Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/5cb86780-eead-3402-9ecf-8879529d2c03.roa
File:                     5cb86780-eead-3402-9ecf-8879529d2c03.roa (raw, json)
Hash identifier:          3RCejDTozAAkeZBwwE1AltTt6O1t5H1TfHNg+FA0CTw=
Subject key identifier:   6D:71:80:29:1F:7F:69:77:9F:05:44:93:F5:8F:10:E3:C1:66:F6:CD
Certificate issuer:       /CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078
Certificate serial:       010D0C9F43285847B5314D5B79B10F3E75D61680
Authority key identifier: 10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/5cb86780-eead-3402-9ecf-8879529d2c03.roa
Signing time:             Wed 30 Oct 2024 01:00:32 +0000
ROA not before:           Wed 30 Oct 2024 01:00:32 +0000
ROA not after:            Tue 28 Jan 2025 02:00:32 +0000
asID:                     2152
IP address blocks:        2607:cc80:1000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b5:31:4d:5b:79:b1:0f:3e:75:d6:16:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078
        Validity
            Not Before: Oct 30 01:00:32 2024 GMT
            Not After : Jan 28 02:00:32 2025 GMT
        Subject: CN=8aa7999a-7b19-450b-a8f1-5543e8f92143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b7:a5:07:8e:4c:74:e5:64:48:fa:8d:4a:4d:
                    ca:67:81:46:37:21:a3:21:94:c5:dd:08:43:05:69:
                    1a:2d:aa:96:d2:f5:2f:f2:f2:00:58:0f:52:9a:4a:
                    19:0c:90:04:37:ac:bb:8e:63:39:50:00:3d:6a:f3:
                    f3:c2:7c:f0:09:10:da:85:83:c2:77:e3:b4:88:74:
                    e0:1c:36:49:2f:04:7f:85:7b:8b:75:75:e8:ca:8f:
                    da:f6:a4:73:b9:be:97:eb:10:c5:7f:fc:f3:8e:b4:
                    31:b8:ca:74:23:dd:4d:1c:14:99:65:20:6d:53:3c:
                    4a:4a:c8:97:1d:72:b9:f2:57:9b:b3:33:07:12:35:
                    00:8b:fa:31:22:dd:74:78:f1:17:2e:f8:72:ba:e8:
                    26:9d:44:c5:d2:bd:34:67:14:d0:8e:6c:a7:9f:8f:
                    15:f8:8d:83:cb:fd:79:ce:9e:5f:20:6b:bc:62:23:
                    03:a9:7f:cd:36:33:c8:84:83:bb:22:ab:c4:13:14:
                    d8:e0:82:87:e8:0a:03:d8:10:e7:45:b7:f2:a7:d5:
                    e6:78:0b:1b:b2:f0:f9:1d:e9:de:b9:3c:08:b1:1e:
                    af:bb:26:50:3a:bf:fd:91:f6:0b:dc:eb:d3:9f:df:
                    10:43:7f:43:14:9e:e1:8d:e7:70:c6:5e:14:16:7e:
                    39:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:71:80:29:1F:7F:69:77:9F:05:44:93:F5:8F:10:E3:C1:66:F6:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/5cb86780-eead-3402-9ecf-8879529d2c03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl

            X509v3 Authority Key Identifier:
                keyid:10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:cc80:1000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:0e:30:08:28:c4:a4:73:0b:58:d6:a9:65:09:1a:b7:4f:88:
         29:31:a9:a9:1c:17:dc:66:9c:39:2b:a2:4f:f9:a4:7d:57:35:
         1a:a3:72:34:88:af:03:fc:10:cb:31:93:ce:26:8d:c2:50:0d:
         b9:3b:9b:87:62:2c:a0:e0:e3:4d:f6:24:15:24:85:55:60:25:
         e6:d0:fe:43:41:80:d7:dd:47:b6:32:a1:3d:a2:4e:83:49:80:
         d0:21:37:e9:9d:a4:f8:5e:00:9e:64:7f:ef:25:39:04:c8:de:
         2a:28:db:1d:8b:23:7d:e2:c3:fb:36:95:c2:74:8d:82:af:45:
         06:05:78:a4:0e:ba:73:09:a0:25:2e:6c:1c:7e:18:f2:77:e2:
         2d:5a:34:e8:d3:03:18:2a:be:78:da:48:12:8d:82:d1:b4:53:
         87:a6:6b:b1:58:df:90:df:ec:74:db:b0:00:d6:f4:e5:21:df:
         12:49:39:1b:74:0e:65:e8:0f:1a:78:62:ce:e3:1f:f1:1f:24:
         25:fe:35:72:fd:ce:d4:ea:f6:73:c6:b7:a5:98:aa:4d:60:eb:
         8f:32:66:9e:e0:96:9d:3a:9d:3b:88:1e:2e:93:07:42:5e:c3:
         1d:4e:ad:8c:a6:c3:ab:f5:a6:3f:9c:3b:15:45:b8:bc:fc:a5:
         f7:8d:c5:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 07:02:24 2024 by rpki-client on console-fra.rpki-client.org