Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475/1085d183-4a39-3c43-abf3-8719482aa95a.roa
File:                     1085d183-4a39-3c43-abf3-8719482aa95a.roa (raw, json)
Hash identifier:          2WIvUt3gjnWA3J/ShVlSagEgtkpkDNQvxxM/2v2BPsI=
Subject key identifier:   6E:B6:26:51:5A:2E:12:8C:84:3F:78:82:0C:F5:BC:3E:6A:4D:BF:FD
Certificate issuer:       /CN=f16b1ed2-491f-4ed7-be99-59b20310c475
Certificate serial:       010D0C9F432858474F4B762C7CEDA3A39704C240
Authority key identifier: 10:63:9B:2C:4A:02:6A:D8:33:C9:71:22:24:52:5C:80:BE:6C:AB:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475/1085d183-4a39-3c43-abf3-8719482aa95a.roa
Signing time:             Mon 23 Sep 2024 13:00:40 +0000
ROA not before:           Mon 23 Sep 2024 13:00:40 +0000
ROA not after:            Sun 22 Dec 2024 14:00:40 +0000
asID:                     11924
IP address blocks:        2607:faa0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475/f16b1ed2-491f-4ed7-be99-59b20310c475.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475/f16b1ed2-491f-4ed7-be99-59b20310c475.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4f:4b:76:2c:7c:ed:a3:a3:97:04:c2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f16b1ed2-491f-4ed7-be99-59b20310c475
        Validity
            Not Before: Sep 23 13:00:40 2024 GMT
            Not After : Dec 22 14:00:40 2024 GMT
        Subject: CN=998e18bc-02eb-4c95-ba8e-efcceb45acc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:50:a9:07:5f:5b:19:5a:4d:22:50:75:c0:37:
                    bc:19:68:d8:3f:dd:95:a1:99:ed:5e:f0:3f:c6:c5:
                    14:ca:e1:00:35:c1:07:a5:a8:a3:62:81:e4:3e:45:
                    ab:b8:d8:9d:8c:71:a5:c6:14:69:bc:94:2d:48:a4:
                    f5:07:83:8e:47:37:16:5b:ab:1d:64:f7:3a:19:04:
                    a1:92:c4:6d:26:66:22:89:35:5f:f0:5d:6f:e0:99:
                    b3:6e:c9:0d:f0:99:e0:56:f5:81:8e:3b:ef:3b:4b:
                    c1:4a:54:eb:bd:fd:31:70:37:39:6f:d9:ee:31:fb:
                    2a:ec:27:19:c3:24:93:62:6a:5a:7c:27:e1:7f:25:
                    f5:52:43:6f:08:cf:8b:ae:5d:ac:fc:d8:00:ac:97:
                    06:e2:b0:09:9a:12:01:b0:1f:41:a6:9d:61:8c:3f:
                    9a:61:80:f4:a0:64:6c:03:8e:4a:dd:c9:e9:b6:80:
                    55:81:bc:50:f0:1c:01:d1:73:96:1b:e1:65:0a:77:
                    06:17:84:6f:c6:65:15:4c:86:c8:ff:ab:ab:dd:03:
                    fb:9b:e6:92:fb:be:25:12:ea:57:e5:97:25:af:b3:
                    63:6a:52:2e:39:80:fe:ae:e8:75:57:c0:90:54:30:
                    ac:4f:00:bf:ac:eb:49:24:89:3a:45:83:9d:1b:1d:
                    c9:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:B6:26:51:5A:2E:12:8C:84:3F:78:82:0C:F5:BC:3E:6A:4D:BF:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475/1085d183-4a39-3c43-abf3-8719482aa95a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475/f16b1ed2-491f-4ed7-be99-59b20310c475.crl

            X509v3 Authority Key Identifier:
                keyid:10:63:9B:2C:4A:02:6A:D8:33:C9:71:22:24:52:5C:80:BE:6C:AB:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:faa0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:13:aa:fb:f9:46:cf:6d:58:6b:46:b1:31:3c:6a:7c:ed:52:
         71:f8:51:07:b9:eb:a4:53:12:47:3a:ad:dc:55:3d:b6:3f:2e:
         12:1f:93:0a:f4:bc:eb:96:6d:f3:bc:52:37:47:39:2d:41:f6:
         31:33:72:c1:f3:51:4c:e4:a5:1c:25:b3:89:e2:28:45:e4:61:
         0c:14:91:3a:30:1b:f9:1d:ca:50:ae:0b:6e:9e:f0:97:5b:91:
         37:9a:03:03:b6:bc:75:91:2c:8c:9e:c5:44:6b:24:ac:c2:41:
         39:c4:35:79:4d:ef:f1:dc:5d:99:72:a6:d2:73:97:c0:f0:00:
         d0:08:f0:3a:70:b7:6a:de:7b:12:7e:5d:7c:13:c4:0c:f7:b2:
         90:38:e0:9f:c1:c6:53:00:2b:89:ce:ab:38:92:d9:ce:ec:a0:
         5c:92:01:33:15:db:e5:5f:29:c9:81:cc:fd:ff:8f:01:64:74:
         38:7f:ab:39:e8:a3:49:90:72:c7:01:ac:10:e5:77:3c:69:a8:
         98:39:75:0e:f1:20:51:95:70:ad:82:e5:85:38:0f:cf:f6:85:
         8e:a3:55:20:55:b3:9a:29:f7:5d:0b:39:fa:09:a3:e1:3a:2f:
         e1:8a:04:ee:aa:70:30:8a:5c:14:7d:e2:60:53:01:a9:4e:81:
         11:ac:be:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:36:13 2024 by rpki-client on console-fra.rpki-client.org