Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/26f87379-b07b-41fb-8976-6fd9e7149fda/71b83ec4-78b1-3f7e-b800-7136d3f2784e.roa
File:                     71b83ec4-78b1-3f7e-b800-7136d3f2784e.roa (raw, json)
Hash identifier:          JmK9x3DHzJzoaxGtBetQlkLGp/UfEycqgj1c3Km63gs=
Subject key identifier:   ED:DD:05:F3:43:54:CD:49:EC:32:31:51:A0:A3:5F:0E:01:DE:4F:52
Certificate issuer:       /CN=26f87379-b07b-41fb-8976-6fd9e7149fda
Certificate serial:       010D0C9F4328584726D077DA4C845A2E2167EF40
Authority key identifier: B3:E3:8B:C0:B5:ED:73:06:2C:85:6C:E9:D3:69:C8:9E:A9:E3:DB:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/26f87379-b07b-41fb-8976-6fd9e7149fda.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/26f87379-b07b-41fb-8976-6fd9e7149fda/71b83ec4-78b1-3f7e-b800-7136d3f2784e.roa
Signing time:             Mon 09 Sep 2024 01:00:31 +0000
ROA not before:           Mon 09 Sep 2024 01:00:31 +0000
ROA not after:            Sun 08 Dec 2024 02:00:31 +0000
asID:                     19016
IP address blocks:        2607::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/26f87379-b07b-41fb-8976-6fd9e7149fda/26f87379-b07b-41fb-8976-6fd9e7149fda.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/26f87379-b07b-41fb-8976-6fd9e7149fda/26f87379-b07b-41fb-8976-6fd9e7149fda.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/26f87379-b07b-41fb-8976-6fd9e7149fda.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:26:d0:77:da:4c:84:5a:2e:21:67:ef:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26f87379-b07b-41fb-8976-6fd9e7149fda
        Validity
            Not Before: Sep  9 01:00:31 2024 GMT
            Not After : Dec  8 02:00:31 2024 GMT
        Subject: CN=18f21538-520f-487f-b5a3-c7d4805a5d86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:49:1b:fe:c9:34:19:be:17:58:18:65:8f:b1:
                    1b:64:50:c3:3b:bd:87:57:c9:12:cb:b4:f3:82:74:
                    44:dc:02:33:e3:a3:a1:2e:37:d6:a8:6b:b2:cc:f5:
                    09:8f:68:56:fb:56:98:bf:9a:65:7e:42:32:6d:55:
                    ba:70:0e:84:4c:8c:4a:50:1f:72:4c:d5:33:e8:8c:
                    fd:fe:76:c0:88:24:73:51:27:8e:86:7e:be:73:93:
                    b1:76:f7:26:b2:aa:9b:15:39:08:e7:09:9f:5d:4d:
                    df:0a:58:57:7d:d1:a1:62:f7:ce:8b:4b:9c:83:c8:
                    70:d1:ef:ce:93:ec:66:b6:4c:ec:92:23:f9:83:6c:
                    e9:da:cb:04:6b:98:45:e4:06:62:c6:63:25:3a:11:
                    47:24:1e:58:4e:8e:1f:cc:00:47:c6:17:39:f8:b2:
                    fa:5d:76:aa:01:e7:d1:29:ff:02:3d:75:0b:23:c9:
                    37:7e:c1:25:61:dd:8a:bd:6c:46:a6:97:21:ea:06:
                    25:60:b8:8a:98:df:2b:5c:9b:7f:2e:4b:cd:7c:71:
                    d6:29:55:bf:38:01:0f:d6:b0:a4:64:bb:f7:dc:18:
                    0f:84:89:a9:ac:78:a6:df:9c:23:80:fa:e2:c0:55:
                    f1:98:62:66:82:e5:4a:0d:a2:e2:87:a7:9b:c6:12:
                    14:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:DD:05:F3:43:54:CD:49:EC:32:31:51:A0:A3:5F:0E:01:DE:4F:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/26f87379-b07b-41fb-8976-6fd9e7149fda/71b83ec4-78b1-3f7e-b800-7136d3f2784e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/26f87379-b07b-41fb-8976-6fd9e7149fda/26f87379-b07b-41fb-8976-6fd9e7149fda.crl

            X509v3 Authority Key Identifier:
                keyid:B3:E3:8B:C0:B5:ED:73:06:2C:85:6C:E9:D3:69:C8:9E:A9:E3:DB:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/26f87379-b07b-41fb-8976-6fd9e7149fda.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:ab:45:64:33:4e:a2:65:b0:a5:17:21:30:3d:07:fc:33:f1:
         01:e9:f2:2f:37:53:39:4d:dc:a1:5f:6e:89:3f:92:a2:c0:14:
         49:dd:47:a0:3f:eb:3b:80:a7:62:e9:23:67:55:20:5d:2b:c5:
         41:55:30:a8:a4:6f:4a:76:d6:ef:cc:5c:8f:fa:0d:03:da:97:
         77:ef:db:ac:da:78:74:c3:4c:c8:b9:69:88:9d:d8:80:c7:f2:
         f2:7b:67:a5:23:cf:72:0f:4a:d2:e0:ea:e9:4c:13:53:7e:d3:
         bd:fc:04:e8:ad:2e:3c:bf:05:17:76:b4:52:97:df:d8:e0:d9:
         9f:b4:50:f9:78:e0:d3:a4:00:c6:78:75:ac:b9:4c:a2:b5:91:
         9a:96:3b:9b:ff:5d:ec:37:a6:43:4e:ed:99:56:f4:a4:0a:0f:
         99:82:3c:d0:a8:b5:b3:4b:59:2e:8e:0e:57:cb:9f:eb:51:af:
         f8:5c:57:42:81:a9:c8:13:d0:a1:55:89:26:e2:22:d8:41:75:
         70:af:1e:cc:23:e2:c3:ba:08:e6:98:c7:fe:04:b8:cc:a7:37:
         ee:7e:c9:07:1e:a8:65:b4:55:52:a4:1a:d0:e0:22:70:ec:33:
         dd:f3:94:f1:c1:20:8b:6d:64:b5:10:a9:f4:fb:d6:83:2e:fa:
         17:75:4f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:37:08 2024 by rpki-client on console-fra.rpki-client.org