Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/94aee088-e322-3abb-bd82-37ba71bd6cb7.roa
File:                     94aee088-e322-3abb-bd82-37ba71bd6cb7.roa (raw, json)
Hash identifier:          R54NXjbSfk0KKUaxdQ/M1BuzAzKD5TcymgYAuNXMadg=
Subject key identifier:   91:D7:9A:30:9D:9C:41:15:6F:75:7D:18:0D:E9:2A:2E:DA:60:88:C9
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B1258805062D0482F398240
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/94aee088-e322-3abb-bd82-37ba71bd6cb7.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     855
IP address blocks:        2001:4c0:2001::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:12:58:80:50:62:d0:48:2f:39:82:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=db25b5ac-3de4-41f2-a5f3-ab3e6ae39ae3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:af:ce:ba:3f:61:c2:65:d5:ef:fe:4d:2d:5b:
                    c7:53:a0:5c:47:4c:cb:22:54:52:0d:71:7c:36:c9:
                    a4:6c:b8:98:aa:b9:5d:61:c7:08:82:41:ee:c4:50:
                    a4:00:df:3f:cf:b4:82:a1:f3:50:cf:35:5e:cd:ae:
                    f4:f7:ae:de:e5:84:71:98:2a:d8:46:36:b8:1a:ec:
                    aa:a0:e6:c1:45:0c:a1:94:0a:83:9b:a4:77:47:40:
                    0c:50:31:4a:5a:35:2a:b7:d3:c4:d6:44:c7:f6:e1:
                    da:6e:ca:15:da:c9:58:47:4d:ab:2e:65:2e:e0:ec:
                    d7:5c:4c:03:36:0f:46:b9:40:10:91:e5:f2:67:31:
                    35:5f:88:94:a9:ed:0c:d2:b7:6e:53:8b:bc:ac:fc:
                    7d:2b:2b:f6:a6:26:94:88:74:5e:03:52:3f:4e:17:
                    c9:39:91:01:03:c4:2b:7f:b1:83:3f:40:96:a3:6b:
                    5c:ad:13:11:3d:41:ca:0a:4b:f3:b6:fd:52:91:9e:
                    60:a7:cb:cd:8c:76:48:58:f0:a5:39:b2:04:d2:c1:
                    6b:f7:21:4b:da:42:d0:ce:d7:54:1e:98:b6:25:44:
                    fa:f6:72:5e:7c:86:a9:77:7e:51:da:81:93:dc:92:
                    16:c7:a1:84:db:5f:dc:47:e4:f6:19:a0:ae:af:87:
                    6b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:D7:9A:30:9D:9C:41:15:6F:75:7D:18:0D:E9:2A:2E:DA:60:88:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/94aee088-e322-3abb-bd82-37ba71bd6cb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4c0:2001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:a7:61:cd:e5:07:26:ea:44:42:86:ab:6b:82:4a:f5:1d:b1:
         eb:a3:88:6f:2d:22:4c:fe:c0:86:45:c3:41:c5:7f:35:8d:0b:
         a7:0a:f9:1e:f2:4b:21:e2:e0:1d:f7:00:16:19:d9:54:d0:a1:
         19:00:2d:e6:3a:db:30:50:b9:f7:2f:d3:fc:32:00:d8:1f:d4:
         92:9b:46:ed:94:54:1c:16:6a:2d:ff:55:45:be:31:05:34:0d:
         a0:4e:cd:c4:cc:e0:88:35:31:73:e1:07:f5:d2:8d:59:4c:f8:
         24:30:8b:0b:a4:73:6f:3d:9b:70:93:12:70:e5:22:bd:90:e3:
         dc:b5:30:b9:a4:60:5b:18:c2:fe:60:51:3a:66:7c:53:b6:d2:
         1d:34:75:7e:a8:a4:6b:26:9f:5d:07:90:a8:73:f7:5f:ee:21:
         65:ab:70:7f:d3:6a:34:2d:bb:ae:4a:df:7c:3e:3f:a0:45:a3:
         8b:97:f5:ab:a2:e5:3c:36:cb:ab:7a:75:2b:67:04:3e:b9:1e:
         3d:c9:5d:fe:ca:c5:8e:c4:72:12:1b:bf:b9:ca:f2:26:c6:30:
         df:ac:68:f2:cd:e6:d5:e1:68:85:fa:1e:00:c6:4e:3b:21:87:
         d1:ca:f8:e9:c3:2a:1b:d4:97:5f:11:89:4b:96:38:af:65:5b:
         a7:0c:25:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:12 2024 by rpki-client on console-ams.rpki-client.org