Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/ff3afc12-14b9-39d0-8cf1-9f0a2179e057.roa
File:                     ff3afc12-14b9-39d0-8cf1-9f0a2179e057.roa (raw, json)
Hash identifier:          jm8ZRPhqj6PbD6/gRumZG2rSfEoVYvwIbFLQh48A1x4=
Subject key identifier:   AF:8B:72:64:D4:9E:3F:97:A9:9E:14:9E:6A:C0:C9:BA:78:F1:C5:17
Certificate issuer:       /CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
Certificate serial:       010D0C9F4328584754E0CA8976137B105ABC2580
Authority key identifier: 5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/ff3afc12-14b9-39d0-8cf1-9f0a2179e057.roa
Signing time:             Wed 25 Sep 2024 13:00:41 +0000
ROA not before:           Wed 25 Sep 2024 13:00:41 +0000
ROA not after:            Tue 24 Dec 2024 14:00:41 +0000
asID:                     394354
IP address blocks:        2620:10a:80ae::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:54:e0:ca:89:76:13:7b:10:5a:bc:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
        Validity
            Not Before: Sep 25 13:00:41 2024 GMT
            Not After : Dec 24 14:00:41 2024 GMT
        Subject: CN=f6d237e9-a6f7-4407-b8a0-d132666e7c39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:6d:2d:a0:8a:27:0b:66:9b:ae:9b:7d:24:3e:
                    5a:df:fe:1e:3c:9d:6a:0d:e5:4f:07:a3:5a:37:e3:
                    e8:20:a5:ab:fd:41:5f:57:7c:28:92:04:c5:63:19:
                    09:9b:ba:92:5e:3a:90:aa:cd:e2:e2:b0:bb:6b:66:
                    de:e8:30:ec:d2:36:bb:9d:4a:11:56:a7:02:43:9f:
                    6f:37:09:79:37:42:5b:df:af:78:ea:4b:d9:ba:49:
                    d9:24:6a:6a:a0:3d:06:19:2e:d0:64:eb:4f:6b:7a:
                    66:dd:44:75:3f:f9:48:73:30:b8:10:73:ad:61:dc:
                    a0:00:3d:af:46:2e:c9:3c:67:19:24:f9:1c:df:9d:
                    27:70:09:f7:c5:4a:9d:2c:68:6c:90:85:92:f6:03:
                    dc:00:2a:1e:3d:6f:66:89:29:2e:2b:f0:9b:1a:51:
                    f8:fd:fe:0a:e7:95:2f:85:eb:51:aa:5f:47:57:fa:
                    91:7d:c8:5a:00:8d:07:17:d6:e7:e4:51:cd:7f:09:
                    3f:8f:64:6a:f4:79:aa:a6:72:a3:52:35:b5:70:3d:
                    a2:15:6b:09:6d:84:53:ec:7d:fc:01:10:c0:0e:2f:
                    36:bb:11:0d:9b:e5:07:67:47:77:9b:a0:da:f4:bc:
                    d9:0c:85:5c:60:21:67:f9:62:f0:f7:3b:c2:66:1c:
                    5f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:8B:72:64:D4:9E:3F:97:A9:9E:14:9E:6A:C0:C9:BA:78:F1:C5:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/ff3afc12-14b9-39d0-8cf1-9f0a2179e057.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl

            X509v3 Authority Key Identifier:
                keyid:5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:10a:80ae::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:10:c4:c4:95:2a:ce:d0:40:52:bc:f2:3f:bf:2b:63:38:9c:
         a8:32:fd:f5:ab:11:fe:20:32:3f:3a:c8:e1:bf:7d:bb:24:a0:
         10:27:37:a6:79:b7:41:13:01:77:89:a0:bf:77:e2:6c:6a:57:
         16:78:96:56:42:9c:a2:2f:96:d8:fd:4c:e1:6e:b3:65:2b:eb:
         6b:2b:8a:b7:8e:1a:3d:03:17:e1:b9:b3:7e:02:49:31:92:b0:
         b2:51:f9:10:34:d8:30:3a:8a:18:70:38:5d:7d:ee:2d:3a:2f:
         39:57:6f:c0:73:14:1f:83:5f:77:0b:ad:66:5f:9a:78:f1:74:
         11:59:3f:96:8c:13:54:60:9c:e5:9c:e4:63:79:9a:86:09:ec:
         c6:62:20:67:90:a6:f6:74:17:49:d1:10:82:46:fb:4f:67:83:
         85:2d:3e:87:a0:81:72:89:bb:62:0e:eb:98:04:d6:41:a8:3a:
         97:23:7e:e8:fb:5c:d6:cb:59:9c:f2:d8:31:b4:18:4a:41:76:
         46:f5:5a:2b:36:62:58:df:bf:7e:42:f6:bd:cc:01:21:d0:c3:
         12:6a:13:2f:a1:ce:fc:ef:bf:ac:89:d5:a0:22:98:a8:99:17:
         80:68:65:cc:9c:43:16:fc:7a:0f:d6:0f:4e:0f:28:61:b0:93:
         36:76:54:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:37:11 2024 by rpki-client on console-fra.rpki-client.org