Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2cb8e784-29a3-39db-8425-da2adc2820bf.roa
File:                     2cb8e784-29a3-39db-8425-da2adc2820bf.roa (raw, json)
Hash identifier:          1aZDeW4TP/hfy3t4JQ5E5RjuGPWI6nbu92hpHjIaryQ=
Subject key identifier:   DF:09:B2:33:A8:F4:5E:86:8C:5E:EE:3B:95:69:FB:62:B4:67:BB:68
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C5E547363CCEA5D6657800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2cb8e784-29a3-39db-8425-da2adc2820bf.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     33490
IP address blocks:        2603:21c0::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c5:e5:47:36:3c:ce:a5:d6:65:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=d0e2daef-f931-400d-b889-895a78868143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:1c:07:3e:9f:47:57:da:ac:01:5e:aa:fc:1e:
                    52:bf:d5:b2:d9:e0:3b:af:da:ec:19:12:4f:71:f9:
                    73:4a:61:11:0e:1b:fa:e0:b3:e1:13:91:21:9f:ff:
                    5d:9d:f0:fb:b4:59:f7:de:ca:42:32:d0:8f:5b:9c:
                    56:67:8b:9c:44:ec:e8:78:50:f8:17:6e:97:4a:81:
                    9a:f9:16:2e:ee:0d:48:a7:f5:39:b5:6e:2a:5a:df:
                    f3:cd:c1:63:e3:69:e8:9e:ad:00:88:56:b7:ab:d0:
                    cd:bc:22:b8:51:56:8a:f0:d3:08:42:36:ed:cd:5e:
                    f1:2e:c3:05:74:07:00:49:f8:ff:5d:bf:68:42:1b:
                    6f:97:88:0a:a8:1d:c2:51:5f:12:7e:78:61:16:67:
                    93:be:6c:c4:5e:69:cb:05:dd:63:f1:d1:41:7f:e3:
                    1b:0f:8f:63:b8:38:57:5b:f0:7a:6f:e7:73:3b:7a:
                    54:6b:f7:8a:7f:b7:ce:2e:92:f1:96:08:a4:9a:30:
                    fc:09:6a:94:7b:47:c0:b3:c1:14:6d:05:8e:c0:88:
                    41:63:d9:73:1b:0d:a6:35:db:64:45:e2:71:f3:ff:
                    f8:86:93:94:65:7e:e2:b9:cb:fa:f9:60:2d:3f:86:
                    3e:c3:82:02:37:0f:a6:b2:65:bf:e5:a4:07:fe:47:
                    28:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:09:B2:33:A8:F4:5E:86:8C:5E:EE:3B:95:69:FB:62:B4:67:BB:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2cb8e784-29a3-39db-8425-da2adc2820bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:21c0::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:57:b7:f0:01:64:74:3c:5a:33:3f:3f:52:e2:b4:a2:74:92:
         2e:52:ef:f2:a4:50:85:f9:aa:b8:1f:a5:f6:b6:7f:a9:e8:00:
         c6:84:47:66:0f:3e:ef:af:86:7a:0f:27:9e:a2:c6:b8:2a:d0:
         80:9d:24:87:9a:56:43:d0:7b:8d:3d:6c:2e:27:97:b7:3c:e5:
         62:3c:89:9e:a0:bd:9c:c0:6a:ec:1b:0f:73:e2:c1:ea:f8:a7:
         a3:15:9c:ea:c4:65:d7:2e:51:87:c5:61:2d:40:f4:2a:3d:71:
         46:53:50:c2:d6:1d:8f:0f:cb:6e:3e:80:52:93:c1:86:5c:95:
         39:6f:c5:2b:ee:55:6b:42:ad:e6:85:cb:25:d0:22:ef:b3:5b:
         dd:40:63:c0:71:5f:ad:4e:7e:9f:4c:79:da:98:26:0a:92:ad:
         6f:9f:bc:39:8a:1c:73:af:be:0a:a6:9d:57:4f:25:77:11:65:
         04:17:53:3a:42:1e:df:23:46:9e:ba:5b:ff:68:01:aa:b9:8b:
         02:75:21:8a:b6:d8:8b:e9:67:47:29:b4:40:f2:c6:46:83:3c:
         94:a3:0a:7a:64:e6:dd:b4:b9:65:63:11:1d:f0:62:15:1a:11:
         91:16:f7:2a:95:dc:fb:05:6a:2e:f9:3b:cf:32:d8:da:6d:8d:
         56:c4:44:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:55:35 2024 by rpki-client on console-fra.rpki-client.org