Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/f61e2318-b560-3ef5-9e74-a61671a8a365.roa
File:                     f61e2318-b560-3ef5-9e74-a61671a8a365.roa (raw, json)
Hash identifier:          K4iJ0IukBNbVNl22r5QRolFQ8SWDXp68CKxtwZLY0/Q=
Subject key identifier:   41:34:3B:17:54:0C:8D:2F:11:44:03:55:12:8A:02:3E:76:3D:7C:F0
Certificate issuer:       /CN=caf392a1-07e9-49f4-9a03-df5005333708
Certificate serial:       010D0C9F43285847CA179A2C795032485E76CD80
Authority key identifier: 44:2F:11:CB:79:DB:4D:95:5C:46:F5:8D:92:CB:7D:12:C3:2A:19:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/f61e2318-b560-3ef5-9e74-a61671a8a365.roa
Signing time:             Wed 06 Nov 2024 12:40:48 +0000
ROA not before:           Wed 06 Nov 2024 12:40:48 +0000
ROA not after:            Tue 04 Feb 2025 12:40:48 +0000
asID:                     46962
IP address blocks:        2606:2ac0:8101::/48 maxlen: 48
                          2606:2ac0:8102::/48 maxlen: 48
                          2606:2ac0:8103::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/caf392a1-07e9-49f4-9a03-df5005333708.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/caf392a1-07e9-49f4-9a03-df5005333708.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ca:17:9a:2c:79:50:32:48:5e:76:cd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=caf392a1-07e9-49f4-9a03-df5005333708
        Validity
            Not Before: Nov  6 12:40:48 2024 GMT
            Not After : Feb  4 12:40:48 2025 GMT
        Subject: CN=2afc4d5a-aeef-4485-82c8-72912ac3972e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:0c:59:e0:c9:74:90:b3:2e:7e:f3:02:07:6f:
                    03:94:8d:89:e7:db:e6:7f:d2:13:c4:f1:25:74:e9:
                    7e:49:ec:7e:49:db:b9:ec:a3:72:0e:43:0a:41:6c:
                    e3:2c:e0:15:ed:60:3f:f1:9d:ec:77:6c:7a:3b:b5:
                    bb:26:87:1a:00:46:8f:3e:73:ff:da:27:dc:6a:b3:
                    06:5a:b4:14:4b:ef:93:d3:bd:2d:10:af:dc:c6:1a:
                    e2:50:c6:2f:d9:7e:da:a5:13:cd:ef:4c:e7:a6:c9:
                    64:f5:c5:96:c3:f2:82:e0:a5:13:e1:2b:7b:04:e6:
                    f2:a3:05:b1:52:0b:66:2e:80:5d:bc:6a:e2:61:c1:
                    b8:9a:bd:86:19:90:cf:41:c5:ad:aa:b9:52:54:3b:
                    fe:94:22:17:12:fb:09:b2:67:99:31:74:6f:dc:6e:
                    66:c5:6e:08:62:ce:37:7a:eb:b0:eb:01:62:e9:57:
                    b1:3a:fe:be:68:b9:0f:56:e8:b3:ad:31:b7:77:e3:
                    e2:4f:2d:50:7d:3f:8a:a4:8b:1e:7e:03:3c:8a:86:
                    85:e2:c3:f2:7a:26:6c:9e:6a:ea:99:a6:65:51:75:
                    d4:49:8b:88:08:6c:5a:66:69:0e:b4:58:70:43:4c:
                    d1:f1:97:5b:ac:26:33:e9:93:b6:c7:a8:50:37:6e:
                    de:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:34:3B:17:54:0C:8D:2F:11:44:03:55:12:8A:02:3E:76:3D:7C:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/f61e2318-b560-3ef5-9e74-a61671a8a365.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/caf392a1-07e9-49f4-9a03-df5005333708.crl

            X509v3 Authority Key Identifier:
                keyid:44:2F:11:CB:79:DB:4D:95:5C:46:F5:8D:92:CB:7D:12:C3:2A:19:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:2ac0:8101::-2606:2ac0:8103:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:53:61:8a:41:37:cc:34:f2:de:9b:c3:83:c0:7a:02:4f:3c:
         bb:db:66:cc:0d:30:5d:63:60:df:96:78:ed:0e:b3:62:85:14:
         9f:77:99:11:fe:e5:8e:dd:ae:67:12:ae:8b:56:b8:e7:9f:7a:
         1b:10:50:25:f7:dd:0f:8f:ce:53:9a:f7:a1:84:cf:4a:b2:61:
         91:15:77:bc:e8:77:c8:39:ac:5b:1a:bd:84:2c:f4:59:48:4e:
         a5:41:bf:89:dc:3c:5a:4e:db:43:b5:ac:57:5b:f8:21:79:5c:
         41:50:7f:9a:a3:db:19:04:44:0b:f1:e3:8e:b2:16:e8:d4:a6:
         4d:6c:ad:fd:82:56:13:e1:09:70:7b:dc:ef:b8:17:bf:a4:44:
         62:e4:a0:e1:6a:c1:1e:70:ea:63:87:88:a0:43:d5:92:6d:4e:
         9c:29:9a:9c:b5:cf:56:82:06:d3:11:75:76:38:97:e2:81:16:
         d5:a3:e9:e3:ff:5f:d6:64:1d:ee:d7:67:0c:9a:b0:3e:ab:3f:
         c9:70:03:22:0c:96:23:a4:bf:2e:54:df:80:d4:16:50:61:02:
         e7:2a:b8:dc:9a:c4:e3:14:4f:bf:c4:34:75:f0:54:bf:12:ec:
         58:8e:07:1d:fe:56:f7:e1:49:d6:ee:b2:0e:b4:f7:c4:b5:74:
         8d:14:7b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:00:46 2024 by rpki-client on console-fra.rpki-client.org