Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/41bdf806-60a3-33fd-90ee-da49884a0b03.roa
File:                     41bdf806-60a3-33fd-90ee-da49884a0b03.roa (raw, json)
Hash identifier:          ECw1mqtxg1SSaS1hWUkhzwsz1TJhRb6h5ImuFk9+ZiY=
Subject key identifier:   88:1D:93:9F:CC:3A:A1:5B:24:2C:F3:D1:3D:1D:A9:B4:61:1B:96:A9
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C677BEB2F2507A8496CB40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/41bdf806-60a3-33fd-90ee-da49884a0b03.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     7015
IP address blocks:        2603:2180:8000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c6:77:be:b2:f2:50:7a:84:96:cb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=a6e060ad-0318-411d-9ca5-5146d65addce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:43:2a:d2:62:53:3e:c6:d7:ac:95:b4:cd:4e:
                    fe:a2:23:1d:43:ac:2e:d8:b7:40:10:ea:77:29:8a:
                    60:d0:5c:6d:fa:80:bb:df:1b:03:ca:06:26:1f:1b:
                    9e:9b:5e:e8:57:90:43:33:ae:9f:6b:4f:c4:bf:7f:
                    07:d0:14:7b:62:4a:cf:a6:46:e8:85:e2:d4:c5:b5:
                    19:59:5d:ea:77:6d:51:56:d2:38:c2:44:db:76:b4:
                    ab:c2:2a:22:45:8d:02:7c:ea:ff:47:be:31:2b:f2:
                    d5:e8:bb:8c:cf:26:2f:66:12:18:21:3a:cc:05:a2:
                    9f:7e:7e:00:95:a8:81:00:a3:08:e3:ca:cf:27:a2:
                    ea:14:e2:75:84:89:e7:a4:7c:ac:52:57:7d:60:8c:
                    32:52:aa:b4:e1:81:84:0e:ec:d6:c5:cd:22:bd:87:
                    f5:cd:95:b0:1a:96:3d:27:61:44:ea:5e:7d:81:49:
                    ed:37:61:0f:b2:49:5b:fd:de:4f:6e:2c:41:9f:8f:
                    b3:2c:96:0f:53:71:f2:56:d9:64:27:93:d6:b2:18:
                    f5:07:49:10:55:ae:48:28:b4:04:16:60:4a:9c:90:
                    e2:90:28:de:64:5b:92:b0:02:ba:c1:84:93:ed:47:
                    42:88:1f:29:91:9b:b6:99:a2:a7:41:a2:d3:8f:7f:
                    e1:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:1D:93:9F:CC:3A:A1:5B:24:2C:F3:D1:3D:1D:A9:B4:61:1B:96:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/41bdf806-60a3-33fd-90ee-da49884a0b03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:2180:8000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:9e:41:12:4a:85:a9:c3:6a:54:89:5f:4d:fb:c5:b0:9c:d5:
         d5:f3:c0:da:11:a8:c3:1c:c6:12:dd:27:2f:7c:a1:c6:c1:3e:
         86:5f:50:3b:93:4f:bb:9c:07:ed:7d:3b:f9:88:1c:6a:bf:55:
         b7:73:6e:96:7a:4e:75:4f:57:32:b3:bf:70:66:ee:40:74:e6:
         cf:19:88:0a:f7:22:6a:83:2b:6a:89:1c:7c:d3:69:3f:b3:39:
         a4:5b:9a:10:db:3e:17:5c:66:98:30:f2:db:dc:51:4a:e6:96:
         be:9d:88:56:8b:02:20:dc:31:e5:c6:ca:12:61:af:16:9b:ed:
         c4:ad:8c:ae:03:f4:8f:9d:0e:3a:36:57:63:d7:82:39:a1:2d:
         e0:9c:d5:91:a3:2e:e3:42:be:26:51:f9:a5:0c:90:c2:77:27:
         33:ce:32:33:bc:62:8d:92:81:f8:0e:29:6f:15:f8:b5:98:d5:
         9a:9b:c0:5b:62:1d:5d:de:06:51:85:f7:9f:77:e8:06:c0:18:
         64:27:75:67:c1:ae:20:17:ae:f6:1a:cf:68:fe:cd:28:d0:eb:
         83:b4:fd:e0:02:a1:7e:b1:3d:3e:06:19:dc:50:89:6b:04:ea:
         1e:c0:22:18:63:ef:5b:2e:88:c4:12:43:de:40:50:ea:8c:38:
         cc:07:21:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:53:49 2024 by rpki-client on console-ams.rpki-client.org