Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f568fd64-e633-38d0-9b19-747ccb0d4f2c.roa
File:                     f568fd64-e633-38d0-9b19-747ccb0d4f2c.roa (raw, json)
Hash identifier:          JJs5tFpgNLjVVxcj7KcTK9B3hBnpyQ9BGP51e6hDiys=
Subject key identifier:   77:25:89:52:B1:7F:1B:C5:42:DD:8A:43:49:A2:54:8D:31:DF:26:AE
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285847527C1A68D526D7D6A9870380
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f568fd64-e633-38d0-9b19-747ccb0d4f2c.roa
Signing time:             Tue 24 Sep 2024 16:26:17 +0000
ROA not before:           Tue 24 Sep 2024 16:26:17 +0000
ROA not after:            Mon 23 Dec 2024 17:26:17 +0000
asID:                     397225
IP address blocks:        2001:502:2eda::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:52:7c:1a:68:d5:26:d7:d6:a9:87:03:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 24 16:26:17 2024 GMT
            Not After : Dec 23 17:26:17 2024 GMT
        Subject: CN=50ef41e8-953d-44c2-9be7-bf20600496e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:5c:a7:e1:65:de:cd:a0:17:fd:f9:69:e3:b3:
                    d4:09:b0:db:10:1a:a2:cd:b3:6e:f3:ef:e3:45:21:
                    84:37:95:ba:51:e8:e3:da:46:81:d7:a6:aa:8d:26:
                    37:99:c8:b5:93:54:fa:bf:ce:f3:b1:b3:2e:3b:86:
                    d6:5f:28:2f:60:f6:6a:52:29:d5:e0:b7:43:9e:b1:
                    e8:89:bc:ff:f8:7a:12:fb:f0:f0:1a:02:95:c7:b1:
                    5c:39:e3:09:89:bc:3e:c4:d6:6b:05:24:a3:12:15:
                    41:fc:86:dc:24:88:68:bf:3d:dc:78:bc:ca:a7:c4:
                    0c:25:ea:01:24:a9:4d:3f:e3:19:a2:b7:f9:68:55:
                    07:27:b1:04:56:cb:c5:6e:2e:dc:7d:34:70:fb:97:
                    46:2f:30:62:f3:ad:6f:e0:eb:9e:6d:c5:13:c6:83:
                    c1:4e:6e:a2:19:42:90:72:a7:f0:83:8b:b8:7c:dc:
                    9f:7d:c3:be:b3:e9:02:b1:0d:b7:3a:ff:cb:6d:51:
                    c2:99:07:0d:d3:56:9c:d9:4e:fb:ae:ea:bc:73:4f:
                    81:a0:f3:0b:1a:0c:11:40:bc:d1:39:3d:e9:7c:82:
                    3d:0a:83:3a:8f:68:66:eb:0c:e1:7d:d7:6d:19:4c:
                    9b:69:98:a7:21:95:5d:9b:ed:0e:99:17:2b:80:a4:
                    79:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:25:89:52:B1:7F:1B:C5:42:DD:8A:43:49:A2:54:8D:31:DF:26:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f568fd64-e633-38d0-9b19-747ccb0d4f2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:2eda::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:d7:b5:91:04:f5:6d:10:e3:c2:2f:05:b4:d7:95:57:68:af:
         3d:54:1c:11:7a:eb:74:c3:83:9a:7a:b2:65:05:57:81:76:41:
         78:98:47:e5:8e:86:20:4f:3e:3f:8e:93:3a:b0:dd:6f:83:db:
         40:ac:5e:31:f1:eb:02:e4:ae:bb:cd:49:1a:83:7f:33:18:16:
         3a:df:dc:8e:b5:ce:01:43:3b:71:59:12:2b:39:c5:7a:22:9b:
         f7:60:cf:56:d6:5f:57:50:90:d1:3c:51:86:bf:fb:5c:72:ac:
         8a:59:c0:68:12:21:80:1c:b2:21:5a:e9:59:d0:5c:9f:0b:d0:
         c6:ba:21:91:58:83:37:54:09:f5:f3:5a:e8:42:e6:91:d1:26:
         14:ac:13:99:34:74:11:2f:df:bc:6b:97:67:99:dd:0f:d1:f1:
         ac:ef:4f:89:53:ea:26:1c:00:ac:5d:f1:a5:2a:ef:c5:ab:e5:
         5f:8b:72:17:5e:b3:c1:0f:cd:a9:22:c4:c0:e8:fe:a3:e3:3f:
         13:7e:3e:da:f5:74:36:d9:65:97:6b:2f:70:d3:3a:2b:2b:b5:
         ff:59:b8:39:40:70:55:29:64:14:4d:63:05:59:04:c7:60:0d:
         23:20:85:b8:0a:f1:1c:b1:e4:44:83:eb:53:ef:8f:8a:f4:b5:
         50:a1:e3:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:06:58 2024 by rpki-client on console-ams.rpki-client.org