Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/396eef46-a3f9-3221-b915-e98916566c30.roa
File:                     396eef46-a3f9-3221-b915-e98916566c30.roa (raw, json)
Hash identifier:          dUJnIR9BgfOn3ySkad2U/qU1hzQ3o+UHcy+YXD3hpzc=
Subject key identifier:   32:F6:3C:E1:00:EB:3A:C5:42:4D:F1:1A:8E:F2:C4:9E:3E:92:C8:2A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848116FCDF5036565E5AEE76DE0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/396eef46-a3f9-3221-b915-e98916566c30.roa
Signing time:             Mon 02 Dec 2024 02:00:40 +0000
ROA not before:           Mon 02 Dec 2024 02:00:40 +0000
ROA not after:            Sun 02 Mar 2025 02:00:40 +0000
asID:                     22258
IP address blocks:        2603:3014:1900::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:11:6f:cd:f5:03:65:65:e5:ae:e7:6d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  2 02:00:40 2024 GMT
            Not After : Mar  2 02:00:40 2025 GMT
        Subject: CN=71b6753d-bda8-4c36-a820-54cdc2f473d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a8:44:43:ef:b4:f6:1a:e0:80:c6:a7:e3:63:
                    04:2f:9e:63:bf:c3:bb:fe:68:d6:f2:71:05:79:b0:
                    8b:df:0a:79:8f:aa:63:77:76:7a:f7:b0:f2:bb:32:
                    94:5c:9c:56:e0:03:96:ef:e7:dc:c0:d1:50:d4:a1:
                    c0:a5:ca:1d:6d:99:a4:eb:23:66:0f:07:43:4b:de:
                    b2:b5:7b:25:bc:ef:0e:d4:d1:45:12:b5:be:f0:03:
                    29:69:9b:18:c2:ca:be:23:05:c9:d0:4f:17:0b:c2:
                    7c:9d:67:59:49:c2:91:e9:b9:36:93:3d:bb:af:84:
                    05:41:5e:14:40:52:3f:34:85:56:d1:b8:44:52:29:
                    8b:f1:e0:20:25:72:57:7c:a7:cc:fb:ea:b0:37:b6:
                    25:70:89:70:37:27:36:1b:b2:46:d8:a4:93:d2:e9:
                    8e:cc:d8:d2:2e:f5:19:5b:ec:84:b0:04:93:6f:dc:
                    a9:5f:dd:3e:bc:7e:3f:8d:64:a9:7b:c9:4d:45:ca:
                    05:03:65:74:f2:46:db:14:a8:b8:67:69:76:e4:33:
                    2b:21:cf:0a:03:cb:6c:7d:6d:ef:e5:62:7b:e3:7e:
                    96:a3:52:90:19:50:75:81:e5:dd:aa:16:72:7b:fa:
                    51:c2:44:85:f9:7d:14:be:72:b2:2e:26:2d:37:30:
                    c5:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:F6:3C:E1:00:EB:3A:C5:42:4D:F1:1A:8E:F2:C4:9E:3E:92:C8:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/396eef46-a3f9-3221-b915-e98916566c30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:3014:1900::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:c2:ce:78:1f:75:af:17:fd:2f:f3:95:90:a1:24:2c:69:cb:
         a0:7f:3b:11:b9:91:f4:8c:36:f7:56:d7:13:96:31:71:c3:71:
         22:52:c1:a8:11:de:50:14:16:e2:33:86:c7:99:5f:d5:93:02:
         44:8c:f8:57:df:b4:98:79:60:47:3c:9e:de:75:d9:98:41:68:
         fd:02:d8:3f:cf:51:ae:99:93:5f:ce:55:db:0b:06:7d:54:e0:
         cb:1e:10:75:27:1f:df:24:88:1f:bf:18:f9:e9:88:96:bb:ab:
         72:55:bf:e2:ed:0b:6c:91:7b:da:7e:37:45:d9:8c:3f:e5:b8:
         d2:3b:c8:23:16:5c:b2:4b:22:85:9d:d9:98:37:aa:35:93:be:
         e3:6d:b8:79:1f:97:86:13:44:20:69:95:2b:4c:bf:48:00:35:
         99:fd:0d:14:ba:a2:19:15:b0:7c:0f:79:8c:ff:42:7f:c4:78:
         c8:6c:68:60:e7:ae:54:e1:93:3d:09:67:ce:ac:bf:90:c8:26:
         e8:45:f0:ad:8c:9a:e9:49:47:07:b5:f6:17:a4:b7:ab:07:c1:
         3e:3e:30:3d:0a:1f:2d:b0:1d:18:68:66:c5:67:f6:bb:2f:c4:
         78:25:91:af:84:94:e5:9a:73:42:c7:b2:2e:ab:ad:19:84:e8:
         ec:9f:42:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 16:17:21 2024 by rpki-client on console-ams.rpki-client.org