Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7db346f0-17b1-4b0d-942b-291f70e18910/043db50e-d504-35e2-a949-f1fdfd29043a.roa
File:                     043db50e-d504-35e2-a949-f1fdfd29043a.roa (raw, json)
Hash identifier:          4cUtHIvUFmA2ZkQkeFFuWA7K1UC9Ke6GpXZoV7JkYvg=
Subject key identifier:   C5:17:67:B8:CA:CE:B5:C1:DD:7F:D3:FE:A9:F3:70:EB:D0:33:B1:4A
Certificate issuer:       /CN=7db346f0-17b1-4b0d-942b-291f70e18910
Certificate serial:       010D0C9F432858479D76B7AF283375A697BD1080
Authority key identifier: 4D:B3:C5:05:6C:88:DD:EA:E8:26:74:75:4A:EA:75:38:D5:7A:4B:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7db346f0-17b1-4b0d-942b-291f70e18910.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7db346f0-17b1-4b0d-942b-291f70e18910/043db50e-d504-35e2-a949-f1fdfd29043a.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     40317
IP address blocks:        2605:5e00::/32 maxlen: 56

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7db346f0-17b1-4b0d-942b-291f70e18910/7db346f0-17b1-4b0d-942b-291f70e18910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7db346f0-17b1-4b0d-942b-291f70e18910/7db346f0-17b1-4b0d-942b-291f70e18910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7db346f0-17b1-4b0d-942b-291f70e18910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:b7:af:28:33:75:a6:97:bd:10:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7db346f0-17b1-4b0d-942b-291f70e18910
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=499d0cb3-648c-4573-94d0-eefd806de1aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:94:3f:40:08:b1:76:19:26:54:1b:89:c2:f4:
                    2f:89:e8:7c:52:43:fa:77:13:d4:13:ee:36:ff:a4:
                    c1:02:23:e6:7b:9c:cc:ac:0d:dd:a7:47:0d:9f:42:
                    d5:6e:5e:f4:79:9e:27:91:28:2d:c5:7b:7c:a6:0d:
                    e8:e8:bc:1d:e2:cc:2c:0d:e7:aa:bb:b8:58:28:c3:
                    55:a2:25:9f:63:80:2e:ae:95:ec:0a:77:81:ff:51:
                    b1:a1:f7:8d:74:b9:3a:83:3f:09:1c:d0:d3:95:ad:
                    31:a5:2f:35:08:10:81:8e:4f:d8:c7:e7:08:62:d4:
                    cb:6c:73:5a:99:ea:6c:ca:cb:9b:6e:e7:f7:21:67:
                    1b:28:da:bd:02:47:66:0c:d1:ae:a4:31:5c:3d:2f:
                    c0:e7:0b:4f:05:8a:0b:fc:02:75:ef:aa:fc:e8:f5:
                    87:16:9a:a7:15:6f:fa:73:7a:a0:16:b1:e8:5f:c0:
                    3d:5e:e2:67:0a:69:63:da:3b:bc:d3:0d:13:b5:56:
                    5e:7e:bd:8d:d1:09:13:01:73:45:6c:e5:98:cb:1d:
                    79:6c:9b:a1:76:2a:15:ce:b0:3e:1b:0f:28:99:36:
                    41:59:dd:e0:51:3c:5d:b3:46:51:39:0e:14:2b:0c:
                    82:d5:55:fe:04:69:42:11:ee:5d:b8:24:4c:f8:2e:
                    f3:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:17:67:B8:CA:CE:B5:C1:DD:7F:D3:FE:A9:F3:70:EB:D0:33:B1:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7db346f0-17b1-4b0d-942b-291f70e18910/043db50e-d504-35e2-a949-f1fdfd29043a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7db346f0-17b1-4b0d-942b-291f70e18910/7db346f0-17b1-4b0d-942b-291f70e18910.crl

            X509v3 Authority Key Identifier:
                keyid:4D:B3:C5:05:6C:88:DD:EA:E8:26:74:75:4A:EA:75:38:D5:7A:4B:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7db346f0-17b1-4b0d-942b-291f70e18910.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:5e00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:87:c5:80:3a:6a:64:74:f2:ca:ad:cb:4b:79:be:21:f6:8e:
         ca:cd:60:b2:68:3f:4e:29:ec:2c:fa:fe:57:53:00:9f:9f:a0:
         bd:65:d5:be:25:d0:e3:6c:63:1d:c6:c5:9c:b9:e4:36:1d:79:
         96:9a:14:fb:e9:eb:e7:37:7c:cc:97:db:23:d5:b3:9b:3b:4d:
         cc:6c:70:34:ff:02:1d:ef:3e:d2:65:88:d4:57:ae:58:55:38:
         ed:36:fe:1b:d8:62:49:1f:ec:06:45:1b:47:b9:22:92:38:aa:
         f7:5d:fc:15:43:49:54:47:0e:1b:cc:ed:3d:53:fb:21:62:f4:
         77:7b:eb:68:f0:d4:e1:1b:f2:37:6f:6d:c8:90:14:9b:d7:06:
         78:4d:46:46:a2:40:ba:b6:dc:05:38:a2:fe:64:87:b5:97:c4:
         96:9d:fc:68:b4:5d:c5:f0:8a:9d:f9:87:9c:37:3a:c8:f8:cb:
         f0:b6:90:0c:3e:f3:6f:11:46:a2:39:d0:98:15:07:e5:b9:f2:
         3f:5e:8d:5d:05:03:8d:f1:6b:be:bc:e7:01:88:ba:2a:ac:f6:
         0e:7a:c4:3b:a6:83:73:f2:9d:d4:d3:45:be:77:84:d1:b3:88:
         ed:a9:6c:fc:af:00:e3:b3:79:65:45:e5:23:22:59:c0:bc:5e:
         e3:30:fa:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:05:36 2024 by rpki-client on console-fra.rpki-client.org