Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/3d51ff96-2f88-34fd-975b-1a32cf2f1fcc.roa
File:                     3d51ff96-2f88-34fd-975b-1a32cf2f1fcc.roa (raw, json)
Hash identifier:          7FGPxl88YUbWtxE+MrrjCi/lB8rUpGsBttuTnKKt4nM=
Subject key identifier:   65:9B:2A:CF:7E:8B:BF:D5:6C:10:5C:70:54:BB:32:1C:A9:5D:EC:7F
Certificate issuer:       /CN=e601b694-6242-4b1c-a841-d0a7214cd9c7
Certificate serial:       010D0C9F432858471FD5DBB48BF461786D582580
Authority key identifier: 96:7A:A6:3B:2E:D3:AA:65:44:0B:7E:8B:F5:4B:BA:F1:ED:95:50:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/3d51ff96-2f88-34fd-975b-1a32cf2f1fcc.roa
Signing time:             Fri 06 Sep 2024 13:00:41 +0000
ROA not before:           Fri 06 Sep 2024 13:00:41 +0000
ROA not after:            Thu 05 Dec 2024 14:00:41 +0000
asID:                     32982
IP address blocks:        2607:f368:a004::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/e601b694-6242-4b1c-a841-d0a7214cd9c7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/e601b694-6242-4b1c-a841-d0a7214cd9c7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1f:d5:db:b4:8b:f4:61:78:6d:58:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e601b694-6242-4b1c-a841-d0a7214cd9c7
        Validity
            Not Before: Sep  6 13:00:41 2024 GMT
            Not After : Dec  5 14:00:41 2024 GMT
        Subject: CN=0e2c079f-1b70-493a-ae42-2839110192f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:08:ef:52:4d:2b:43:68:16:e2:9e:19:be:9b:
                    6c:e7:49:93:27:1b:bf:c0:80:01:e9:1a:76:c6:22:
                    90:93:39:81:82:c1:8b:26:80:29:44:a8:a2:d5:47:
                    9a:33:0b:dc:c0:07:93:4f:db:89:6f:b3:28:ea:4f:
                    fe:3f:1a:fe:c6:67:17:ed:48:ec:4f:62:26:d7:e1:
                    9b:11:dc:87:99:41:4c:9d:06:81:5f:09:5d:3e:05:
                    b7:7c:e2:8b:6e:f7:33:bb:65:84:a8:82:da:9b:8b:
                    09:10:5a:c5:c3:eb:ce:20:5f:4b:07:a7:30:f9:15:
                    1d:4d:32:23:02:9d:6d:69:02:97:d1:b1:00:74:10:
                    05:4d:57:89:ef:42:6c:be:f1:64:bb:53:27:7e:2e:
                    bf:df:b7:92:ef:3e:d8:15:24:ea:37:fb:9c:64:32:
                    2d:6a:f6:8f:52:bf:a6:9a:47:40:ca:1b:ef:82:4f:
                    e7:5c:53:a8:72:70:a9:41:2d:86:4f:3c:03:cc:4b:
                    8d:3b:f7:27:ad:32:36:cc:59:f1:93:39:b5:3d:cc:
                    9b:24:ef:ec:fa:8e:53:63:b5:e3:b7:18:a0:89:7e:
                    0d:9b:1e:50:3e:1f:91:e0:dd:7e:83:47:c7:66:da:
                    dc:24:d1:50:2f:36:a8:6d:c0:a8:25:1a:82:b6:98:
                    49:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:9B:2A:CF:7E:8B:BF:D5:6C:10:5C:70:54:BB:32:1C:A9:5D:EC:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/3d51ff96-2f88-34fd-975b-1a32cf2f1fcc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/e601b694-6242-4b1c-a841-d0a7214cd9c7.crl

            X509v3 Authority Key Identifier:
                keyid:96:7A:A6:3B:2E:D3:AA:65:44:0B:7E:8B:F5:4B:BA:F1:ED:95:50:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f368:a004::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:ed:2f:2a:a3:e5:91:b4:fb:54:8a:32:4c:30:08:7e:3d:f8:
         c0:b3:e5:8e:fd:b4:a2:72:49:cc:3b:8c:91:16:6a:d6:14:be:
         fd:c1:23:74:4d:9d:c8:4e:11:2b:5c:b4:b6:3b:45:71:ab:6f:
         e4:4b:61:0a:f6:f6:83:87:e8:c5:8c:10:27:ef:fc:0f:1c:0b:
         40:0c:92:ea:3a:cb:3d:09:45:75:a4:3a:2b:1d:88:f0:73:ee:
         1c:b4:57:fb:88:73:ac:13:52:70:d8:f0:4a:fb:b3:d0:18:db:
         2f:13:57:62:dd:e8:72:e1:07:eb:51:75:83:77:67:aa:c5:6f:
         c2:5d:88:1c:6c:61:e7:59:09:d3:5e:54:61:af:a6:17:7d:20:
         4c:5e:11:5a:b7:df:4a:dd:50:f4:09:34:c8:02:30:25:76:8d:
         2f:7f:55:83:5f:d3:3e:c7:7a:5c:0e:73:85:5f:b7:a1:05:ff:
         ce:77:a7:10:9d:ad:56:55:a1:c4:45:63:30:4b:6f:32:f2:31:
         83:7e:b7:e0:4b:b4:8c:1f:71:88:88:98:bd:a7:fc:da:f4:da:
         05:b0:e8:1e:65:29:e6:ef:2f:2e:2b:20:ca:12:f7:17:2d:4e:
         d5:5a:2f:3a:a9:cc:3d:67:86:fb:21:c7:42:cd:9a:8a:1c:66:
         b7:0c:eb:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 20:19:12 2024 by rpki-client on console-fra.rpki-client.org