Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2f4f50f4-2b5f-340d-b280-1cce09f8b893.roa
File:                     2f4f50f4-2b5f-340d-b280-1cce09f8b893.roa (raw, json)
Hash identifier:          Rnz5fXRXm4jz3oNFH+ZgKv3kdYLZ0OoxDVUgP0vJB1I=
Subject key identifier:   57:0E:B6:5C:94:9D:40:25:E7:ED:47:52:85:A1:86:39:E0:E0:B2:1E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEFAB38764BCB3C12C008100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2f4f50f4-2b5f-340d-b280-1cce09f8b893.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     33667
IP address blocks:        2603:3006::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:fa:b3:87:64:bc:b3:c1:2c:00:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=c2a5c9a6-eb75-43fb-b7b8-5546ecfa4df7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c9:4d:f6:36:08:e3:5c:0b:6b:ae:1f:93:64:
                    c5:b5:7b:46:b1:9c:2b:53:c3:af:36:37:b7:dc:7e:
                    07:7d:8d:09:64:d6:d1:54:95:be:42:86:e9:6a:55:
                    9c:a5:21:4b:0a:67:1d:44:b6:8f:13:eb:7a:6c:a3:
                    4d:bb:bc:36:1f:5e:70:36:fe:31:2b:73:74:18:f7:
                    48:c6:8a:50:6f:96:6b:15:a8:cf:41:d2:fa:5d:75:
                    1a:d9:bf:6e:81:a0:80:69:4b:f1:38:f2:24:51:57:
                    81:e8:20:d8:71:10:f7:ac:27:d5:bf:d6:ba:2c:70:
                    c5:1a:c9:56:78:97:40:7d:72:1d:60:e1:89:65:b7:
                    41:bf:99:ff:af:8d:02:00:ae:cb:7a:77:d9:06:ef:
                    69:b8:3b:94:58:a4:30:08:8a:aa:f6:66:37:ef:f4:
                    39:a9:9e:c3:d9:ef:1d:78:9f:9e:e8:3e:f3:ce:0b:
                    d8:7b:44:41:ac:f8:1d:d7:21:47:e9:d7:25:98:ef:
                    21:42:bb:02:0e:ac:6b:6c:6f:80:b7:05:d7:ae:38:
                    91:9d:bd:72:df:6a:b3:8f:db:6d:14:73:95:c0:c6:
                    ec:5c:97:ca:b6:19:4e:ce:82:76:21:b6:38:51:5d:
                    6d:f9:0e:85:df:64:29:ee:3e:fd:fa:41:aa:ab:9e:
                    3b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:0E:B6:5C:94:9D:40:25:E7:ED:47:52:85:A1:86:39:E0:E0:B2:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2f4f50f4-2b5f-340d-b280-1cce09f8b893.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:3006::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:78:f1:72:61:67:48:94:74:f9:f0:60:d3:42:01:b9:75:41:
         b7:b0:24:42:ae:f8:d4:60:db:be:45:15:c3:14:26:d4:85:8f:
         9f:13:40:3f:af:77:3e:31:c0:e2:ff:7b:74:a1:94:25:19:30:
         e1:09:49:d0:2a:1f:4a:92:fd:cd:6b:2b:9c:d4:72:87:11:9d:
         7c:60:1a:c2:ae:b8:0a:f8:26:ba:dc:14:61:da:62:d3:b8:4a:
         10:05:f7:d5:6a:63:9a:64:cb:50:32:c6:1d:33:1d:71:37:2b:
         1d:fb:02:ee:cd:b6:6f:09:d5:10:5e:40:31:7c:13:43:13:52:
         51:7b:e7:b1:4c:50:e8:79:ec:4e:39:ef:08:41:ed:39:de:25:
         1e:e6:10:36:57:0d:c9:65:df:79:76:2d:14:73:42:3a:6f:b3:
         6b:17:8a:c4:9c:f7:7d:0c:d1:9c:49:9b:06:fc:ca:94:3a:cb:
         5a:80:bf:94:ae:0c:89:22:1d:9a:c7:23:a1:4d:da:54:a9:94:
         50:bd:2b:2b:92:5c:b3:c6:e5:8e:08:53:f7:19:0c:15:27:21:
         8d:14:15:0e:f4:11:8b:6f:12:c0:26:46:96:44:4f:80:be:fb:
         77:40:95:da:2e:70:48:a6:ad:a6:d6:42:95:a2:64:89:5c:a4:
         0e:f1:c7:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:39:21 2024 by rpki-client on console-ams.rpki-client.org