Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ab3387bd-a78a-3b1a-93fa-3ed7bc774b4e.roa
File:                     ab3387bd-a78a-3b1a-93fa-3ed7bc774b4e.roa (raw, json)
Hash identifier:          rISxgikWEjM7UkNnTLxHJZwgI4oqveHI2gmGATlO570=
Subject key identifier:   D9:0F:67:6C:FC:81:F8:EF:CF:7A:7F:9E:79:75:80:03:BA:BC:83:67
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285847527C212AA76A98BFEC6175D8
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ab3387bd-a78a-3b1a-93fa-3ed7bc774b4e.roa
Signing time:             Tue 24 Sep 2024 16:26:20 +0000
ROA not before:           Tue 24 Sep 2024 16:26:20 +0000
ROA not after:            Mon 23 Dec 2024 17:26:20 +0000
asID:                     397214
IP address blocks:        2001:502:d399::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:52:7c:21:2a:a7:6a:98:bf:ec:61:75:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 24 16:26:20 2024 GMT
            Not After : Dec 23 17:26:20 2024 GMT
        Subject: CN=ef96fe74-2c9d-4b87-83c2-7388147cfd0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c6:b8:66:3d:d3:fc:70:5c:4b:b2:a0:20:0c:
                    1c:c4:a6:de:c6:ba:f6:a6:f0:41:65:ff:21:40:9e:
                    25:1c:1f:59:4e:92:3f:60:d3:4d:04:47:70:be:f2:
                    55:bc:50:af:9d:92:47:b5:64:92:12:6e:c1:30:f3:
                    2d:fc:ce:ed:d3:69:fe:7e:19:9c:6b:87:3c:84:9a:
                    85:9f:1c:50:cb:df:7d:aa:0a:51:60:d4:a9:bd:a6:
                    e7:97:cf:f5:ec:42:19:21:1a:6a:a0:fa:38:86:a6:
                    d9:13:5f:4c:2d:8f:cd:43:f9:d9:d6:0e:2d:7a:2c:
                    fc:ce:cd:10:3f:6e:e1:51:2f:24:d0:46:5d:c7:a3:
                    0d:ec:c2:88:54:0f:22:72:16:df:46:f4:29:4f:d9:
                    db:73:ca:d8:d9:52:b8:54:12:15:c3:c7:83:cd:d8:
                    8d:ea:f6:8d:c4:31:81:19:3a:1d:5a:59:9f:74:c4:
                    42:63:af:52:bf:ef:8b:5f:75:6a:ba:03:04:63:36:
                    26:c4:a6:05:2d:bb:10:b9:b6:b5:b4:6d:15:f3:3f:
                    b7:4c:54:ff:70:00:6b:d2:bf:5e:d1:18:ff:28:53:
                    cd:37:4e:f7:ae:8f:94:75:76:ac:7f:81:81:c5:f4:
                    4a:51:36:6b:d4:69:67:8e:d0:1c:56:55:ed:97:18:
                    9e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:0F:67:6C:FC:81:F8:EF:CF:7A:7F:9E:79:75:80:03:BA:BC:83:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ab3387bd-a78a-3b1a-93fa-3ed7bc774b4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:d399::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:81:53:f2:c0:3f:f0:73:f5:97:0e:2e:ab:c6:77:95:b9:34:
         39:ee:4b:ea:2d:d8:72:53:aa:68:5a:5d:4d:ed:79:ed:e1:4a:
         11:07:6f:e3:a4:2f:58:59:a6:94:9c:7b:0a:0e:22:64:9d:3c:
         15:21:37:9e:d0:59:59:0f:63:55:62:e7:f3:0b:36:72:32:3c:
         93:50:c0:c7:44:7a:db:b1:74:12:63:06:2d:26:7c:43:b1:79:
         bb:99:e4:0d:e4:81:ad:e3:21:27:60:63:96:58:a4:d3:32:f8:
         3b:44:aa:b3:b6:9f:c6:45:46:fd:17:14:e3:db:c7:5f:64:26:
         5c:c7:21:76:17:d3:5c:c7:54:e7:f4:e7:94:b1:9f:e3:d8:64:
         16:46:f9:92:81:47:df:f7:8c:4b:57:85:d6:f0:98:56:0e:97:
         ac:ba:19:02:ac:2f:13:56:68:36:b1:e7:e2:e6:fa:3b:9d:8a:
         c8:0f:a0:4d:9c:02:68:1a:ae:9d:48:32:11:93:0d:ac:c6:66:
         76:8b:17:93:ff:bd:de:f3:08:9e:bb:e0:ce:88:c7:55:1a:7a:
         3c:c1:88:aa:6a:77:a4:e3:77:3e:74:ed:f9:cb:6e:2b:47:53:
         31:6d:c5:7a:8a:90:64:7c:c9:2e:ac:92:9a:94:57:5c:b5:fc:
         76:e1:56:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 20:19:00 2024 by rpki-client on console-fra.rpki-client.org