Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/047e6206-71ba-3e6e-b73b-d50215b24061.roa
File:                     047e6206-71ba-3e6e-b73b-d50215b24061.roa (raw, json)
Hash identifier:          Eq07AUbIGlSJ7zWtnEUomrGGzt0H1CQ7eNpBuAq2s98=
Subject key identifier:   62:00:F9:59:CD:0C:5B:9F:88:7B:4E:AD:71:7E:60:C8:E6:8B:03:18
Certificate issuer:       /CN=45de47ca-0b52-44ab-af26-767d8a671192
Certificate serial:       010D0C9F432858471B0A3306F46F26D06D367300
Authority key identifier: C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/047e6206-71ba-3e6e-b73b-d50215b24061.roa
Signing time:             Wed 04 Sep 2024 19:47:20 +0000
ROA not before:           Wed 04 Sep 2024 19:47:20 +0000
ROA not after:            Tue 03 Dec 2024 20:47:20 +0000
asID:                     5645
IP address blocks:        2607:f2c0::/32 maxlen: 32
                          2607:f2c0:9900::/40 maxlen: 40
                          2607:f2c0:9a00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1b:0a:33:06:f4:6f:26:d0:6d:36:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45de47ca-0b52-44ab-af26-767d8a671192
        Validity
            Not Before: Sep  4 19:47:20 2024 GMT
            Not After : Dec  3 20:47:20 2024 GMT
        Subject: CN=91fb6a91-d6e9-46d5-a6ac-1b4570f3647d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:70:7b:e8:58:15:e1:f6:b8:e8:03:65:3e:df:
                    1f:b0:28:b6:02:7b:ba:47:ff:5f:a4:9b:82:60:6c:
                    bc:1c:cb:13:23:24:37:6f:53:b1:8e:a0:27:bc:a0:
                    05:8c:84:58:28:c8:7b:69:b8:af:c2:89:3e:29:66:
                    2d:59:d9:23:fb:19:07:df:97:ba:04:f6:20:c5:9c:
                    d8:21:b0:e7:24:33:9b:2c:ef:8c:82:99:6d:86:b1:
                    0d:f2:1d:d1:c3:0d:45:b3:64:70:62:50:a0:4a:26:
                    7c:82:5e:ab:84:7e:90:09:3f:c0:8f:21:0a:7b:35:
                    f3:94:64:10:e5:cc:a0:ef:7b:59:05:a1:85:47:17:
                    ee:64:c7:b8:89:b5:e1:5a:dd:85:56:d0:6c:6c:e3:
                    e1:21:99:34:14:28:f1:ff:af:df:c2:cd:e4:89:f1:
                    76:4a:c5:5f:52:c8:47:a0:f9:36:bb:9c:b9:dd:9e:
                    64:6c:85:a0:3e:00:dc:9f:0d:22:32:0c:d8:73:6c:
                    07:c4:ed:d8:00:84:4d:bc:31:95:90:27:96:48:33:
                    11:5d:ec:4e:63:6c:df:95:76:74:c2:0c:88:31:ba:
                    32:d6:32:dc:96:5d:aa:dc:72:56:f2:73:e1:de:62:
                    13:b4:b5:a4:7c:ec:e5:3c:89:1c:e3:ae:1f:35:83:
                    b9:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:00:F9:59:CD:0C:5B:9F:88:7B:4E:AD:71:7E:60:C8:E6:8B:03:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/047e6206-71ba-3e6e-b73b-d50215b24061.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.crl

            X509v3 Authority Key Identifier:
                keyid:C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f2c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:c2:2c:fe:91:4f:f8:3c:6d:22:f3:96:e0:cc:5d:01:87:63:
         b3:e6:b0:38:fa:7d:e9:18:e2:22:47:aa:ee:98:93:e4:c8:5b:
         2c:85:1b:67:c5:e8:a7:33:70:9e:7e:78:eb:b0:a4:cd:d2:9b:
         a1:89:37:13:40:9a:78:3e:33:70:5e:a9:73:ea:04:a7:86:f1:
         97:0b:64:a7:1b:0c:d1:4f:77:f0:27:82:e2:ea:0c:4e:e0:2d:
         d2:e4:25:06:19:55:49:b9:ca:9c:8d:54:63:1e:17:12:17:f7:
         81:a1:ba:0d:26:0f:da:01:10:cc:9d:47:20:ab:52:52:e6:b6:
         c3:24:f3:91:9e:49:9b:a1:7c:75:21:74:56:60:1b:e1:17:b4:
         d3:0b:50:ed:b6:a5:b5:72:29:70:04:ea:e1:ca:b2:cf:80:7b:
         d1:a7:f5:07:72:4e:ce:ae:28:c6:02:34:06:01:1c:d0:6e:54:
         9d:aa:26:c8:73:a9:d7:fd:7d:f7:19:b4:70:6b:9d:11:17:23:
         3b:8f:3d:21:ce:34:9c:52:67:80:bc:13:4c:83:3c:08:47:0e:
         f9:44:52:ba:f1:11:c7:cb:bf:57:3f:7b:be:1a:2f:40:62:2b:
         7c:03:a5:b5:59:0b:12:14:96:c1:60:a3:84:ae:c7:6a:02:14:
         5d:9e:34:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:37:10 2024 by rpki-client on console-fra.rpki-client.org