Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1155857b-02db-3728-a26b-0872c17fd651.roa
File:                     1155857b-02db-3728-a26b-0872c17fd651.roa (raw, json)
Hash identifier:          7CyIRfwSih9e0pEwKbtU5uuEH8tT07hp7pqtCMYLLUc=
Subject key identifier:   A2:66:F1:31:CE:41:C8:29:5B:AC:9F:7C:5D:C9:45:7A:FD:CD:B9:C9
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584840E5D57906C1EFF759CDBF00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1155857b-02db-3728-a26b-0872c17fd651.roa
Signing time:             Thu 19 Dec 2024 02:00:39 +0000
ROA not before:           Thu 19 Dec 2024 02:00:39 +0000
ROA not after:            Wed 19 Mar 2025 01:00:39 +0000
asID:                     7725
IP address blocks:        2603:20c4:8000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:40:e5:d5:79:06:c1:ef:f7:59:cd:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 19 02:00:39 2024 GMT
            Not After : Mar 19 01:00:39 2025 GMT
        Subject: CN=3139eaad-7e6e-4cd2-b6ef-e68b888ce8d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e0:c9:91:cd:c3:6d:87:98:e2:01:0a:b4:70:
                    5d:3f:b6:d5:bf:67:9e:f3:89:a1:50:86:01:9a:06:
                    31:cc:80:9b:32:99:87:62:24:ad:28:9a:cc:7c:66:
                    20:90:16:d6:60:da:72:bf:0b:01:09:b1:f6:64:89:
                    e9:62:05:47:c5:20:3b:80:ca:01:58:d0:17:5f:63:
                    a4:9e:72:ad:38:4c:7e:76:84:b3:84:a6:7e:a6:a6:
                    1e:4d:40:bb:b7:8d:a7:c7:69:61:e5:0f:b0:f0:31:
                    ab:2c:54:fb:d4:2a:0b:b3:61:85:a7:2e:8b:be:0c:
                    da:9f:3b:a6:eb:a1:f4:54:b7:3e:b0:9f:79:88:43:
                    50:73:73:ed:ed:55:47:58:71:b2:ef:d5:c8:68:a8:
                    2b:8e:28:1c:ef:70:74:39:50:83:c0:2b:4d:6f:05:
                    7e:2f:c4:33:d4:67:d6:1d:2d:56:e0:7c:f8:09:85:
                    1c:1a:fc:0b:09:d5:c7:d6:3c:d8:42:3a:2d:cb:34:
                    71:a6:89:61:58:93:b7:7c:8e:88:62:6c:6f:61:9f:
                    f7:2e:48:3a:3e:b5:7c:ef:89:71:d4:2d:b2:f3:2a:
                    e7:76:14:88:1d:9b:ab:a7:7d:f2:65:8b:27:89:21:
                    ff:67:d3:62:91:31:29:52:5f:1d:1f:04:e4:93:64:
                    cc:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:66:F1:31:CE:41:C8:29:5B:AC:9F:7C:5D:C9:45:7A:FD:CD:B9:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1155857b-02db-3728-a26b-0872c17fd651.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:20c4:8000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c7:81:93:8d:a9:79:56:db:54:e6:86:db:19:fe:48:98:c0:17:
         f3:ab:bd:dc:7b:8d:81:ce:d5:95:65:1b:9c:6d:f0:57:1d:f9:
         16:fc:90:dd:bb:60:3f:5d:ff:54:71:5f:7e:7e:74:be:fe:df:
         48:50:64:e7:ac:52:33:4e:64:c4:94:cd:05:c8:c4:2e:bd:04:
         49:c6:d9:20:83:ea:39:f8:71:59:b1:5a:6d:74:b1:b9:73:32:
         eb:de:ea:67:3c:94:67:91:a5:95:2c:b3:26:bc:3b:bf:fc:c9:
         e5:19:21:78:fa:76:7a:f4:ef:cc:9f:30:79:dd:a3:c2:7c:79:
         0e:91:7f:26:ae:6f:68:f6:d5:0e:1b:38:22:7a:9b:04:0a:52:
         04:a3:ce:0e:65:0e:d2:0b:00:fa:1a:5f:c4:62:1e:5e:ba:e8:
         4b:3e:cf:9b:cf:0c:f9:91:cc:1b:fd:f8:44:11:4a:19:bf:c2:
         ca:3d:0e:45:68:36:ef:4f:d8:c5:27:d6:c4:0c:4f:a7:5a:e2:
         4c:b2:4b:2a:e8:1b:ec:74:18:27:f8:87:31:37:c6:63:e7:84:
         90:57:36:04:95:35:94:83:d7:6d:22:4b:c7:d9:b2:13:81:a5:
         9a:28:c6:f4:2c:78:d1:c2:53:60:f1:44:cd:32:69:41:3f:bc:
         36:0b:3a:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 03:52:50 2024 by rpki-client on console-ams.rpki-client.org