Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/77debda9-7647-3bc8-8ebc-825155c00ab7.roa
File:                     77debda9-7647-3bc8-8ebc-825155c00ab7.roa (raw, json)
Hash identifier:          H9GCKWoaafmYecQ7klTR/Tg21UBBLwZHfflvEoR5yd4=
Subject key identifier:   09:AD:8F:F4:75:77:2B:C7:4D:D3:50:DD:2D:4F:CA:EA:60:7B:64:72
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285847E62B6D42FA80E18A302BBD80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/77debda9-7647-3bc8-8ebc-825155c00ab7.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     15169
IP address blocks:        2607:f8b0:400f::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2b:6d:42:fa:80:e1:8a:30:2b:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=cec3f277-d830-4a9e-a947-339e789b19d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:a8:75:0b:8e:1a:4c:d7:85:bf:8c:3d:04:f2:
                    9f:be:59:85:de:fe:3f:b4:1f:90:17:12:d1:41:d4:
                    69:31:49:44:68:d8:f4:6f:f3:c6:55:8f:da:30:ba:
                    3a:48:5f:63:9f:43:39:ed:bd:ff:81:99:1f:3a:33:
                    ed:cd:9a:02:6a:8c:76:21:39:63:ec:b6:a1:40:a1:
                    02:d3:07:bc:58:30:e7:53:02:65:c7:70:f9:23:e8:
                    62:fe:f7:37:27:6a:4d:23:0f:2a:bb:76:63:04:2d:
                    99:d0:08:54:6e:62:94:ab:c1:43:c4:1e:f9:c0:ed:
                    14:64:83:9c:65:01:00:6f:2c:02:7f:06:ca:db:83:
                    21:6b:dc:d9:00:7b:82:31:57:86:46:14:09:8b:fd:
                    31:d6:ac:3f:a9:9c:89:97:9f:65:8b:65:70:63:81:
                    69:40:07:e0:61:82:07:22:7a:e2:49:81:9f:13:b1:
                    f0:29:8b:0d:c0:cc:5a:fb:99:01:7a:93:67:9e:9f:
                    e5:74:20:1d:39:2e:cb:08:1f:55:2e:f3:09:81:dc:
                    13:b6:99:20:46:02:a4:33:b5:a5:7f:b9:81:48:08:
                    7b:eb:ae:20:fa:87:59:e4:ba:01:39:43:ee:6a:ea:
                    43:3b:12:6c:01:25:3d:41:a1:a1:42:b7:67:99:27:
                    ca:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:AD:8F:F4:75:77:2B:C7:4D:D3:50:DD:2D:4F:CA:EA:60:7B:64:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/77debda9-7647-3bc8-8ebc-825155c00ab7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f8b0:400f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:e9:a4:fd:33:33:17:52:a0:76:87:9b:0c:20:41:2b:1f:3e:
         4f:c9:cc:5b:e7:79:c8:24:15:22:06:c7:73:87:b6:2e:81:27:
         d0:7f:a4:02:59:25:59:1a:41:c0:fc:6d:0a:52:4f:ac:1e:11:
         66:28:a2:ca:86:ba:00:14:ca:ab:28:b9:28:db:f7:dd:ed:11:
         42:88:c2:8e:00:77:d3:00:f4:75:04:50:c8:59:a1:02:d0:b3:
         ac:1c:01:4b:64:6b:0f:d0:aa:ae:9c:6d:f9:d0:e9:fd:91:22:
         98:73:1d:9c:d2:3e:ca:3a:0a:a7:b8:f5:ca:31:44:f5:26:ad:
         3a:47:6e:a4:31:c0:4b:28:c2:e9:0a:38:10:32:9a:5c:d6:24:
         99:c2:12:ce:b5:3f:fb:53:2d:5e:2c:c4:ca:27:18:3a:1e:6d:
         50:5e:ff:8c:30:7d:8d:6c:25:12:fb:83:d8:3b:0a:ef:14:99:
         45:6c:e7:b6:45:8e:8b:c6:d5:cf:e2:c8:0f:48:ce:06:46:f1:
         e8:16:7f:3b:00:7c:7f:15:ed:30:16:fa:1d:b4:fb:00:c5:84:
         b1:70:8b:75:01:25:2f:5a:02:c0:f6:27:e2:3a:a1:7d:aa:4a:
         16:b2:92:57:a0:e1:0e:be:f2:6d:ff:35:49:10:34:51:6f:10:
         49:57:1f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:25:18 2024 by rpki-client on console-fra.rpki-client.org