Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/26b804a7-8ec0-3254-95da-fb04310330ba.roa
File:                     26b804a7-8ec0-3254-95da-fb04310330ba.roa (raw, json)
Hash identifier:          cSiQ5oY5LleiCpMzi1tnhh77oBUK8m5bMXNTl0mVm9I=
Subject key identifier:   10:AC:50:01:59:CC:22:05:B0:50:BD:CB:04:26:74:4B:9D:8F:3B:D2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF7101F7AB20D56ACD1CF80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/26b804a7-8ec0-3254-95da-fb04310330ba.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     22909
IP address blocks:        2603:2481:c000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 Jan 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f7:10:1f:7a:b2:0d:56:ac:d1:cf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=8db6d515-6c4a-40f6-8b0a-9c3b1dd9c251
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:09:0f:99:06:8e:5b:49:2b:90:f8:54:e6:bf:
                    a6:0f:36:f3:58:51:2b:55:68:88:bb:35:2d:75:5a:
                    bf:f4:c5:e2:2f:5f:1a:dd:a5:d6:73:03:d3:80:44:
                    5e:6a:1c:a3:98:fb:91:2f:58:fe:74:43:d5:b3:08:
                    b0:ac:0a:51:77:53:0e:65:0a:34:86:61:12:22:b2:
                    c0:6f:58:10:e7:c5:79:6e:ea:86:fb:fa:aa:d3:de:
                    8b:d2:12:0b:16:b0:d2:73:6b:57:b7:ce:3a:97:ba:
                    e3:de:91:a2:85:00:21:3b:fe:ae:f1:e5:62:02:51:
                    9d:67:64:a7:5f:90:e3:7a:12:7b:b1:c3:8f:52:dc:
                    20:fe:dc:61:f0:9e:f0:31:8e:5a:46:50:61:f8:0a:
                    a0:2d:06:ec:40:f1:90:56:a7:a3:f9:e6:e1:53:53:
                    d0:44:7b:4d:b3:69:56:00:b3:c5:bd:8b:3e:f2:5e:
                    3d:68:6e:0b:d8:ec:7f:dc:5c:b6:70:cf:d5:ea:37:
                    71:26:bd:bb:dd:07:4a:3b:ff:62:e8:da:4e:7e:a4:
                    1a:3d:d3:98:0a:58:54:8d:b4:bc:9c:66:7a:80:a0:
                    ac:f9:80:25:3a:b2:c5:d8:83:fc:d6:c9:2f:75:c1:
                    d7:dd:9c:d1:83:9d:98:6a:be:2b:87:3d:3a:0f:95:
                    42:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:AC:50:01:59:CC:22:05:B0:50:BD:CB:04:26:74:4B:9D:8F:3B:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/26b804a7-8ec0-3254-95da-fb04310330ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:2481:c000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:c2:70:f0:c7:45:2f:37:76:ac:92:be:ba:e0:be:84:fd:4b:
         42:2f:ea:22:bd:ec:fb:42:61:6b:a9:85:b7:02:be:61:44:4e:
         17:fe:96:7e:28:b8:b3:63:04:b5:b8:db:3b:b4:56:6e:42:0a:
         db:ba:7a:8a:f3:18:e4:57:89:dd:c6:e6:5c:ec:71:8f:29:48:
         0a:48:b2:13:3d:d3:f4:b2:9b:97:c9:5b:7c:8e:07:b1:25:3f:
         00:72:7f:a0:29:81:a5:55:09:1f:06:44:6f:eb:c8:4f:bf:cd:
         5b:d2:62:42:5b:76:68:f1:c6:84:ef:5a:9c:58:c5:26:bd:77:
         82:ab:94:30:56:b3:69:c0:a7:05:73:a3:0d:f4:3d:ac:fb:6d:
         ef:da:55:4d:ae:eb:4e:c4:96:04:77:db:32:aa:71:6d:8c:70:
         11:2a:46:9e:24:47:9b:5f:e6:0f:5d:19:f7:2e:ca:cc:44:39:
         09:9c:d6:9c:c6:04:28:46:a1:cf:da:9f:bf:cd:3b:f0:41:5c:
         0d:22:a9:00:58:f6:41:2e:72:a9:dc:e7:2a:ce:c6:f1:0f:67:
         2b:6b:5e:42:8a:fa:94:24:f2:02:5d:05:26:97:b0:41:bd:43:
         f0:9b:1b:5d:6b:c9:a1:d2:1d:b9:2a:d7:04:64:5c:90:0b:f5:
         83:c1:d5:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 3 18:18:27 2025 by rpki-client on console-ams.rpki-client.org