c0:14:32:96:9a:8f:ed:
         b6:06:7d:2a:56:84:6d:e8:e7:88:cc:75:03:f2:26:59:96:d1:
         11:51:8d:cf:97:88:85:f0:a9:85:6b:fe:36:93:14:5c:f0:da:
         ce:61:d0:84:00:b2:8e:dc:97:68:2b:37:24:94:dc:66:b6:a2:
         ab:85:16:c6:14:82:d5:7b:9e:72:2f:8a:87:81:3c:f8:ee:88:
         1b:29:ff:c8:4b:1f:21:6f:85:f4:e2:5e:3e:92:11:69:3b:11:
         df:d4:60:c5:a7:33:6d:f6:5f:5a:55:a9:e4:f3:03:1c:1e:9e:
         f5:41:b5:54:69:78:70:e1:29:e7:0a:32:6e:37:47:88:fe:fb:
         3d:d8:fd:b3:cd:17:ac:bf:4b:9c:bd:66:11:ed:e0:25:6a:0e:
         e8:41:28:a8:97:34:81:0f:d9:a2:9e:25:b5:ef:f4:15:4d:dc:
         7f:36:21:52:d3:87:88:7c:43:90:b7:ab:c8:43:f6:6c:8c:d7:
         79:c9:4c:3f:80:9e:25:e0:fb:ca:47:a8:2f:65:7b:03:2b:08:
         ec:38:df:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 07:02:12 2024 by rpki-client on console-fra.rpki-client.org