Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/c77a363d-d945-3f51-8906-9e0d37b8ae3c.roa
File:                     c77a363d-d945-3f51-8906-9e0d37b8ae3c.roa (raw, json)
Hash identifier:          OrIuxYGD43h4XsduCgmeGBDqTiusrMU0gwmhHovOrcY=
Subject key identifier:   A9:3A:95:0D:CF:13:45:B5:9D:C2:F8:F0:94:91:55:FC:BF:F9:70:E7
Certificate issuer:       /CN=4eab7524-ab79-46c8-aea6-96b100eb245d
Certificate serial:       010D0C9F43285847DC64AF722076956744C22580
Authority key identifier: 02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/c77a363d-d945-3f51-8906-9e0d37b8ae3c.roa
Signing time:             Wed 13 Nov 2024 02:00:28 +0000
ROA not before:           Wed 13 Nov 2024 02:00:28 +0000
ROA not after:            Tue 11 Feb 2025 02:00:28 +0000
asID:                     400097
IP address blocks:        2606:3d40:5200::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:dc:64:af:72:20:76:95:67:44:c2:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4eab7524-ab79-46c8-aea6-96b100eb245d
        Validity
            Not Before: Nov 13 02:00:28 2024 GMT
            Not After : Feb 11 02:00:28 2025 GMT
        Subject: CN=04901d33-829b-4310-a355-9ce2e2938c9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:7b:0d:4a:8b:6c:e0:79:b1:ee:4d:73:03:a6:
                    60:c4:be:0f:6e:d0:a4:dc:0f:31:88:11:b3:82:14:
                    96:06:5f:42:fe:22:53:6b:3a:ad:71:ba:e9:ab:91:
                    bf:57:6a:b5:18:c2:4f:3a:4f:a4:a8:f0:22:60:74:
                    9e:20:f5:2e:a6:29:d2:7b:be:b2:da:eb:96:59:d0:
                    82:d8:e0:9d:e1:49:20:b2:9a:a0:60:ae:67:f5:08:
                    72:52:c0:81:92:f5:6e:7a:c8:80:87:ce:2b:f3:85:
                    a6:12:a5:8e:ea:03:df:be:5f:68:38:04:48:9b:a7:
                    27:3d:77:f1:30:25:1f:61:99:66:7a:4f:cf:3b:c0:
                    bf:e1:89:f0:a4:68:a4:b9:ea:8c:3f:a7:cc:b1:1a:
                    75:81:ac:ee:8c:8e:8a:c1:4f:a3:7b:69:01:7b:05:
                    1b:ef:ca:07:4a:44:06:93:01:43:70:09:92:8c:b8:
                    bd:83:51:ac:46:ee:27:aa:ad:54:25:e4:d4:ae:18:
                    af:fc:96:a1:08:7e:7c:1e:aa:dd:48:bb:c5:cf:2a:
                    eb:4d:b7:e4:3d:c7:43:e3:72:fb:35:38:1e:2d:60:
                    ab:3f:90:9a:a3:00:81:bd:31:71:de:fc:34:90:68:
                    d5:a1:ab:6f:4f:ed:52:80:d3:20:8f:1c:f2:65:11:
                    a9:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:3A:95:0D:CF:13:45:B5:9D:C2:F8:F0:94:91:55:FC:BF:F9:70:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/c77a363d-d945-3f51-8906-9e0d37b8ae3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl

            X509v3 Authority Key Identifier:
                keyid:02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3d40:5200::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:ba:d3:f6:18:02:dd:24:05:e7:30:3f:d8:2b:12:31:e4:89:
         ff:35:b6:18:8c:df:b4:69:ea:16:5e:86:49:4f:87:6c:4a:58:
         a2:c6:a3:4e:b7:d5:9c:57:f9:a4:9f:6c:93:2a:02:08:c4:e8:
         b9:65:88:43:96:32:5c:93:7a:f0:52:c4:d1:27:ce:ba:61:8b:
         07:79:ab:3c:53:1f:21:88:6f:74:e0:dc:d9:18:ac:0a:41:a4:
         54:5b:7f:d0:4e:7e:49:41:e8:6e:e0:15:63:34:b5:0a:a6:30:
         fc:22:60:4e:ee:e5:9c:3b:86:a5:a3:c7:60:99:2e:73:38:22:
         6e:76:19:33:32:84:8a:3f:b6:de:8c:2e:a8:13:16:cd:46:96:
         d8:03:5b:ea:25:93:15:48:49:4f:0a:e4:e2:13:73:66:1e:ea:
         1d:ea:c0:df:8c:b2:f1:f5:aa:b1:ab:78:02:0b:c7:1b:c3:5c:
         e4:d4:f5:87:f5:e5:b4:a6:20:f5:68:b0:df:fe:e5:77:c1:3b:
         52:bd:24:df:59:c1:35:af:bc:34:87:0c:af:45:4d:5c:84:d7:
         7e:d3:61:3d:b8:c4:d2:ef:26:94:6c:74:50:47:df:fc:35:32:
         75:1a:87:b1:00:1a:09:18:a2:d6:8b:0c:cf:54:59:eb:bb:56:
         52:d9:26:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:02 2024 by rpki-client on console-fra.rpki-client.org