Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/b51e01cc-9e17-31c0-9311-af8e1e0e2baa.roa
File:                     b51e01cc-9e17-31c0-9311-af8e1e0e2baa.roa (raw, json)
Hash identifier:          ULHHsGGc4K+eFt32r6B9hFTVCoQ+CzbQ/QwUZ32lKas=
Subject key identifier:   F1:3A:E3:3D:50:F8:9B:19:D4:9F:6F:F6:5C:C0:B8:A7:FE:7C:2F:EB
Certificate issuer:       /CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536
Certificate serial:       010D0C9F432858471E70569EF96D8686D8744900
Authority key identifier: B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/b51e01cc-9e17-31c0-9311-af8e1e0e2baa.roa
Signing time:             Fri 06 Sep 2024 01:00:31 +0000
ROA not before:           Fri 06 Sep 2024 01:00:31 +0000
ROA not after:            Thu 05 Dec 2024 02:00:31 +0000
asID:                     13807
IP address blocks:        2607:fdf0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1e:70:56:9e:f9:6d:86:86:d8:74:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536
        Validity
            Not Before: Sep  6 01:00:31 2024 GMT
            Not After : Dec  5 02:00:31 2024 GMT
        Subject: CN=23a46f01-d8d8-486e-bac6-7a31404cbdf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9a:b1:13:6f:53:ec:d2:3c:e6:0e:32:15:a3:
                    bb:0d:0b:4d:2c:6e:0a:45:ca:14:b0:d3:e0:c7:51:
                    69:f1:03:4d:73:d3:db:6a:e5:8e:e7:57:3c:16:57:
                    cf:41:65:b9:c3:20:3e:4d:f0:19:a9:44:5e:0b:4f:
                    9a:2b:9a:84:90:6e:70:1d:7b:31:09:9d:b6:af:58:
                    75:51:a5:7d:ab:da:23:14:03:17:85:b5:d9:c8:f8:
                    01:64:08:0b:7a:ec:01:86:7c:de:45:43:24:42:fc:
                    15:57:44:b0:8c:31:a0:0a:66:dc:ae:1e:50:de:09:
                    9b:53:8b:e4:a2:f0:48:a3:22:7a:4b:fe:01:67:12:
                    c7:87:cb:35:18:d5:e5:13:59:36:bc:4a:8b:40:69:
                    8d:21:3b:3e:d0:22:8c:7d:4d:fa:0b:6d:27:7a:a0:
                    83:54:42:66:df:29:0a:11:1d:b1:49:12:52:47:e5:
                    aa:6e:41:98:65:ca:a5:63:72:71:78:81:b7:2c:d8:
                    47:1e:95:89:46:ac:d1:56:33:93:d2:7c:57:25:c3:
                    69:fa:32:ff:25:16:92:b0:0b:5f:dc:e0:d8:19:82:
                    5a:11:54:87:82:1f:0d:ea:47:24:08:e2:6b:b0:b5:
                    95:50:04:79:3a:ae:f9:4c:e6:1e:4f:6d:e7:0e:d5:
                    18:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:3A:E3:3D:50:F8:9B:19:D4:9F:6F:F6:5C:C0:B8:A7:FE:7C:2F:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/b51e01cc-9e17-31c0-9311-af8e1e0e2baa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl

            X509v3 Authority Key Identifier:
                keyid:B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fdf0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:35:0a:25:32:f7:8e:60:7b:b0:6f:c4:6f:70:b3:8a:17:e8:
         90:7c:cc:6b:7b:84:ab:33:59:74:6c:5b:8a:3f:f7:b1:22:04:
         29:6c:54:ed:76:d8:a1:26:66:40:8e:58:2e:e1:f2:42:72:1a:
         48:cb:46:df:e1:07:83:7c:bb:8f:09:05:d7:e6:0a:24:32:ab:
         bc:8f:a9:72:06:73:33:b3:9a:3e:1a:40:b4:64:9b:b7:75:69:
         2f:3e:63:ca:94:5d:a1:87:d2:39:c5:6f:17:87:aa:e0:01:98:
         d9:3c:da:dc:51:12:59:08:1c:83:e1:2b:24:ab:ef:bb:4c:21:
         6a:dc:e6:14:7d:21:8b:2c:e9:eb:6f:70:50:6f:46:26:b1:f3:
         e5:08:1e:90:9f:6f:05:48:6c:5b:ec:5c:b0:56:0d:e9:d8:52:
         09:3d:04:25:3c:f8:89:65:39:0e:79:a1:3f:e0:7f:88:7a:2d:
         d4:b6:55:5f:28:95:ef:01:20:86:40:47:ec:ff:d5:29:14:34:
         fd:b4:04:6a:d3:d5:a9:bc:d8:3b:43:f1:9b:85:cd:7d:c5:dc:
         91:9d:b9:ce:32:79:f9:e2:b2:86:1e:62:82:31:be:0b:39:6b:
         34:bc:cf:f1:48:59:69:0a:98:b4:85:86:88:b9:3c:d5:47:9f:
         3b:89:42:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:51:37 2024 by rpki-client on console-ams.rpki-client.org