Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/aefa05ab-d562-3fb0-aab4-a369d1a8fc21.roa
File:                     aefa05ab-d562-3fb0-aab4-a369d1a8fc21.roa (raw, json)
Hash identifier:          HIwhNcHaigvCIyMow+kD+U39llHPBAU1HKsxyyi0ufY=
Subject key identifier:   39:8B:86:B8:63:EE:E7:30:B0:1C:E0:7B:25:E3:CD:47:CD:FF:04:F7
Certificate issuer:       /CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078
Certificate serial:       010D0C9F43285847A5D6AD309BA16300DE529480
Authority key identifier: 10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/aefa05ab-d562-3fb0-aab4-a369d1a8fc21.roa
Signing time:             Thu 24 Oct 2024 13:00:42 +0000
ROA not before:           Thu 24 Oct 2024 13:00:42 +0000
ROA not after:            Wed 22 Jan 2025 14:00:42 +0000
asID:                     25664
IP address blocks:        2607:cc80:7000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a5:d6:ad:30:9b:a1:63:00:de:52:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078
        Validity
            Not Before: Oct 24 13:00:42 2024 GMT
            Not After : Jan 22 14:00:42 2025 GMT
        Subject: CN=14866ff0-74d6-41c7-ac28-49b8fe04546c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:ca:06:19:b9:92:06:f6:8d:d9:2a:de:8a:30:
                    b5:95:3d:76:f1:92:18:e6:f5:55:ef:bc:d5:eb:04:
                    5b:aa:54:2f:ce:25:07:22:03:6d:9f:66:d5:a5:62:
                    66:c5:f7:bc:13:10:58:84:fa:f6:41:ec:d0:4b:6f:
                    64:3e:f0:c7:55:e9:70:13:0e:5a:8c:53:f1:d3:ac:
                    4c:7b:ce:c2:6d:a7:dd:8c:0a:15:fe:bd:69:96:69:
                    79:71:6e:38:88:a6:0d:7d:dd:37:d9:04:f0:0e:ad:
                    1d:88:51:54:9c:d8:ce:84:3b:d7:d6:da:de:76:9c:
                    ad:c9:27:4d:3a:a1:62:d3:85:f6:92:48:e5:93:58:
                    2e:65:4f:df:58:7a:c6:0c:87:e2:27:d4:43:01:43:
                    5d:30:8b:a5:d2:bc:d3:9a:77:af:47:77:36:0c:65:
                    ff:d7:2c:f6:28:48:73:6e:c2:25:86:39:d8:dd:f5:
                    62:a3:6b:e3:68:17:a1:0b:e9:25:65:cb:38:1f:c0:
                    53:8a:34:60:54:25:31:2b:a2:a6:9c:b2:6e:70:5d:
                    93:d8:17:97:2a:0e:76:32:98:db:16:f6:7a:89:5b:
                    9f:8e:d0:2e:b4:5b:a4:52:b5:38:2f:39:7d:2c:40:
                    7f:42:69:b8:70:76:52:7c:fd:c2:6d:17:ba:b0:ae:
                    1f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:8B:86:B8:63:EE:E7:30:B0:1C:E0:7B:25:E3:CD:47:CD:FF:04:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/aefa05ab-d562-3fb0-aab4-a369d1a8fc21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl

            X509v3 Authority Key Identifier:
                keyid:10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:cc80:7000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:c2:46:20:50:33:f2:cb:71:62:44:4a:cc:10:94:a7:4d:ae:
         a0:b2:76:16:e0:eb:58:dc:83:e5:fd:6a:cb:fc:a1:4f:c0:c7:
         ff:2a:3b:b3:e0:fb:e0:04:17:f7:49:d8:88:83:c8:5d:2b:76:
         f8:8f:ae:23:87:ac:1d:bd:16:63:f8:ae:06:5a:7f:45:e5:89:
         97:a2:b9:22:02:00:3e:3b:82:72:b9:0f:61:39:e9:27:46:f5:
         4a:0d:69:f9:e7:24:a8:dd:96:cf:a3:5c:d9:40:74:de:eb:1e:
         dd:e2:ff:a2:fb:0b:36:8a:99:07:a6:71:68:d5:97:cf:84:4f:
         d5:40:f6:76:fe:64:12:24:c9:4a:ff:a4:48:f9:ae:25:0d:ba:
         6f:42:d5:af:cc:63:44:01:92:96:60:f2:c6:53:2e:9f:4a:64:
         74:5b:a6:9b:78:21:39:22:86:72:9a:fa:79:00:c2:bf:71:d8:
         97:42:56:94:11:e5:02:81:3d:d4:9f:d4:86:b8:d5:c0:19:21:
         00:cc:2c:e2:ee:82:54:d4:f4:ef:bd:cc:a3:07:ed:1f:18:f7:
         62:2e:2b:ef:0b:8e:5c:b7:d3:31:a5:ac:80:bd:00:83:88:3b:
         59:96:e4:58:d8:cb:52:a2:59:44:03:45:0b:3a:a7:b2:44:b8:
         2c:81:9a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 07:02:24 2024 by rpki-client on console-fra.rpki-client.org