Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f51e2479-4af9-4d7f-84b9-1821268b9a84/0e6686a8-6014-3f02-a193-887bace1fe7e.roa
File:                     0e6686a8-6014-3f02-a193-887bace1fe7e.roa (raw, json)
Hash identifier:          m3zVytwzjJnGfDLa0GsC3sA+9g8ZzxrInnusiP5ZN3c=
Subject key identifier:   44:08:FA:BA:1E:5C:4A:4C:E5:35:B2:8B:02:E9:78:F2:F4:42:58:F1
Certificate issuer:       /CN=f51e2479-4af9-4d7f-84b9-1821268b9a84
Certificate serial:       010D0C9F43285847E78F627C1C954D33FA7C6D00
Authority key identifier: 4C:AD:46:96:CB:86:10:75:0E:83:D5:5C:8E:64:45:56:74:3B:3D:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f51e2479-4af9-4d7f-84b9-1821268b9a84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f51e2479-4af9-4d7f-84b9-1821268b9a84/0e6686a8-6014-3f02-a193-887bace1fe7e.roa
Signing time:             Sun 17 Nov 2024 02:00:28 +0000
ROA not before:           Sun 17 Nov 2024 02:00:28 +0000
ROA not after:            Sat 15 Feb 2025 02:00:28 +0000
asID:                     31758
IP address blocks:        2607:7500::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f51e2479-4af9-4d7f-84b9-1821268b9a84/f51e2479-4af9-4d7f-84b9-1821268b9a84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f51e2479-4af9-4d7f-84b9-1821268b9a84/f51e2479-4af9-4d7f-84b9-1821268b9a84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f51e2479-4af9-4d7f-84b9-1821268b9a84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e7:8f:62:7c:1c:95:4d:33:fa:7c:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f51e2479-4af9-4d7f-84b9-1821268b9a84
        Validity
            Not Before: Nov 17 02:00:28 2024 GMT
            Not After : Feb 15 02:00:28 2025 GMT
        Subject: CN=76e5f828-5b1f-494e-b615-cbf89cd1e1c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:98:1f:55:dc:a7:18:11:b6:85:66:b5:10:99:
                    25:3e:3c:2c:16:ce:e6:da:67:36:5b:9b:14:a1:cb:
                    09:dc:46:de:1a:a8:8a:5a:d2:9c:3d:bf:bc:d1:22:
                    f3:71:03:98:0a:25:43:a2:07:1c:90:91:38:90:5c:
                    80:2a:55:0b:df:b6:44:87:01:f3:a8:db:a6:89:13:
                    1c:a6:06:d3:da:29:d5:2a:87:ab:79:e2:18:77:91:
                    b9:62:dc:57:63:02:ab:32:9b:04:38:2a:28:a5:8f:
                    b2:6a:75:5b:0e:1c:f2:03:a4:a3:4d:bf:50:a0:c0:
                    62:c7:55:78:ee:f4:be:5c:33:b6:95:6b:da:a1:f5:
                    cf:2f:9c:ae:ff:4f:03:28:b8:2b:30:ce:72:c5:6b:
                    08:47:7d:b6:cc:71:9d:4a:3c:3a:60:62:4c:44:f5:
                    55:ef:17:e9:74:bc:96:be:21:f7:0c:b1:9a:4b:af:
                    2b:41:06:cf:39:60:1f:db:14:5f:1f:df:0d:eb:8d:
                    2d:44:d3:b1:cc:5e:a5:10:6b:8b:8c:64:78:b8:82:
                    b6:d8:f1:e3:87:3c:9e:61:95:b9:ab:81:f3:f4:c0:
                    28:0a:31:f8:68:45:b0:4b:22:77:25:94:a9:91:a1:
                    b3:ea:c4:c8:97:9a:6a:34:95:e6:69:a9:57:14:c8:
                    5a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:08:FA:BA:1E:5C:4A:4C:E5:35:B2:8B:02:E9:78:F2:F4:42:58:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f51e2479-4af9-4d7f-84b9-1821268b9a84/0e6686a8-6014-3f02-a193-887bace1fe7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f51e2479-4af9-4d7f-84b9-1821268b9a84/f51e2479-4af9-4d7f-84b9-1821268b9a84.crl

            X509v3 Authority Key Identifier:
                keyid:4C:AD:46:96:CB:86:10:75:0E:83:D5:5C:8E:64:45:56:74:3B:3D:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f51e2479-4af9-4d7f-84b9-1821268b9a84.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:7500::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:a3:c3:fd:0d:68:0e:c3:1f:f8:49:bc:f5:60:fe:fc:eb:9f:
         54:c1:24:11:05:ea:66:f9:86:39:49:29:41:d4:c8:83:3a:3f:
         b4:90:81:c3:09:6f:43:6c:9a:b9:68:bf:c8:3e:97:b7:ab:9c:
         2d:8e:4c:d5:68:4b:e8:78:a9:85:e0:38:7b:f7:14:5e:94:4a:
         c7:d7:3c:a2:3e:76:25:f9:cf:d2:b4:fd:e0:aa:57:57:5f:15:
         c8:29:42:25:c5:31:59:60:2a:a7:4a:e7:aa:f2:8e:9c:21:4a:
         95:26:cb:6f:5e:19:8c:b4:e7:d3:5b:39:72:23:41:81:53:c6:
         5a:d3:77:20:96:d7:27:bb:e0:1b:29:e6:c9:f2:71:6b:a7:51:
         2c:d7:68:f2:3e:99:fc:b7:92:db:06:99:a5:a7:27:53:a1:76:
         b2:64:c3:55:f5:16:9a:8b:f3:a9:8e:3d:f9:e8:d6:2b:80:92:
         19:89:2b:41:0d:0d:a4:25:ba:e9:a2:1e:2b:f2:fc:c3:21:92:
         b6:f3:4b:72:ff:18:dd:2c:ec:47:5a:3e:9d:7a:de:be:2c:ad:
         ae:d1:9b:81:de:e0:73:e7:16:e2:a2:36:51:01:06:c2:90:03:
         9c:51:fe:04:c1:de:31:99:72:f6:e8:f0:1f:a0:53:a9:df:06:
         90:bd:09:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:42:57 2024 by rpki-client on console-ams.rpki-client.org