Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1802def8-dc36-344a-af0a-80ba262ee8b5.roa
File:                     1802def8-dc36-344a-af0a-80ba262ee8b5.roa (raw, json)
Hash identifier:          kTqYRDz5nBh4riNBW7P6xBQ9nO7EQdcWs3EQ+IdLXOs=
Subject key identifier:   AD:72:13:51:11:7A:0F:E0:31:16:70:7E:C7:86:C2:94:D8:4B:A2:20
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C676270710A8C407839700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1802def8-dc36-344a-af0a-80ba262ee8b5.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     7015
IP address blocks:        2601:196::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c6:76:27:07:10:a8:c4:07:83:97:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=5492bfce-e1e6-4335-9991-c284a19bddfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:8a:55:d7:7f:29:3f:96:66:3c:6f:ac:4d:70:
                    d3:53:13:23:89:4b:73:c8:95:2c:d0:83:9c:8e:c2:
                    f6:96:41:6b:a0:02:d2:0a:fb:73:22:6a:55:3e:25:
                    0c:c9:aa:26:ee:75:27:b1:d2:d4:18:b7:6b:e8:72:
                    d9:9f:8c:a2:d7:0e:34:b9:f2:e5:04:b2:6d:6c:2e:
                    72:ca:b5:cd:01:cc:45:05:42:cc:4f:9f:66:1e:37:
                    09:41:20:9f:4c:81:75:53:56:e7:93:03:27:46:8b:
                    dd:82:43:f7:d2:a4:6c:e9:e0:c3:f0:90:de:78:c3:
                    fd:80:0b:4a:70:59:d0:6e:9d:d2:22:83:bc:cf:12:
                    b6:f0:49:69:ef:13:55:0a:8a:27:27:07:da:a2:24:
                    c8:51:2f:82:d5:dd:00:1c:06:58:e3:f1:cc:38:e6:
                    9c:22:a4:cb:d3:8f:8e:bc:4b:70:1e:3f:92:df:fb:
                    54:f6:71:16:0b:e8:f0:50:eb:35:5a:3a:4a:b6:a1:
                    3f:5b:1e:da:b4:d9:ce:81:0d:72:56:95:e7:91:51:
                    5d:21:bd:d8:b7:ae:6a:0b:f1:38:da:0c:25:1b:4e:
                    9b:7d:c3:fb:fd:46:a2:fc:33:82:de:bb:b5:f0:59:
                    e6:05:b6:58:2c:05:09:1d:59:1e:06:37:38:d8:f3:
                    3d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:72:13:51:11:7A:0F:E0:31:16:70:7E:C7:86:C2:94:D8:4B:A2:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1802def8-dc36-344a-af0a-80ba262ee8b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:196::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:40:ba:f3:7c:a2:2f:c2:eb:12:03:40:32:e6:fa:fb:d1:03:
         46:72:4a:45:8a:2b:bc:96:67:fb:0f:53:20:55:8d:39:ab:dc:
         cf:c3:de:96:f0:09:db:c3:f0:8b:b2:6f:5c:68:3c:1e:7b:75:
         26:91:39:b9:c2:49:ee:a9:f3:89:f7:c3:9c:81:a5:f1:4d:b3:
         15:80:d2:aa:9d:5d:3e:85:c6:be:4e:bf:23:95:11:ba:2d:9b:
         5f:32:63:b5:2d:49:76:5a:4a:48:a0:e2:5e:2f:5d:83:fc:d0:
         f2:a8:a0:ab:0a:8b:92:33:47:20:23:35:8c:3f:7e:e1:11:6b:
         7d:2e:23:3a:f1:82:d4:43:e3:21:21:f2:d3:3e:11:15:df:52:
         70:a4:87:93:36:3c:46:de:7e:41:63:b2:b0:78:9e:40:4e:54:
         69:9d:4f:3c:8b:f0:45:83:18:30:76:c3:7e:d9:0a:69:8f:0c:
         3d:3b:b8:8f:6b:99:6f:61:2c:3e:bf:29:ba:3c:44:48:c5:27:
         74:d2:a3:05:00:e6:72:b3:10:32:f4:4b:cc:07:4b:28:b9:e5:
         cf:34:0b:89:6f:22:18:35:80:65:95:71:63:23:98:b1:ac:83:
         f8:df:53:14:87:93:40:b7:49:bc:d2:d1:12:c9:95:62:df:86:
         f5:6e:06:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:50:05 2024 by rpki-client on console-ams.rpki-client.org