Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35367fa1-1fd9-30a5-911a-34457746cab5.roa
File:                     35367fa1-1fd9-30a5-911a-34457746cab5.roa (raw, json)
Hash identifier:          nwps3WE8xPymAKejSk3WsORkotdVQn9A5YoS9nLQRXc=
Subject key identifier:   12:D8:C0:B4:45:DB:4A:5A:F6:53:93:CE:30:19:06:5D:3E:1D:EC:FA
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584731FB44126C8A094BB509E200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35367fa1-1fd9-30a5-911a-34457746cab5.roa
Signing time:             Fri 13 Sep 2024 01:00:32 +0000
ROA not before:           Fri 13 Sep 2024 01:00:32 +0000
ROA not after:            Thu 12 Dec 2024 02:00:32 +0000
asID:                     7016
IP address blocks:        2603:3007:a00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:31:fb:44:12:6c:8a:09:4b:b5:09:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 13 01:00:32 2024 GMT
            Not After : Dec 12 02:00:32 2024 GMT
        Subject: CN=7994511f-bf61-457e-9d12-4838ba60620b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ff:32:f2:14:e3:1f:e6:0e:9b:1b:88:a9:72:
                    34:17:51:7d:45:d3:76:31:8b:c6:6f:35:77:43:15:
                    49:92:ca:f2:87:4f:d7:7f:c1:e8:5c:d3:a3:c9:19:
                    65:9f:40:28:12:76:9f:e7:d8:61:58:d6:27:7a:bf:
                    df:a3:0d:4a:cb:de:b1:74:2c:50:02:fa:a5:bf:20:
                    f6:26:38:fc:34:ca:e3:a3:46:1a:2d:5e:c3:25:b0:
                    7c:65:e4:ef:75:ab:34:0e:44:fb:ef:97:45:08:b4:
                    62:d1:79:fe:72:dc:98:d5:b3:96:d1:e4:15:ef:a8:
                    f2:80:37:93:9d:5c:bc:b6:74:4c:d6:79:cc:cb:5f:
                    42:79:0f:4e:bf:a1:da:d1:58:74:ae:a2:a9:d6:10:
                    6c:87:2d:84:d5:cc:e5:21:62:9b:57:57:3f:88:18:
                    eb:18:13:60:b5:30:68:ae:26:b0:97:bf:f0:2e:d4:
                    fb:63:6c:e8:b2:ab:ed:fc:6e:d0:e8:02:ff:00:86:
                    50:4f:7c:54:ff:43:e7:42:60:70:8d:ec:4e:d0:c7:
                    c7:26:35:ae:22:0a:61:3e:0a:19:3d:d7:1d:fa:77:
                    26:e6:54:6a:59:ce:f8:d9:62:78:7f:bb:32:7f:1b:
                    34:fb:98:46:87:c6:d0:0c:eb:fe:fe:3c:19:e7:e0:
                    ef:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:D8:C0:B4:45:DB:4A:5A:F6:53:93:CE:30:19:06:5D:3E:1D:EC:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35367fa1-1fd9-30a5-911a-34457746cab5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:3007:a00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:44:de:b2:90:f3:d0:c5:69:12:b2:50:87:69:b8:2d:00:62:
         ad:91:0b:a4:5a:d5:72:83:e2:dc:bd:94:b7:45:2f:c7:67:82:
         a2:c8:06:d6:cd:cb:75:c1:06:a4:f9:d1:19:57:ab:09:ff:8a:
         64:83:86:a0:e6:69:2b:af:c9:f6:7e:e5:2e:0f:c4:50:a3:95:
         33:de:92:fc:9c:79:23:1d:ac:a9:19:68:6c:03:32:ca:5d:38:
         80:97:50:1f:8f:71:74:85:8f:26:49:13:1b:76:a4:c7:af:c5:
         cd:79:d5:7e:42:70:a0:88:8a:ce:d9:01:de:84:23:f5:f5:f9:
         88:b3:1d:60:a3:29:96:34:82:3e:2b:bb:a8:1e:7f:f3:3d:25:
         e7:c8:57:bd:c1:9d:29:14:f0:f0:f4:4b:a9:26:59:82:28:66:
         ae:cd:15:d0:b0:f9:ee:be:f4:df:13:98:da:12:7a:78:e9:7d:
         a8:81:79:48:98:7f:36:19:e8:3d:52:5e:32:9e:d2:89:d9:87:
         05:05:04:4a:db:90:c5:2b:6e:47:52:7c:b8:c0:4e:39:9e:b4:
         38:5b:46:de:4b:84:4e:5d:54:e5:3c:bb:3e:67:4e:76:b9:31:
         63:d8:e1:0f:d4:cb:c0:0b:4e:1a:d0:57:a1:4d:ae:b9:e1:ed:
         86:b3:3c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 05:00:54 2024 by rpki-client on console-ams.rpki-client.org