Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f836070d-3c4d-3589-98f1-0a4917c78fe6.roa
File:                     f836070d-3c4d-3589-98f1-0a4917c78fe6.roa (raw, json)
Hash identifier:          hnf6kGmIFjhGwFE71BQuYyL0zSxkZAD1WKo6tGXiT7g=
Subject key identifier:   AC:38:5A:6D:32:30:B9:4D:68:1B:69:E0:E7:7F:BD:9D:3E:E6:DE:27
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285847527C16F87551C14A3BFEA1C0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f836070d-3c4d-3589-98f1-0a4917c78fe6.roa
Signing time:             Tue 24 Sep 2024 16:26:16 +0000
ROA not before:           Tue 24 Sep 2024 16:26:16 +0000
ROA not after:            Mon 23 Dec 2024 17:26:16 +0000
asID:                     397243
IP address blocks:        2001:500:3682::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:52:7c:16:f8:75:51:c1:4a:3b:fe:a1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 24 16:26:16 2024 GMT
            Not After : Dec 23 17:26:16 2024 GMT
        Subject: CN=ddef7435-90cf-4bff-9aee-b69b8ce08119
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:43:bc:77:b9:e0:89:a9:55:50:77:4a:ef:92:
                    6a:2c:30:66:8d:24:80:63:c7:18:6f:a6:d0:00:55:
                    94:6e:67:99:c9:a3:cd:db:73:f4:52:18:5c:2e:ce:
                    7f:8f:5b:2c:6d:83:91:27:f1:f6:da:bc:9b:18:92:
                    c3:a9:b2:bc:02:e5:9e:15:5b:6e:70:79:be:d7:b9:
                    92:30:04:40:b1:90:60:41:0a:1f:7c:f0:51:b9:8e:
                    ae:ff:11:94:ef:9f:80:dc:20:52:6d:73:46:f1:3e:
                    e3:f5:52:f7:01:c8:24:99:b4:a4:c2:bf:b7:90:0b:
                    47:b3:d1:49:ec:b7:35:40:00:0b:8c:22:8c:b2:2f:
                    ce:07:81:9b:80:3f:15:9d:5e:56:09:63:fa:1c:dd:
                    d2:38:0b:93:2e:d4:e2:f7:c7:a3:b7:a1:c4:a7:60:
                    6a:08:7d:30:3a:b6:4c:6c:29:81:f9:c4:91:02:0d:
                    ab:12:0d:f0:e0:d2:2c:8b:f9:da:75:a2:5f:40:1a:
                    b9:4e:07:2c:4e:6f:8a:90:07:a4:c7:9c:ce:1d:25:
                    5f:eb:c3:70:2d:de:4a:5f:b0:81:7f:d3:2f:86:c0:
                    08:99:90:a3:40:94:86:6f:a0:77:ed:73:8c:97:ae:
                    a3:41:21:16:3a:45:70:f6:f5:1f:66:4c:3e:cc:96:
                    91:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:38:5A:6D:32:30:B9:4D:68:1B:69:E0:E7:7F:BD:9D:3E:E6:DE:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f836070d-3c4d-3589-98f1-0a4917c78fe6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:3682::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:0a:c2:f5:59:5c:ed:53:a6:fc:bb:30:ca:56:54:65:97:dd:
         93:dc:4d:2b:7b:0e:9f:05:95:0b:3e:ba:79:c3:5f:db:81:e1:
         d2:df:ec:05:c9:f9:85:18:31:19:11:1b:d3:ec:d8:91:26:96:
         e9:c6:41:0d:e8:ae:f9:1b:a7:a6:da:43:6e:cb:d3:7c:0e:6f:
         f3:af:27:6f:92:b0:91:c0:6a:16:68:c7:f2:23:2d:01:8c:19:
         68:4d:6e:1c:b6:fe:3c:6a:27:06:a5:f1:32:1d:97:ed:11:f1:
         07:5a:14:dc:5d:94:2c:78:cf:4c:ca:c1:83:c3:9e:2b:12:ef:
         ba:24:31:b2:22:9e:f1:aa:81:f5:5e:89:f1:f7:23:a2:ce:95:
         dd:01:c9:fd:9a:d4:21:aa:ec:5a:2d:d9:e8:93:48:ba:b9:4f:
         3b:1e:cd:62:77:ca:5d:05:50:51:3f:b0:99:52:d8:79:a6:75:
         a0:96:d1:6b:c2:d0:a6:8d:7b:ce:57:8d:e3:76:c8:66:18:d6:
         e7:b1:22:57:5d:a3:59:cd:9e:6e:63:fa:ed:55:1a:1d:4e:55:
         1b:4e:44:e2:d9:ed:7e:69:5f:db:7d:d7:59:4e:04:e3:37:0f:
         e9:e2:ae:69:76:e3:b1:f0:d9:ba:a5:82:22:80:4b:f6:a1:56:
         2d:f6:05:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 07:02:21 2024 by rpki-client on console-fra.rpki-client.org