Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0123702c-f922-3eb1-aa4b-6c06766d8613.roa
File:                     0123702c-f922-3eb1-aa4b-6c06766d8613.roa (raw, json)
Hash identifier:          i0UuZOBZGlgfStT3d5pjjfl86aptBE8qXc2UH0RuPEc=
Subject key identifier:   92:0E:FB:E5:AD:2C:D3:83:7A:DF:D9:48:69:E5:2F:EC:44:8F:FB:47
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C67939A4FB3C5F63F6C000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0123702c-f922-3eb1-aa4b-6c06766d8613.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     7015
IP address blocks:        2603:2189:8000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c6:79:39:a4:fb:3c:5f:63:f6:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=b0b8723b-66f2-478d-860f-19e5d4d856fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:60:68:22:28:85:ee:6b:dc:47:78:f9:29:4d:
                    51:2a:08:8e:b9:89:35:da:4f:83:94:ce:6d:68:ae:
                    ae:dc:c0:bb:db:b6:3f:40:bc:b0:8d:14:93:cb:98:
                    f4:f5:53:36:8e:31:fc:10:d0:41:96:b2:06:83:8a:
                    07:fa:28:92:fa:9c:91:4f:f3:6e:73:2b:5a:d8:ba:
                    e4:2e:4e:1f:f2:1f:67:5e:32:29:0e:0e:89:84:1b:
                    4d:af:9a:59:f2:d1:33:93:f4:fe:28:be:09:71:b3:
                    30:dc:bc:43:42:54:40:59:2c:01:31:91:65:33:cd:
                    2d:42:f8:97:5a:9c:82:04:d8:11:b5:f1:86:67:27:
                    ea:71:be:60:b9:02:18:cb:c6:74:5a:36:8a:25:b0:
                    3d:00:a3:41:83:31:0b:ff:fd:d2:f5:18:c1:01:a0:
                    4a:32:f7:f6:d0:d4:a7:01:f8:a6:34:a2:88:b0:49:
                    41:49:c4:ec:b7:fa:e8:b8:17:12:4b:76:49:e2:94:
                    37:ab:f4:9c:2a:29:31:89:89:95:43:df:7b:d4:a5:
                    c6:09:5a:4f:10:0b:95:fc:ef:97:e8:9f:4a:6b:ff:
                    4b:7b:a9:54:2f:b4:aa:37:85:04:d9:4b:9b:11:d2:
                    0b:22:9f:49:64:a3:4d:a8:ee:af:86:fd:df:a2:5d:
                    9c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:0E:FB:E5:AD:2C:D3:83:7A:DF:D9:48:69:E5:2F:EC:44:8F:FB:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0123702c-f922-3eb1-aa4b-6c06766d8613.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:2189:8000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:28:b5:8f:e1:e8:34:ff:70:59:fb:45:f3:8e:a7:c2:33:8f:
         f6:b6:ed:42:3c:57:44:ff:bb:ed:d2:8b:6a:96:58:dc:38:a0:
         11:35:3d:d6:b0:09:c3:df:33:6a:ea:99:9c:31:fd:e8:a1:43:
         3c:f8:72:ac:b5:01:8e:43:29:b1:07:0b:d2:18:c9:96:c7:6a:
         34:07:60:41:0c:96:bf:22:32:3f:e1:88:76:35:91:a4:5a:f8:
         12:85:e1:63:f6:b1:96:16:af:ae:dc:f0:fd:ea:60:3b:3f:a3:
         40:f3:35:37:32:d5:48:8c:b9:30:4b:a6:6d:be:e0:9a:e8:b7:
         42:90:0b:c4:9d:97:bf:d1:78:3c:e8:92:6c:fb:dc:27:65:e9:
         e9:9f:b0:d9:f8:ff:a1:80:f1:78:32:6a:b3:24:9a:0b:57:3b:
         e5:f7:38:5f:55:dc:00:ef:79:0d:d6:f0:10:00:c3:71:ec:9d:
         3c:99:12:c1:1c:9b:c6:7b:39:5c:31:f7:39:0e:6a:83:25:65:
         7d:b0:f5:89:11:42:cc:77:10:0e:07:c2:cf:7a:c8:89:6a:ec:
         57:88:38:a5:5d:8a:26:00:d3:31:b1:a0:6c:e0:5f:ab:86:fd:
         18:b1:e0:bd:54:7c:18:81:16:93:59:c8:b0:16:81:43:5e:4e:
         e7:4b:dc:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:48:14 2024 by rpki-client on console-ams.rpki-client.org