Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/7472e233-c3ae-37b8-a8be-ec2b234930bb.roa
File:                     7472e233-c3ae-37b8-a8be-ec2b234930bb.roa (raw, json)
Hash identifier:          /p6Fz5XLcl7azhAcuQ8oWDrQKiRLa0zI4J1wxqLBhZM=
Subject key identifier:   DD:F6:B9:3D:26:7B:D2:24:9C:4E:B3:74:8D:4F:71:50:E0:28:26:0A
Certificate issuer:       /CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2
Certificate serial:       010D0C9F43285847A73BDB8702357F4741CB49C0
Authority key identifier: 5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/7472e233-c3ae-37b8-a8be-ec2b234930bb.roa
Signing time:             Fri 25 Oct 2024 01:00:31 +0000
ROA not before:           Fri 25 Oct 2024 01:00:31 +0000
ROA not after:            Thu 23 Jan 2025 02:00:31 +0000
asID:                     46450
IP address blocks:        2606:3580::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a7:3b:db:87:02:35:7f:47:41:cb:49:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2
        Validity
            Not Before: Oct 25 01:00:31 2024 GMT
            Not After : Jan 23 02:00:31 2025 GMT
        Subject: CN=b978af60-be2a-406d-8505-0831d8d9090f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a3:ef:60:a2:ea:e8:56:55:8c:19:30:b2:a0:
                    96:69:01:af:80:4f:b0:df:fa:62:16:27:79:1c:51:
                    f0:37:77:aa:15:07:fb:cb:3d:5c:ca:3f:32:78:e7:
                    e4:47:1e:8f:35:5e:2e:24:17:56:b6:5a:4d:1a:28:
                    09:25:5b:67:e2:09:28:28:ce:7b:7b:f9:96:94:2c:
                    4a:98:cd:ff:f3:e1:a4:c9:54:06:22:fb:ca:29:25:
                    79:1b:0d:67:17:d0:9c:8a:13:d8:87:84:a1:bd:0a:
                    a8:e0:4a:40:88:5b:6f:0a:3d:a7:aa:38:b6:1e:b3:
                    4f:ec:0c:a9:54:03:e4:59:90:98:44:29:07:aa:20:
                    7b:9c:53:e3:d1:a7:97:1b:66:40:49:38:a9:cf:30:
                    fc:88:e1:24:f0:99:10:03:10:ed:61:10:83:48:ac:
                    d6:10:82:5c:df:5b:f4:4a:0b:e1:72:6a:c8:7b:cc:
                    db:32:c9:65:c7:34:37:df:91:17:25:19:4d:eb:0c:
                    49:a5:92:b2:31:8b:f6:30:d7:a4:4c:74:a8:37:40:
                    1c:34:0c:d5:1e:25:81:56:98:0d:e6:97:7b:e3:ac:
                    b8:3c:26:04:fb:c7:ee:07:93:15:71:57:26:10:0f:
                    96:83:79:6e:1c:c7:59:e2:17:34:af:61:a8:0f:69:
                    fc:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:F6:B9:3D:26:7B:D2:24:9C:4E:B3:74:8D:4F:71:50:E0:28:26:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/7472e233-c3ae-37b8-a8be-ec2b234930bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl

            X509v3 Authority Key Identifier:
                keyid:5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3580::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:43:fc:f4:9b:56:c0:e4:0a:93:8f:65:0e:ac:cc:96:84:f1:
         3b:a1:77:74:ea:31:69:09:18:57:77:0a:11:3c:d0:98:66:ce:
         2f:e4:d3:49:1c:80:e2:87:6e:28:7c:eb:9e:3d:3e:a9:48:8c:
         e4:57:54:fc:cc:7d:f8:69:2b:d6:a6:9b:d1:93:dc:04:97:92:
         37:e4:72:5e:e6:42:1d:5a:c7:1b:bf:1d:2f:53:96:91:2a:aa:
         67:57:5e:93:cf:0a:e7:01:b2:61:32:c3:a7:ae:39:86:f8:ee:
         73:7a:ab:01:58:a8:8d:e2:bd:4e:1d:b6:5e:2b:ac:ef:ad:bf:
         f6:3a:f1:f5:b8:ef:fa:31:36:2e:16:38:0b:f9:34:07:31:9d:
         aa:54:41:01:02:22:1d:82:81:09:d6:31:7d:4a:e8:1a:48:90:
         04:69:83:e2:6b:35:e2:3c:26:25:45:23:5e:21:49:3f:ae:df:
         86:06:4d:be:f1:82:0c:a1:c6:21:ff:e6:fc:c3:f3:c3:5f:0d:
         a3:3d:fe:d6:98:2f:87:9a:6d:99:e8:f2:63:53:42:4a:36:8a:
         50:5a:ca:d1:24:84:14:85:07:4f:f3:4c:8d:ab:30:6b:8c:01:
         da:92:84:9e:d3:1c:48:91:63:62:61:c1:b3:f4:95:e1:fe:93:
         e3:96:28:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:42:51 2024 by rpki-client on console-ams.rpki-client.org