Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/87edc032-d938-4504-bf4b-96c599e50195/571ae5a9-8a91-3483-9d02-ba6f8a797098.roa
File:                     571ae5a9-8a91-3483-9d02-ba6f8a797098.roa (raw, json)
Hash identifier:          9Bsexyf3Iwvb0aBVDPhUmopiZPhQXbekp1TkCd2BOPc=
Subject key identifier:   B4:E8:B3:31:72:26:0B:BE:F1:3F:38:50:10:B7:23:93:13:EF:6A:0B
Certificate issuer:       /CN=87edc032-d938-4504-bf4b-96c599e50195
Certificate serial:       010D0C9F4328584802B09754655FFBB9EF621A00
Authority key identifier: 1B:EE:D5:18:60:7D:3D:A9:C2:E8:2D:B7:0E:0E:9D:D0:0C:8D:61:E8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/87edc032-d938-4504-bf4b-96c599e50195.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/87edc032-d938-4504-bf4b-96c599e50195/571ae5a9-8a91-3483-9d02-ba6f8a797098.roa
Signing time:             Tue 26 Nov 2024 19:14:19 +0000
ROA not before:           Tue 26 Nov 2024 19:14:19 +0000
ROA not after:            Mon 24 Feb 2025 19:14:19 +0000
asID:                     27005
IP address blocks:        2606:6d80::/32 maxlen: 44
                          2607:fbf0::/32 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/87edc032-d938-4504-bf4b-96c599e50195/87edc032-d938-4504-bf4b-96c599e50195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/87edc032-d938-4504-bf4b-96c599e50195/87edc032-d938-4504-bf4b-96c599e50195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/87edc032-d938-4504-bf4b-96c599e50195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 29 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:02:b0:97:54:65:5f:fb:b9:ef:62:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87edc032-d938-4504-bf4b-96c599e50195
        Validity
            Not Before: Nov 26 19:14:19 2024 GMT
            Not After : Feb 24 19:14:19 2025 GMT
        Subject: CN=3a95da6e-8242-46a7-a8cc-67ae4e6dcd35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:dd:71:ca:ad:92:f2:f8:b8:06:09:c1:8c:cc:
                    0b:02:28:43:5d:1c:c0:2a:2c:6e:a4:75:de:b0:f0:
                    e2:9f:52:e1:cf:ed:de:5c:fc:41:6d:50:89:63:83:
                    cd:a3:b3:b5:f4:fa:19:4b:a4:0f:7f:45:e3:72:8a:
                    a9:3e:b9:a1:6e:7d:b5:7b:18:c1:53:60:58:b2:8c:
                    0f:e7:62:d2:1f:6d:39:73:ce:fe:ca:6a:13:3a:1c:
                    d6:d6:f0:22:a4:7e:92:df:ee:39:d5:a3:11:a8:74:
                    9d:31:7d:6d:d5:ab:a5:45:1c:69:16:c9:a6:50:f7:
                    26:3c:66:dd:94:ad:a5:c2:ca:e4:33:e6:6a:62:de:
                    6c:40:f2:3a:3c:19:f1:ad:0c:5c:da:8a:34:c6:dc:
                    43:8f:78:3a:c8:36:f3:fe:f0:a4:fa:26:8b:26:fa:
                    94:3a:55:1a:e8:39:7b:9d:ba:a5:e8:d9:c0:62:df:
                    cd:45:e9:cf:35:14:02:3c:a0:2f:d2:93:4d:bc:c8:
                    d2:1d:36:59:3d:aa:4c:c8:e9:10:24:a0:ee:c4:75:
                    90:f1:d8:31:02:b4:e4:fa:9b:f0:31:4d:7a:a8:38:
                    0f:44:14:8c:84:a1:6f:cd:ee:c4:ea:e0:1b:f6:1a:
                    ee:ef:c2:36:09:1f:08:56:00:c0:94:54:f2:10:0c:
                    c1:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:E8:B3:31:72:26:0B:BE:F1:3F:38:50:10:B7:23:93:13:EF:6A:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/87edc032-d938-4504-bf4b-96c599e50195/571ae5a9-8a91-3483-9d02-ba6f8a797098.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/87edc032-d938-4504-bf4b-96c599e50195/87edc032-d938-4504-bf4b-96c599e50195.crl

            X509v3 Authority Key Identifier:
                keyid:1B:EE:D5:18:60:7D:3D:A9:C2:E8:2D:B7:0E:0E:9D:D0:0C:8D:61:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/87edc032-d938-4504-bf4b-96c599e50195.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:6d80::/32
                  2607:fbf0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:80:20:20:0a:29:35:6b:a9:6d:35:da:4f:11:50:d8:4d:3f:
         92:36:d3:40:98:0f:a5:8e:af:4c:03:3f:bc:6b:4f:7a:70:fc:
         dc:52:ed:97:3b:18:d7:ec:08:a1:e1:1e:51:cf:e8:bf:70:67:
         21:40:37:2d:8c:0d:9c:59:49:50:0d:c5:f6:e7:15:60:fb:c4:
         eb:60:77:81:28:c2:01:6d:37:27:a1:1a:3d:5d:ea:ad:ae:36:
         be:3f:d2:e9:9d:1b:96:1b:77:bd:19:94:b3:b4:72:ba:e8:eb:
         e2:a6:4b:48:34:3f:69:44:f9:d5:e3:5d:62:c7:ed:2c:f9:80:
         5c:54:a5:c8:20:98:14:64:55:f7:4c:98:07:ba:01:84:69:85:
         c3:15:ea:b2:d3:61:e9:d5:4c:da:bf:d9:5d:6c:8c:d1:36:12:
         b8:d4:b4:67:28:fe:c3:81:17:ef:9f:8c:d2:85:9c:6f:cd:61:
         4b:45:da:19:70:be:80:fb:9a:2c:12:8b:d0:8e:0d:80:c9:ce:
         a5:46:60:7a:35:7f:dc:44:52:02:ad:94:d5:cb:77:bb:97:13:
         4e:85:93:fa:69:17:f9:6a:67:fd:61:73:a3:16:b2:95:01:2a:
         73:3f:84:d9:ad:18:4d:ff:74:84:b0:2b:e2:7f:5b:ac:d0:2a:
         d4:6c:9e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 23:45:11 2024 by rpki-client on console-fra.rpki-client.org