Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/13ccc359-3db6-3e92-90e6-38596962acd9.roa
File:                     13ccc359-3db6-3e92-90e6-38596962acd9.roa (raw, json)
Hash identifier:          dynkS00+1GPYIuIAtHxwH8MhJQiJjnpuC2cHrobXddQ=
Subject key identifier:   66:9E:18:F4:F7:09:2F:A7:FA:83:CE:4C:FF:62:42:C8:21:C7:68:7E
Certificate issuer:       /CN=94550438-10ef-444f-b785-f7bc6eba08e7
Certificate serial:       010D0C9F43285847B3CC0986C14032B318FC1B40
Authority key identifier: 34:47:3D:92:98:3E:D3:C0:22:F0:9B:CA:12:10:8C:3D:A1:EF:3C:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/13ccc359-3db6-3e92-90e6-38596962acd9.roa
Signing time:             Tue 29 Oct 2024 13:00:40 +0000
ROA not before:           Tue 29 Oct 2024 13:00:40 +0000
ROA not after:            Mon 27 Jan 2025 14:00:40 +0000
asID:                     46510
IP address blocks:        2001:504:114::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/94550438-10ef-444f-b785-f7bc6eba08e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/94550438-10ef-444f-b785-f7bc6eba08e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b3:cc:09:86:c1:40:32:b3:18:fc:1b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94550438-10ef-444f-b785-f7bc6eba08e7
        Validity
            Not Before: Oct 29 13:00:40 2024 GMT
            Not After : Jan 27 14:00:40 2025 GMT
        Subject: CN=c67a1dca-ff8f-483c-9fde-08a1e6b2c9b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:79:26:e5:03:eb:ba:dd:a7:31:4b:6f:f0:f9:
                    72:41:38:b9:c6:d6:31:6f:7c:20:4e:d9:5b:20:20:
                    4f:5d:61:a4:eb:48:a5:64:45:bc:61:96:a3:24:4f:
                    67:0d:8e:7c:e7:f5:5e:8a:03:32:22:44:c4:c3:fe:
                    88:9d:f3:29:f4:d7:b3:ab:71:6a:c1:38:6e:14:37:
                    7e:fd:52:ab:3b:ec:32:d6:2f:d5:8a:3c:2a:39:2f:
                    ac:c2:75:70:63:c0:fa:03:58:43:b7:f8:02:88:64:
                    31:a7:45:8c:87:d6:3e:7e:0d:46:58:50:27:aa:9b:
                    c1:7b:84:0e:36:0a:30:4c:68:41:0e:64:04:7d:e4:
                    04:e8:88:70:d7:ad:9f:c8:c0:67:12:bb:ba:ba:cd:
                    b3:21:74:4a:80:37:5e:71:b7:8a:03:53:a0:21:7e:
                    76:89:a7:23:6a:ce:9f:46:ab:65:e6:84:74:ab:66:
                    3a:de:9c:dd:9c:1a:e3:aa:62:1d:70:95:17:57:98:
                    6e:d5:a0:f8:f5:07:32:40:09:91:47:87:38:7d:b2:
                    08:b6:37:25:ba:77:d8:90:7e:8e:e5:6c:74:63:10:
                    f5:64:86:a6:be:49:c6:3d:5b:09:10:8d:63:cf:4a:
                    b6:81:e9:13:10:c8:76:22:5d:6a:43:ad:31:e7:76:
                    e4:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:9E:18:F4:F7:09:2F:A7:FA:83:CE:4C:FF:62:42:C8:21:C7:68:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/13ccc359-3db6-3e92-90e6-38596962acd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/94550438-10ef-444f-b785-f7bc6eba08e7.crl

            X509v3 Authority Key Identifier:
                keyid:34:47:3D:92:98:3E:D3:C0:22:F0:9B:CA:12:10:8C:3D:A1:EF:3C:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:504:114::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:78:17:32:6c:51:d2:eb:a9:3c:90:f6:31:62:59:3e:cd:8a:
         3c:87:6d:ae:aa:f8:ef:29:b5:92:14:a3:86:06:f1:f8:ba:f6:
         7a:bf:ae:d5:62:6d:1c:c0:42:aa:90:72:9f:d3:b1:6e:31:b6:
         5b:09:21:af:52:f5:3e:79:a8:1f:6c:b8:f1:0c:a4:21:9c:20:
         5d:be:ce:ad:46:ff:d1:18:d1:30:11:e5:d2:77:38:df:c0:d2:
         c0:aa:fc:e1:1d:0a:a3:93:6e:b8:2a:a8:a6:c5:0b:70:8e:25:
         bb:0a:6b:d2:51:18:35:9e:a0:79:00:b6:ce:6a:96:96:ce:8c:
         6f:50:7b:19:81:03:45:f5:7f:5a:29:63:78:e3:2e:ef:18:74:
         88:34:62:a7:08:a7:22:6d:9b:dc:6b:de:7e:73:51:f7:e0:73:
         9f:f1:1c:75:ef:b9:16:e9:41:c7:f9:1c:3c:18:18:41:28:cd:
         4e:a5:25:b8:4c:59:bc:bf:af:09:cc:2d:e8:a3:1c:10:ae:b0:
         a6:16:cf:f9:6f:a3:f8:c2:ed:5e:aa:f7:85:bb:04:96:04:70:
         9b:e0:35:37:f3:aa:c6:f5:ce:fe:d6:95:8f:93:14:3a:9a:16:
         07:bd:8f:95:d1:ae:bd:cd:82:43:20:c6:5f:2a:fa:2e:70:ce:
         04:e3:53:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:13 2024 by rpki-client on console-ams.rpki-client.org