Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2742fee-57dd-438b-8ef0-812e02deeeba/c3497eb0-d496-38ae-bdab-99444242c6eb.roa
File:                     c3497eb0-d496-38ae-bdab-99444242c6eb.roa (raw, json)
Hash identifier:          HqGCB7IVhXLPxOBByr1z8/VTL88I3pGdhJ7fODgHxqo=
Subject key identifier:   76:97:DF:D7:A1:DC:67:A9:D7:EA:12:DD:C0:38:60:BC:E4:F7:0C:0B
Certificate issuer:       /CN=f2742fee-57dd-438b-8ef0-812e02deeeba
Certificate serial:       010D0C9F43285846682B98BC62838EE017C80B80
Authority key identifier: 9D:D4:45:B7:78:0F:22:B8:CF:9C:83:C6:51:D7:D3:76:EB:6B:7A:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2742fee-57dd-438b-8ef0-812e02deeeba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2742fee-57dd-438b-8ef0-812e02deeeba/c3497eb0-d496-38ae-bdab-99444242c6eb.roa
Signing time:             Tue 02 Jul 2024 18:04:55 +0000
ROA not before:           Tue 02 Jul 2024 18:04:55 +0000
ROA not after:            Mon 30 Sep 2024 18:04:55 +0000
asID:                     40583
IP address blocks:        2606:d840::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2742fee-57dd-438b-8ef0-812e02deeeba/f2742fee-57dd-438b-8ef0-812e02deeeba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2742fee-57dd-438b-8ef0-812e02deeeba/f2742fee-57dd-438b-8ef0-812e02deeeba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2742fee-57dd-438b-8ef0-812e02deeeba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Sep 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:68:2b:98:bc:62:83:8e:e0:17:c8:0b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2742fee-57dd-438b-8ef0-812e02deeeba
        Validity
            Not Before: Jul  2 18:04:55 2024 GMT
            Not After : Sep 30 18:04:55 2024 GMT
        Subject: CN=2d4fc02b-1561-4e9f-b44f-4ab83d261c1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:45:4d:cd:d9:e4:25:e4:a8:23:f7:97:08:23:
                    f4:f1:7c:0b:54:b5:10:4f:79:0e:28:00:e9:46:58:
                    82:5e:78:81:1e:60:bf:e5:79:0a:80:c8:b2:a6:6e:
                    7c:14:57:94:c7:90:9d:a1:68:b2:6d:89:f1:fd:ea:
                    ec:fb:db:fa:cd:d4:6f:d4:0d:f9:0a:f3:d4:ed:36:
                    0b:c7:de:70:df:50:b5:6d:4e:60:6c:59:60:d1:a8:
                    f9:77:60:ef:18:ee:90:3f:32:2c:c8:a5:3f:b8:ea:
                    5d:29:2f:b5:c2:be:e7:6c:c8:d4:e0:5c:99:ea:b2:
                    fa:ba:57:f9:29:ab:53:82:30:22:e7:2b:38:8d:eb:
                    ca:c6:e9:7b:83:c8:e9:7e:99:91:29:96:da:2c:29:
                    91:2f:5d:a3:27:d6:f8:21:b9:2e:ff:ea:2a:6e:69:
                    37:04:4f:05:51:b5:ca:29:d4:9b:e7:ba:7c:f6:59:
                    cf:bd:3a:11:eb:b5:b0:08:67:f8:37:2d:73:51:b6:
                    84:a6:49:81:57:ca:54:54:e3:b6:d8:47:2f:c1:4a:
                    41:5b:5c:16:9d:64:45:ea:89:65:c2:34:a6:f5:5b:
                    f1:26:b8:26:25:c5:c8:5a:61:fc:ff:ce:67:86:37:
                    19:9d:e6:77:92:8d:a8:1f:3e:da:4d:d2:14:74:76:
                    54:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:97:DF:D7:A1:DC:67:A9:D7:EA:12:DD:C0:38:60:BC:E4:F7:0C:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2742fee-57dd-438b-8ef0-812e02deeeba/c3497eb0-d496-38ae-bdab-99444242c6eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2742fee-57dd-438b-8ef0-812e02deeeba/f2742fee-57dd-438b-8ef0-812e02deeeba.crl

            X509v3 Authority Key Identifier:
                keyid:9D:D4:45:B7:78:0F:22:B8:CF:9C:83:C6:51:D7:D3:76:EB:6B:7A:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2742fee-57dd-438b-8ef0-812e02deeeba.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:d840::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:99:c9:83:87:bd:d7:a5:a9:7f:a8:75:be:3b:d4:be:a5:88:
         a1:e8:35:82:8b:e8:49:28:19:c0:bc:38:26:c1:3c:71:1a:89:
         d6:7d:37:89:a1:e0:15:22:88:4f:e1:be:e0:66:55:cc:24:6b:
         1a:e0:3a:2b:7d:92:1d:6e:54:ac:bc:24:92:5f:ec:b2:c7:e6:
         9e:ad:51:6d:7a:60:77:bf:df:dc:0f:8b:d3:b1:5f:af:f7:d6:
         0a:d5:ad:66:f9:88:e8:7e:0c:9b:21:fe:2c:1f:a4:19:5e:d7:
         e7:cf:20:69:6b:91:88:d6:ca:27:75:f9:52:15:73:6c:a6:0c:
         66:dd:fa:cd:9c:4c:60:70:5f:64:3b:64:13:a5:b4:6d:3a:9f:
         8d:f6:27:84:91:3d:96:ab:4a:5d:9b:a9:32:7e:9d:da:7d:45:
         68:a8:fd:7f:40:0a:08:ea:22:df:51:eb:8e:65:c2:cb:66:d7:
         a8:3e:3d:96:22:75:cc:36:d8:5a:58:9c:64:aa:24:b8:1c:e2:
         f7:76:0a:bd:ad:af:f6:6b:b3:d4:96:55:ab:3d:48:aa:59:81:
         c7:be:df:16:30:ad:9e:91:b1:f9:dd:18:20:95:35:7e:b2:27:
         91:39:a5:66:40:0f:85:41:38:ea:eb:f1:75:3f:cf:5b:3d:2e:
         66:ed:3c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 18:01:06 2024 by rpki-client on console-ams.rpki-client.org