Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/7251ede9-db40-315e-96d5-145116a009a0.roa
File:                     7251ede9-db40-315e-96d5-145116a009a0.roa (raw, json)
Hash identifier:          E7h0ePuY1YdaBj6JlKv6NaMh/ypMx24oIVvkpL9DWe0=
Subject key identifier:   C6:EA:AE:4D:58:3F:B6:14:77:41:0B:52:F3:EF:45:3B:FA:7E:C7:65
Certificate issuer:       /CN=d5323dac-a15d-4f82-a70b-30e1a4ca1279
Certificate serial:       010D0C9F432858474850A6A6CDAF133946B35080
Authority key identifier: C8:36:37:73:F5:2A:CA:E8:CB:EB:92:19:6E:5C:AF:20:55:F1:1A:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/7251ede9-db40-315e-96d5-145116a009a0.roa
Signing time:             Sat 21 Sep 2024 01:00:33 +0000
ROA not before:           Sat 21 Sep 2024 01:00:33 +0000
ROA not after:            Fri 20 Dec 2024 02:00:33 +0000
asID:                     46562
IP address blocks:        2604:2880::/32 maxlen: 64
                          2607:f7a0::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/d5323dac-a15d-4f82-a70b-30e1a4ca1279.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/d5323dac-a15d-4f82-a70b-30e1a4ca1279.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:48:50:a6:a6:cd:af:13:39:46:b3:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5323dac-a15d-4f82-a70b-30e1a4ca1279
        Validity
            Not Before: Sep 21 01:00:33 2024 GMT
            Not After : Dec 20 02:00:33 2024 GMT
        Subject: CN=0e6ce12c-4739-4c97-abf3-640cafa293ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:6c:55:0e:f2:b9:57:3d:0a:03:4e:65:47:07:
                    4b:19:58:f0:64:29:91:cf:35:07:f0:67:e2:96:2e:
                    17:a1:22:28:b3:74:7d:f1:f0:e1:fd:65:17:7f:97:
                    ea:1c:85:6e:bc:ae:03:7b:c3:08:0c:f5:5f:71:b3:
                    36:6f:ff:c7:e4:ec:9d:49:48:f9:08:50:9c:72:c7:
                    93:ad:4f:06:1c:30:66:9a:d4:cb:aa:49:c8:4f:b1:
                    0e:22:1d:98:49:e0:04:90:69:5a:0d:a3:66:00:d9:
                    3b:90:2e:f4:dc:3c:80:8e:82:9d:31:b4:b9:d8:3b:
                    2d:3d:34:29:9d:da:23:c8:7c:42:c0:b5:11:92:21:
                    ed:fc:68:d0:a4:10:42:0a:a4:37:04:c7:55:9d:be:
                    3e:73:b8:3b:b5:4a:f3:9c:c2:b2:d3:ce:32:ca:ae:
                    b1:34:0c:f7:40:a1:5e:bb:40:7c:30:cd:c9:b8:dc:
                    df:97:15:27:d6:ff:5c:e8:1b:1d:2c:6e:ab:4d:95:
                    94:53:b6:84:64:48:d8:a4:09:a8:6f:48:1a:63:83:
                    04:69:09:11:78:94:1c:68:c4:e1:64:09:31:05:a6:
                    a4:22:80:c2:c7:17:c9:e5:35:a6:e1:71:39:90:e8:
                    fd:08:60:40:09:0a:54:39:c1:da:b4:3b:f0:ac:21:
                    2b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:EA:AE:4D:58:3F:B6:14:77:41:0B:52:F3:EF:45:3B:FA:7E:C7:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/7251ede9-db40-315e-96d5-145116a009a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/d5323dac-a15d-4f82-a70b-30e1a4ca1279.crl

            X509v3 Authority Key Identifier:
                keyid:C8:36:37:73:F5:2A:CA:E8:CB:EB:92:19:6E:5C:AF:20:55:F1:1A:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2880::/32
                  2607:f7a0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:a1:1d:5b:50:fd:fe:84:24:48:41:e7:ca:43:87:ce:06:ed:
         b9:c3:28:5a:d6:06:80:d0:c4:8d:7d:87:42:ac:bc:2f:b3:8b:
         22:63:70:02:67:b6:31:06:9d:6c:95:ef:5b:17:24:17:92:2c:
         53:4c:41:2b:b8:c9:4a:e9:dd:90:1f:3a:c7:7b:31:57:2b:83:
         96:73:f3:3b:02:7f:62:2e:cd:bc:33:66:fb:2c:ee:26:fb:88:
         8a:77:21:28:af:85:c2:30:1b:a0:bf:bb:8f:f8:3a:4a:b5:d3:
         e9:5f:f9:33:d2:cf:18:2a:55:6e:5c:b4:82:4f:ef:90:7a:16:
         d7:31:50:fd:81:5f:46:08:45:f8:d9:a3:8a:01:7c:92:68:17:
         48:56:b7:7b:36:07:f2:db:73:15:8e:26:c6:bc:35:40:5b:1a:
         29:5b:95:8a:69:ab:54:8e:64:f6:e9:27:14:f5:16:49:62:ed:
         ea:d5:f7:8b:37:a3:9a:e4:9c:54:41:77:95:3b:ef:c7:2b:bc:
         34:50:ad:7b:03:9f:da:c6:13:22:0c:82:03:4d:8f:17:36:30:
         21:44:2d:10:e7:38:c9:2f:51:c5:78:d3:f4:3c:45:f1:86:0d:
         32:dd:6f:2d:ba:21:be:42:d6:81:91:80:07:7d:32:37:79:3c:
         52:c7:4e:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:25:24 2024 by rpki-client on console-fra.rpki-client.org