Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/9a3a024e-5a9f-301d-902a-eacf3e1a9e1a.roa
File:                     9a3a024e-5a9f-301d-902a-eacf3e1a9e1a.roa (raw, json)
Hash identifier:          LBu7bkuZQM2FT5vcg82Pq+xfTrLAQIMJEwh0TJ7Rifk=
Subject key identifier:   E4:20:48:61:AD:83:FB:A4:3F:4B:62:DA:67:72:C7:B5:E4:BF:FC:EB
Certificate issuer:       /CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078
Certificate serial:       010D0C9F43285847A5D6AD1F44ABBDE0F4CC8CC0
Authority key identifier: 10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/9a3a024e-5a9f-301d-902a-eacf3e1a9e1a.roa
Signing time:             Thu 24 Oct 2024 13:00:42 +0000
ROA not before:           Thu 24 Oct 2024 13:00:42 +0000
ROA not after:            Wed 22 Jan 2025 14:00:42 +0000
asID:                     25664
IP address blocks:        2607:cc80:6000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a5:d6:ad:1f:44:ab:bd:e0:f4:cc:8c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078
        Validity
            Not Before: Oct 24 13:00:42 2024 GMT
            Not After : Jan 22 14:00:42 2025 GMT
        Subject: CN=9f0228af-7835-48cf-bf6e-1d6b990ede1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:58:b9:f0:92:50:3f:70:72:28:1d:ad:dd:36:
                    12:85:18:c7:53:ee:34:0e:a3:85:d1:39:dd:15:79:
                    d0:a8:c8:87:73:41:b0:e8:c7:4c:7a:69:58:57:9a:
                    51:3b:47:b9:be:a6:d4:6b:bc:80:b9:9c:1d:f4:1e:
                    a4:85:58:2a:56:d6:14:10:61:e7:20:6f:51:fa:c6:
                    2b:ea:48:8f:2b:86:06:db:06:93:2e:38:67:43:39:
                    0a:21:fe:98:66:11:13:94:3f:90:83:81:3a:63:74:
                    db:81:b5:32:05:98:50:12:ec:c6:5f:e6:e0:4c:b0:
                    0e:59:72:fb:ed:14:6c:20:b7:a4:84:56:77:73:5b:
                    ad:90:b6:26:20:16:84:31:b7:9e:dd:62:a6:9c:89:
                    b4:c5:91:92:29:19:a5:16:2c:8c:33:29:8a:22:d8:
                    5b:16:5d:01:0e:ff:b1:1f:f5:6c:6b:bc:2f:b4:2f:
                    f5:6d:6a:20:bc:44:d2:ab:e9:91:fa:47:7e:da:26:
                    82:54:80:7d:c4:e4:47:86:eb:4d:7f:0c:77:c2:ea:
                    4a:07:e7:9e:91:0e:4f:27:40:cf:3d:a4:22:da:f8:
                    40:b7:03:f3:5f:f3:4a:9a:f9:d7:0f:e5:a7:01:86:
                    73:8d:ff:0c:d5:70:ae:32:31:7e:3d:25:98:ab:10:
                    b2:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:20:48:61:AD:83:FB:A4:3F:4B:62:DA:67:72:C7:B5:E4:BF:FC:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/9a3a024e-5a9f-301d-902a-eacf3e1a9e1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl

            X509v3 Authority Key Identifier:
                keyid:10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:cc80:6000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:a9:2b:28:02:18:ff:cc:2a:41:99:99:54:39:2d:ed:b3:66:
         6e:28:21:e0:42:67:0e:fd:50:4a:2c:19:66:bf:db:9e:80:d3:
         66:e3:b9:6b:92:da:aa:1d:71:9e:77:ff:93:93:7e:f2:0b:86:
         a0:d3:bb:bd:30:9a:c0:9e:48:05:80:84:32:dd:82:03:b9:ae:
         6d:7d:50:cc:6a:9a:69:b4:96:3e:07:21:05:46:0c:dc:77:11:
         36:a5:e7:e0:fd:b1:fb:69:4c:08:dd:93:28:95:22:8f:cb:08:
         a6:a7:a7:50:f1:7c:4f:92:06:9f:2a:71:df:75:de:16:a3:a6:
         7b:3b:77:11:b1:42:8e:a0:5e:7d:7e:0c:eb:1e:59:f8:64:88:
         28:15:47:d7:0b:a6:04:55:51:ee:72:45:ea:df:92:cf:ef:89:
         2e:ac:4e:51:8e:3e:f9:90:01:6b:4d:76:45:0f:70:ab:37:83:
         18:d0:ba:4f:72:68:30:6e:ba:c7:f4:3c:34:78:5d:fa:1a:50:
         cb:30:a9:71:ad:db:dc:9c:aa:95:0d:44:47:fd:c0:8a:88:84:
         53:43:58:a8:7d:9d:b7:01:55:f1:62:13:48:32:63:8e:ab:2c:
         83:3d:f4:87:68:f7:d8:0b:5e:0e:8a:81:f8:12:8d:b4:3b:b5:
         53:d7:43:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:31:12 2024 by rpki-client on console-ams.rpki-client.org