Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/ef63e560-1036-3fd3-af61-21d022a1a803.roa
File:                     ef63e560-1036-3fd3-af61-21d022a1a803.roa (raw, json)
Hash identifier:          0tKUs23DFn5Z+0ZY8i1VP1GzBzrpjMlorxloiSxSuqg=
Subject key identifier:   9B:35:44:6F:0E:3B:79:DE:73:68:72:1B:04:92:F4:34:D8:62:9A:B8
Certificate issuer:       /CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
Certificate serial:       010D0C9F43285847F41F9E330FC5731BC9A25E80
Authority key identifier: E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/ef63e560-1036-3fd3-af61-21d022a1a803.roa
Signing time:             Thu 21 Nov 2024 14:00:51 +0000
ROA not before:           Thu 21 Nov 2024 14:00:51 +0000
ROA not after:            Wed 19 Feb 2025 14:00:51 +0000
asID:                     36007
IP address blocks:        2604:bc0:8::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f4:1f:9e:33:0f:c5:73:1b:c9:a2:5e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
        Validity
            Not Before: Nov 21 14:00:51 2024 GMT
            Not After : Feb 19 14:00:51 2025 GMT
        Subject: CN=b9105d9f-eade-45cb-8a15-055a5efa1c84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8c:af:07:71:74:ea:55:36:82:f6:06:76:6a:
                    84:46:d2:ef:00:b6:8d:90:f9:5e:ff:d5:8e:24:66:
                    99:50:ba:78:89:1f:bb:50:6c:35:52:c4:4b:40:19:
                    2f:49:12:80:85:fd:5c:d0:e5:d2:7e:b0:de:54:56:
                    af:65:db:b8:9c:c8:75:38:02:6d:b9:60:27:0d:4c:
                    c4:d6:2d:23:a0:cb:3f:ff:be:6c:35:07:31:1d:17:
                    d1:76:e2:96:3d:15:56:9f:fa:27:7c:e8:ba:0d:73:
                    e2:a1:82:fd:5a:87:1a:0b:73:39:25:2e:6e:55:3d:
                    e5:fe:46:21:fb:59:d7:fe:c9:5e:45:97:f3:0f:07:
                    26:e3:5e:08:56:b3:28:7f:78:6f:ea:cc:01:ee:15:
                    b1:36:9b:8f:8c:4f:ef:99:51:93:6d:9b:4a:f5:51:
                    3f:63:bc:ee:84:ab:dd:13:42:38:22:54:b0:99:9c:
                    c7:9d:41:f6:e8:3c:d2:61:a1:de:a7:bc:da:7a:b4:
                    4b:56:41:d9:f9:f0:1d:b2:a4:b6:4f:98:35:f4:80:
                    06:02:f6:09:1d:e4:6c:62:be:d2:a6:22:15:18:d7:
                    ee:fb:5d:53:59:b6:52:e7:cb:bb:91:a6:0b:69:7c:
                    1e:50:68:e8:b7:21:99:70:15:75:d9:67:c7:bb:08:
                    45:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:35:44:6F:0E:3B:79:DE:73:68:72:1B:04:92:F4:34:D8:62:9A:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/ef63e560-1036-3fd3-af61-21d022a1a803.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl

            X509v3 Authority Key Identifier:
                keyid:E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:bc0:8::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:8e:c0:a0:0c:ad:0c:1a:f4:ad:f6:02:3a:21:46:d5:b0:5a:
         cc:83:7a:6b:95:3f:a2:b9:7c:c5:17:cc:bf:f5:2f:a1:dc:60:
         91:dc:c8:6b:c6:68:e4:66:2b:9e:46:af:60:99:47:4e:e2:49:
         4d:72:9f:38:ce:54:f7:86:ed:33:7d:86:13:7d:87:c9:ef:bf:
         04:96:3c:d3:c7:e2:bc:b4:f1:73:64:8c:cc:d0:fb:82:10:39:
         ca:77:cf:13:9b:26:7c:07:6b:62:34:19:d1:84:cf:2b:d5:7d:
         ad:36:41:d0:41:90:b9:08:52:1e:33:be:5c:fe:66:48:d1:33:
         66:08:dd:df:70:6c:41:8e:81:f3:6d:ef:da:f6:1f:59:c1:b9:
         30:a1:99:72:e8:71:e4:ca:45:5c:3f:75:b5:1d:f6:31:b2:13:
         cb:ce:5f:61:6d:a9:52:4e:ca:9e:c5:45:03:8a:93:fb:b0:f0:
         df:07:aa:8a:dd:1d:af:cc:a6:3e:32:85:c0:f5:ca:0e:4c:a7:
         1a:a8:5b:1a:7e:97:d1:73:3c:11:f5:b3:b3:8e:e0:ad:7c:7c:
         92:57:2c:71:79:42:ea:08:6a:f8:e7:7a:fe:36:55:76:99:2a:
         0d:75:17:fe:a5:ca:57:8a:18:4c:40:b8:36:18:c5:0b:ae:67:
         f7:72:02:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:13 2024 by rpki-client on console-ams.rpki-client.org