Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee734db0-353b-4ddd-a33f-8fa55d49a69e/56081283-8713-31c0-974c-912c99eaf5e3.roa
File:                     56081283-8713-31c0-974c-912c99eaf5e3.roa (raw, json)
Hash identifier:          w2NrBGprJHoTgx1TPO2iJlaYxt18DZwNdLhlQtDRlV4=
Subject key identifier:   54:3B:87:84:AA:8E:B8:6F:AF:96:94:4E:95:A1:65:D2:28:46:07:58
Certificate issuer:       /CN=ee734db0-353b-4ddd-a33f-8fa55d49a69e
Certificate serial:       010D0C9F4328584726D07C145B0050E01ED57780
Authority key identifier: 7A:95:C1:FB:A2:78:79:93:B6:7F:4F:04:2C:DF:D3:FD:51:A3:7E:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee734db0-353b-4ddd-a33f-8fa55d49a69e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee734db0-353b-4ddd-a33f-8fa55d49a69e/56081283-8713-31c0-974c-912c99eaf5e3.roa
Signing time:             Mon 09 Sep 2024 01:00:31 +0000
ROA not before:           Mon 09 Sep 2024 01:00:31 +0000
ROA not after:            Sun 08 Dec 2024 02:00:31 +0000
asID:                     397168
IP address blocks:        2607:c280::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee734db0-353b-4ddd-a33f-8fa55d49a69e/ee734db0-353b-4ddd-a33f-8fa55d49a69e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee734db0-353b-4ddd-a33f-8fa55d49a69e/ee734db0-353b-4ddd-a33f-8fa55d49a69e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee734db0-353b-4ddd-a33f-8fa55d49a69e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:26:d0:7c:14:5b:00:50:e0:1e:d5:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee734db0-353b-4ddd-a33f-8fa55d49a69e
        Validity
            Not Before: Sep  9 01:00:31 2024 GMT
            Not After : Dec  8 02:00:31 2024 GMT
        Subject: CN=1a08395c-88d4-444b-9a72-ef81ceb2dc1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:0c:9d:04:34:26:fa:31:c6:78:d8:37:d0:63:
                    d3:8c:a6:12:ae:18:1f:5a:4c:bf:de:e8:3e:08:e8:
                    3e:b2:bb:55:ce:03:9c:ed:5f:02:81:6d:05:a6:25:
                    3f:c6:be:c2:13:b4:80:86:fe:fd:b7:43:92:84:0e:
                    79:4f:1f:79:59:2e:9a:6f:e4:66:2c:f7:ff:2d:6e:
                    6e:cb:28:79:ff:37:4a:c0:06:a5:32:70:87:be:6d:
                    73:f0:f6:90:fd:38:b8:1c:e5:be:00:9c:cb:da:cf:
                    9c:8e:e7:61:49:f9:4d:73:b8:f4:85:40:75:50:8e:
                    b5:54:a3:00:7b:39:8b:d4:17:89:b0:a3:90:1e:b4:
                    86:37:1e:e7:3a:bd:00:2c:58:40:75:03:3a:38:b5:
                    4b:1c:a6:f4:38:9f:47:2d:6a:c9:2e:f3:ff:74:72:
                    f1:f5:31:08:15:39:7b:7f:db:78:69:f3:7b:77:8d:
                    d4:5a:46:ba:7d:59:3b:6c:2d:f6:4b:4a:5a:d2:b7:
                    37:e6:71:c1:cd:1c:f5:0a:49:5d:4d:8e:1c:7f:79:
                    66:ee:76:37:be:06:92:0e:ba:71:c9:35:8e:fa:13:
                    dd:04:6b:69:f5:61:cd:03:71:e7:af:f8:00:9d:da:
                    19:fd:2c:c9:46:66:87:f8:16:45:99:31:ee:3e:ce:
                    b8:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:3B:87:84:AA:8E:B8:6F:AF:96:94:4E:95:A1:65:D2:28:46:07:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee734db0-353b-4ddd-a33f-8fa55d49a69e/56081283-8713-31c0-974c-912c99eaf5e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee734db0-353b-4ddd-a33f-8fa55d49a69e/ee734db0-353b-4ddd-a33f-8fa55d49a69e.crl

            X509v3 Authority Key Identifier:
                keyid:7A:95:C1:FB:A2:78:79:93:B6:7F:4F:04:2C:DF:D3:FD:51:A3:7E:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee734db0-353b-4ddd-a33f-8fa55d49a69e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:c280::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:f5:07:04:ae:93:9f:eb:4e:ce:5e:f7:2e:bb:5d:18:77:ba:
         73:87:e6:36:2c:d9:8a:9e:2e:17:44:1f:a5:96:65:7e:f7:55:
         0a:83:1e:66:71:8f:c2:ae:55:76:c9:b1:f7:1c:44:80:e1:76:
         34:bb:3f:2b:a7:32:d3:f4:bd:1e:41:e4:41:83:cb:98:29:c8:
         02:79:a3:3e:81:8e:7f:9a:f4:e3:ec:52:69:15:e6:ab:0f:2c:
         c8:b1:48:1b:33:ea:9e:5e:32:e7:b7:70:83:cf:f7:08:d5:54:
         8b:45:89:dc:f8:31:c2:80:a4:0f:b0:f3:ca:1b:00:b2:10:ea:
         65:1f:ad:2e:0e:11:d5:be:98:df:16:3f:72:0a:d4:9e:0f:43:
         99:30:b6:28:4f:b5:71:17:2d:75:51:ab:3a:d3:dd:fd:4f:2d:
         b3:76:31:f6:f5:36:8a:0a:a1:5d:df:30:a9:79:bf:44:f2:63:
         d2:ed:72:90:e5:27:17:03:1f:dd:ba:48:62:cb:a4:9f:3c:96:
         af:82:65:3b:81:fa:b0:e7:38:81:83:ef:48:87:cd:44:ca:99:
         ba:18:b5:a5:17:c1:7c:bd:41:ea:03:2e:09:36:0d:cb:78:27:
         79:aa:ae:4f:27:1a:db:e7:9f:b7:6f:47:5d:0b:a0:7c:4d:48:
         3f:d8:5c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:47 2024 by rpki-client on console-fra.rpki-client.org