Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ee5b4a17-1929-3dd6-947f-30f35e528147.roa
File:                     ee5b4a17-1929-3dd6-947f-30f35e528147.roa (raw, json)
Hash identifier:          h/mvbeJ9hdJ9D//CxHUq/mNA5bcq8u25qbp19qgJniw=
Subject key identifier:   42:0D:01:88:BD:A4:5E:0A:E2:DB:0B:B0:0E:7D:6E:3D:8A:9E:8F:CC
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285847527C10C15FEF7259B041DCC0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ee5b4a17-1929-3dd6-947f-30f35e528147.roa
Signing time:             Tue 24 Sep 2024 16:26:13 +0000
ROA not before:           Tue 24 Sep 2024 16:26:13 +0000
ROA not after:            Mon 23 Dec 2024 17:26:13 +0000
asID:                     397217
IP address blocks:        2610:a1:1000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:52:7c:10:c1:5f:ef:72:59:b0:41:dc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 24 16:26:13 2024 GMT
            Not After : Dec 23 17:26:13 2024 GMT
        Subject: CN=9e07d5de-10ef-486e-9bd9-985715e3ff3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:93:71:ae:04:aa:78:3a:bb:00:03:0f:b1:9d:
                    14:be:79:6e:0c:b3:37:d7:71:de:43:88:23:22:b5:
                    65:53:4a:33:e8:31:b8:4a:8e:4a:18:f5:60:64:14:
                    b3:bb:09:1b:2e:78:9e:ae:4e:29:6c:39:53:c8:32:
                    fc:1e:6c:76:c2:83:2f:fa:f3:6d:29:cc:d4:d4:3e:
                    25:1a:6d:70:c0:45:bd:42:05:43:2d:f9:88:23:c8:
                    03:9b:2d:d0:1f:43:b2:e9:c4:19:37:9b:41:c3:14:
                    5c:dd:f2:36:71:f5:20:5f:d3:93:85:42:ac:c9:1f:
                    30:56:6b:69:df:56:4d:b3:ad:e7:1a:31:d0:6b:fc:
                    01:55:17:73:47:24:17:c8:fc:33:b8:02:27:6d:fe:
                    d7:0c:ab:fa:9f:0d:4e:30:8c:46:1d:ff:26:f8:3f:
                    fe:02:23:64:3c:a4:cb:9a:a0:13:a2:bc:17:da:c5:
                    aa:1b:ab:81:cc:81:20:7a:1a:b5:d1:a9:25:7c:58:
                    dc:5d:66:f3:ed:7c:a5:9f:fd:f2:6c:49:9c:b2:31:
                    27:40:8e:8d:51:bd:06:81:64:89:ec:b0:e8:0b:f8:
                    ec:42:70:97:a8:30:8d:7a:df:82:f4:17:76:d2:6d:
                    57:fa:e7:d3:bb:3a:49:9e:55:dc:f6:61:13:a2:79:
                    c3:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:0D:01:88:BD:A4:5E:0A:E2:DB:0B:B0:0E:7D:6E:3D:8A:9E:8F:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ee5b4a17-1929-3dd6-947f-30f35e528147.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:a1:1000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:32:4c:d1:a5:cf:bf:23:5d:b1:c1:2b:e5:43:4c:d8:05:33:
         0e:60:bc:2f:ed:a7:ed:22:1a:28:9f:60:87:d8:6b:56:e8:51:
         d3:97:ad:1e:18:f2:8b:2f:9b:33:7a:7f:6f:1e:5e:e2:2d:55:
         30:62:7a:c1:1a:5e:29:9c:d9:54:07:42:21:27:1b:7c:7f:d8:
         42:c0:35:51:aa:ee:28:33:b7:e4:bd:03:71:60:b5:98:15:1f:
         9c:9c:89:f3:9f:ca:5b:29:5b:b9:1c:dd:c1:5d:f9:a3:43:5e:
         3c:b5:90:ed:60:cc:b2:74:d0:89:0d:fc:2a:cb:52:65:8d:7f:
         c2:70:43:64:2f:66:86:b9:77:c1:a4:c0:b8:70:56:6a:08:6a:
         e8:c1:9b:e1:ce:33:69:58:df:93:75:91:02:34:1b:d0:a9:36:
         34:a3:f4:28:f2:df:75:86:3e:2b:e3:c9:2d:07:69:2f:c3:df:
         20:c1:fa:4e:97:db:12:c6:7e:39:a3:61:2d:9b:68:94:33:e3:
         e9:85:71:ac:71:c3:cc:5d:25:41:7b:d1:c6:a4:1f:30:23:07:
         2e:23:ac:3d:71:90:bb:db:30:f7:b1:ab:d1:8a:7e:78:bd:8d:
         0c:1b:16:b2:d5:e7:f4:9e:1f:6f:70:32:b5:30:25:ab:46:fc:
         2f:ff:cd:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 07:02:20 2024 by rpki-client on console-fra.rpki-client.org