Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d/e68cb0e8-674e-39a2-8a2f-6e807080e407.roa
File:                     e68cb0e8-674e-39a2-8a2f-6e807080e407.roa (raw, json)
Hash identifier:          jYiTpkx1O8FKVgZw2SiQ1M5eSqueeng+wEcWzL5yXEs=
Subject key identifier:   B9:77:9D:F8:76:EC:DF:F3:B8:C7:DE:5D:56:C7:5C:0F:E2:96:F1:34
Certificate issuer:       /CN=e8295820-03bc-4a4e-8072-7cbf748f4c6d
Certificate serial:       010D0C9F432858469C9FA57DACD2E0C6A9E613A0
Authority key identifier: 1A:DF:53:58:7E:52:6C:6F:CC:BA:16:03:BC:4D:10:35:18:E8:E6:A4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d/e68cb0e8-674e-39a2-8a2f-6e807080e407.roa
Signing time:             Sun 21 Jul 2024 13:00:36 +0000
ROA not before:           Sun 21 Jul 2024 13:00:36 +0000
ROA not after:            Sat 19 Oct 2024 13:00:36 +0000
asID:                     53999
IP address blocks:        2607:f699::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d/e8295820-03bc-4a4e-8072-7cbf748f4c6d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d/e8295820-03bc-4a4e-8072-7cbf748f4c6d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Sep 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:9c:9f:a5:7d:ac:d2:e0:c6:a9:e6:13:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8295820-03bc-4a4e-8072-7cbf748f4c6d
        Validity
            Not Before: Jul 21 13:00:36 2024 GMT
            Not After : Oct 19 13:00:36 2024 GMT
        Subject: CN=b6b81c7d-cb6c-42ad-a018-4a45340fdd25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:1f:4d:ec:37:37:4f:b5:88:fa:54:da:35:d0:
                    e6:91:a3:57:bd:03:21:38:fb:23:ed:af:1b:0f:33:
                    b0:f1:35:50:3c:05:70:32:df:0a:73:bf:1e:b1:71:
                    6a:f1:63:54:5b:92:58:07:32:b4:26:ac:9c:91:9c:
                    8d:c1:87:15:74:70:d2:f5:1e:70:74:48:9e:79:a9:
                    7c:13:9f:94:8c:80:6d:a0:45:14:d7:45:98:d4:5f:
                    bb:94:25:18:37:cf:23:fb:2f:b4:81:b3:66:6c:3f:
                    18:06:b1:25:b5:da:38:ec:64:a8:43:2c:14:a3:5a:
                    7b:6a:cf:0e:85:06:f0:41:96:7f:bc:f0:02:1d:0a:
                    fe:4e:cd:66:63:6c:88:8c:80:00:80:2d:b2:0e:51:
                    72:56:d7:6a:3f:00:aa:2c:75:5e:70:ac:6f:3e:0c:
                    86:1a:b9:c1:61:2d:6c:97:75:22:e5:3f:8d:cd:17:
                    9c:77:9e:3c:bb:01:7b:ca:66:b5:82:5d:3a:49:0a:
                    94:7e:89:45:8a:f9:bd:d9:b4:19:91:1e:7b:d8:1b:
                    2a:d8:1a:28:33:26:43:7a:62:42:2b:3d:ae:6e:45:
                    69:06:c4:3d:6a:aa:13:03:bd:25:b9:f2:0b:84:b4:
                    95:3e:12:b8:ac:e9:3b:55:06:39:13:de:77:f7:18:
                    6b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:77:9D:F8:76:EC:DF:F3:B8:C7:DE:5D:56:C7:5C:0F:E2:96:F1:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d/e68cb0e8-674e-39a2-8a2f-6e807080e407.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d/e8295820-03bc-4a4e-8072-7cbf748f4c6d.crl

            X509v3 Authority Key Identifier:
                keyid:1A:DF:53:58:7E:52:6C:6F:CC:BA:16:03:BC:4D:10:35:18:E8:E6:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f699::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:15:81:9f:11:13:05:88:83:13:69:54:3e:21:1b:aa:68:01:
         23:33:e4:26:ce:de:c0:e6:02:53:d0:c6:ed:f9:d8:ef:2d:36:
         ce:0b:7a:6f:01:e2:96:55:1d:31:e9:c6:c4:e9:f8:7a:05:0e:
         b5:87:fb:b9:36:3b:75:9e:37:bb:78:cd:b8:16:46:ad:e3:34:
         b7:a0:9d:81:f2:61:cd:3a:60:ea:db:10:d6:5b:bc:18:27:bb:
         67:ed:a9:6e:25:e1:c7:ff:e0:c5:af:1a:fb:a8:43:65:90:48:
         18:80:c5:82:85:b0:8a:17:f5:b7:cb:33:94:f9:95:14:bc:76:
         3d:a7:3f:1a:a8:72:f8:88:ad:bd:a4:a3:46:3a:de:63:4a:20:
         c9:12:d9:e6:ea:c7:9f:93:4a:82:75:62:cd:b9:7b:87:43:59:
         35:57:52:0e:d1:11:bc:f2:ba:13:16:62:cd:33:36:3f:61:7c:
         0e:04:59:6c:d3:65:fc:a9:b0:a1:78:53:9c:4b:af:98:da:dc:
         b6:49:01:03:35:25:0c:3c:a7:28:af:f0:82:b5:98:a3:08:08:
         5c:71:bd:e5:c5:4e:8f:27:e6:00:ff:b7:9b:0d:d3:a2:09:41:
         ec:34:ab:75:1f:7b:10:a2:3b:fa:76:23:29:1e:d3:d8:4a:e2:
         56:b4:82:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 21:57:19 2024 by rpki-client on console-fra.rpki-client.org