Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4/01d0f9c0-735d-31f3-ab7e-2fe439f2f276.roa
File:                     01d0f9c0-735d-31f3-ab7e-2fe439f2f276.roa (raw, json)
Hash identifier:          3SuiY2JzT7hHiFbY7RF0JxrjhMPB/8oLi4U4w8X5sec=
Subject key identifier:   62:75:4B:1E:91:05:F7:C1:11:7E:5D:A6:2D:00:76:33:ED:E9:0D:EE
Certificate issuer:       /CN=adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4
Certificate serial:       010D0C9F432858475910CF7330989EF87FE47050
Authority key identifier: BF:C2:9B:C0:5B:B5:EC:2F:7F:D9:9D:2E:8E:8F:76:88:57:6C:1E:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4/01d0f9c0-735d-31f3-ab7e-2fe439f2f276.roa
Signing time:             Fri 27 Sep 2024 01:00:31 +0000
ROA not before:           Fri 27 Sep 2024 01:00:31 +0000
ROA not after:            Thu 26 Dec 2024 02:00:31 +0000
asID:                     25830
IP address blocks:        2604:a40::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:59:10:cf:73:30:98:9e:f8:7f:e4:70:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4
        Validity
            Not Before: Sep 27 01:00:31 2024 GMT
            Not After : Dec 26 02:00:31 2024 GMT
        Subject: CN=f2cd7056-80f3-4a46-811e-0e942e963115
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5e:49:2c:be:d0:3a:fa:db:82:4c:aa:8c:9f:
                    84:69:01:ab:d0:78:da:90:13:8e:a1:5a:c7:35:5a:
                    e1:d7:48:3f:4a:66:7e:6d:71:4a:b2:7b:db:3c:6f:
                    b1:2b:26:ae:b3:e3:59:3e:22:7c:be:51:11:e1:ea:
                    9f:45:84:57:3f:12:d0:94:c9:3b:3a:e9:f3:fd:54:
                    cf:14:e8:3e:89:5e:41:b5:ec:41:3e:b7:55:11:a1:
                    16:4d:da:33:53:41:42:0c:65:20:32:ec:af:18:cb:
                    84:39:a7:61:3c:da:8f:c2:c2:cf:0f:79:63:77:72:
                    c1:4a:52:c0:64:8c:c5:e3:70:34:9c:38:ff:32:09:
                    09:23:c6:51:03:be:9d:22:d6:c8:71:de:16:81:b4:
                    96:b7:90:32:28:52:3d:96:73:1c:fe:71:00:e1:6f:
                    ad:d5:c7:34:9c:e3:46:75:e4:d4:d9:ce:29:ca:38:
                    66:85:68:15:21:17:60:12:f1:47:1b:84:60:ad:4e:
                    0a:ff:57:93:ab:8e:9e:be:9b:2e:1e:04:26:28:99:
                    1e:aa:3c:60:b4:8b:a2:dd:ab:18:00:c9:bc:25:56:
                    c1:22:f4:2e:7d:fe:28:84:30:2c:2f:0f:f9:33:a7:
                    bd:73:dd:af:01:0e:e4:3f:3f:83:37:0e:42:e1:b0:
                    87:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:75:4B:1E:91:05:F7:C1:11:7E:5D:A6:2D:00:76:33:ED:E9:0D:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4/01d0f9c0-735d-31f3-ab7e-2fe439f2f276.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4.crl

            X509v3 Authority Key Identifier:
                keyid:BF:C2:9B:C0:5B:B5:EC:2F:7F:D9:9D:2E:8E:8F:76:88:57:6C:1E:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:a40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:86:35:f3:a4:73:17:af:91:c7:25:5c:03:81:db:40:d3:c2:
         a1:8c:10:bd:4d:4a:ae:b5:5a:0e:4f:58:7f:1b:21:9d:66:e9:
         8c:a0:ee:14:d0:5b:bf:22:b3:df:25:a5:51:39:d6:7e:da:68:
         7a:2f:d1:16:8b:78:58:ad:b0:bf:11:d6:23:9c:70:ff:fa:6a:
         06:a8:e2:6d:8d:ac:f2:2a:b5:fe:85:72:91:e1:c6:1a:e1:f2:
         0c:c5:0c:82:be:15:66:c3:fe:6f:07:81:b0:ce:83:22:4b:86:
         ab:d4:f6:d1:06:32:f9:f1:ee:75:e9:da:12:8b:3f:5e:e0:f4:
         e1:be:70:9a:1d:ae:a4:65:52:f6:a0:ef:0a:61:77:5e:ea:af:
         bc:35:34:7a:af:8b:aa:95:18:b1:1c:83:b1:4c:1b:7b:18:c6:
         2c:b3:d6:eb:c9:fd:ec:32:a3:0a:fb:eb:6d:11:f3:21:53:17:
         49:a8:d6:68:8e:45:dc:23:ad:ed:41:5b:35:e5:93:ef:c6:08:
         c0:e9:ff:b9:e6:50:d2:0b:73:9a:68:38:1b:0a:85:8f:0f:70:
         63:11:a2:d9:4f:71:8b:63:49:6f:c5:d5:45:52:3a:c2:28:21:
         c8:e5:c8:17:d3:9c:0c:87:c6:02:aa:40:72:49:10:6a:6b:4a:
         79:61:af:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:36:13 2024 by rpki-client on console-fra.rpki-client.org