Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40c67ff5-8da4-3b26-8111-61bccb023b1b.roa
File:                     40c67ff5-8da4-3b26-8111-61bccb023b1b.roa (raw, json)
Hash identifier:          pCN2xjvf2KIHiebittvH06T/uamle/lum2SdmYTnVDQ=
Subject key identifier:   0B:72:1B:BB:90:07:92:BA:56:39:2C:23:6D:00:39:46:C3:FD:B2:94
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEFB87BACA3AAF7CD1D38D70
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40c67ff5-8da4-3b26-8111-61bccb023b1b.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     13367
IP address blocks:        2603:3016:f00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:fb:87:ba:ca:3a:af:7c:d1:d3:8d:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=98c7fcc9-b1a4-4f23-aa4d-f57d6fb15aec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:da:aa:5c:f3:00:ca:e3:67:95:60:26:05:f1:
                    e4:c4:72:00:7d:90:11:c5:a6:d9:98:91:12:32:5c:
                    6d:a2:40:a3:45:6e:fc:7d:11:84:fb:6d:2f:e3:4b:
                    f5:9d:e3:37:c9:e0:78:5f:26:33:11:6f:12:ac:35:
                    56:72:77:94:92:d8:52:6e:eb:c4:f6:de:33:d4:eb:
                    87:e5:72:a4:61:5f:11:90:e9:c6:1c:c1:fc:24:8c:
                    85:a0:9f:6d:60:86:7b:01:26:dd:28:cc:4e:ba:f1:
                    49:15:60:12:65:80:4c:0b:d5:41:0f:14:2a:92:f3:
                    ee:ec:20:7b:4b:52:91:e3:91:ff:f5:ad:f9:58:6f:
                    47:f5:84:df:87:d3:0d:ad:a2:93:c6:01:95:94:1d:
                    11:c6:ef:2c:51:1b:ff:9d:22:b1:b0:af:e3:3c:5f:
                    04:4a:3e:9b:5c:b6:cc:5f:9d:2c:44:35:a0:92:1b:
                    b4:45:b0:cb:c5:62:1b:e3:e1:84:9d:78:36:3b:e7:
                    1b:64:97:6b:b5:51:6c:3a:15:67:ef:29:15:6a:1b:
                    75:15:18:11:67:e7:1c:9c:5a:42:2b:02:99:d2:0b:
                    b2:fb:bc:5a:a0:b5:4e:ce:2d:ca:90:16:29:74:bf:
                    43:9b:c3:b6:4f:cf:99:2e:79:ec:ef:a7:6a:e9:85:
                    fd:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:72:1B:BB:90:07:92:BA:56:39:2C:23:6D:00:39:46:C3:FD:B2:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40c67ff5-8da4-3b26-8111-61bccb023b1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:3016:f00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:af:e8:c5:3e:b0:5f:01:a0:a2:44:07:41:2b:6b:74:0a:fd:
         8e:c8:91:2d:93:5d:b3:f5:b0:45:10:b2:18:23:4b:0f:36:ec:
         b4:d3:f2:61:2b:cd:56:23:12:49:19:f0:33:c5:85:c7:41:2b:
         a0:83:ce:72:a1:d2:96:f8:f6:1e:b6:42:96:21:91:55:1c:27:
         2f:36:f1:1a:78:cf:74:93:a9:4a:29:cf:4b:93:14:1b:c3:6d:
         c5:f8:0b:67:b7:8d:9a:8c:68:7e:c7:87:0d:af:21:b0:92:64:
         b8:9a:17:87:00:68:13:e8:39:4b:9d:f2:e3:d6:8a:83:e6:56:
         d3:4b:50:bc:6a:cf:63:23:9a:31:5d:f5:0f:8f:d3:54:66:e2:
         27:da:6c:b5:78:2a:a0:32:52:9d:b4:49:52:66:9a:04:a3:27:
         20:b3:0e:d0:94:66:e2:08:ac:2e:cc:50:f4:48:61:dc:32:00:
         67:55:24:46:66:69:39:3b:13:b0:d2:2f:35:3a:09:8c:4a:bc:
         6b:4a:df:93:26:b9:e7:f7:81:c1:57:a2:b8:87:f5:e7:64:2b:
         9f:d4:b3:e7:8c:e2:2a:4d:57:42:be:e0:07:63:5a:82:46:47:
         ce:0a:3a:74:bc:ed:75:49:8d:fd:5b:7b:74:5d:a4:59:04:a0:
         c9:12:a8:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 12:54:01 2024 by rpki-client on console-ams.rpki-client.org