Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4510b927-3ff3-3af6-84e6-0ccdad9ed96d.roa
File:                     4510b927-3ff3-3af6-84e6-0ccdad9ed96d.roa (raw, json)
Hash identifier:          /Y0aTQ8oPTsHbsTF1354NnOh9nCEgD6rve60FIwh7ws=
Subject key identifier:   7E:EF:B0:40:66:D8:69:6D:CF:88:79:7E:B2:BE:19:C5:34:6C:F9:D7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584731FB47916E5000A988AED100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4510b927-3ff3-3af6-84e6-0ccdad9ed96d.roa
Signing time:             Fri 13 Sep 2024 01:00:32 +0000
ROA not before:           Fri 13 Sep 2024 01:00:32 +0000
ROA not after:            Thu 12 Dec 2024 02:00:32 +0000
asID:                     7016
IP address blocks:        2603:301f:1600::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:31:fb:47:91:6e:50:00:a9:88:ae:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 13 01:00:32 2024 GMT
            Not After : Dec 12 02:00:32 2024 GMT
        Subject: CN=0b98ae1e-932f-4ae5-90e0-b3cd01c56d48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:04:a8:48:e3:bb:69:d8:88:d3:96:6f:19:44:
                    08:27:83:ba:66:a8:9d:21:dc:b7:ae:78:64:18:cc:
                    7f:fc:54:32:8c:bd:d3:1a:a2:32:5c:99:75:ef:15:
                    56:9d:06:e6:5e:cf:5d:77:37:d8:90:83:ab:01:28:
                    87:8b:cc:13:a0:16:8c:da:89:14:4b:3d:68:7b:53:
                    7a:e4:93:88:7b:fe:42:2f:bb:93:d5:82:88:53:19:
                    e5:68:5a:7c:38:04:9b:ae:20:41:b9:61:39:81:05:
                    19:69:69:55:0f:52:fb:38:fd:bc:e7:6a:e6:91:b3:
                    34:cd:61:05:be:23:64:3b:92:e1:a9:3e:19:35:5c:
                    bd:b6:44:1f:36:9c:c2:d3:29:f3:bb:bf:0c:d4:d6:
                    f1:32:1d:9c:b4:39:1e:07:cb:eb:03:2d:02:3c:fb:
                    11:fe:20:f4:dc:60:4a:06:8d:cb:41:8a:77:b2:e5:
                    a2:4b:90:f7:cb:3a:27:51:3b:5a:24:67:1a:cd:59:
                    e1:00:85:07:1d:02:83:1a:bc:1a:5b:4f:2e:0a:5d:
                    37:27:1b:12:79:7a:ab:a2:ba:2e:de:29:ac:c2:8a:
                    70:20:78:aa:95:24:a5:f2:e8:46:04:92:a0:47:43:
                    b3:81:c0:2a:84:96:02:d2:13:4f:c4:1d:a1:d5:c1:
                    d8:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:EF:B0:40:66:D8:69:6D:CF:88:79:7E:B2:BE:19:C5:34:6C:F9:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4510b927-3ff3-3af6-84e6-0ccdad9ed96d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:301f:1600::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:42:bd:c0:6e:cc:39:b6:6e:28:7d:07:12:2e:35:a2:0a:61:
         e6:84:41:d2:d1:28:1b:7f:12:89:5e:b7:80:01:07:dd:10:0d:
         2c:c5:df:64:7b:a9:50:d8:d1:b9:33:01:2c:05:e9:f4:70:56:
         70:f8:ff:ca:ea:ce:58:6d:81:9c:06:97:2e:db:f0:b2:48:b1:
         1a:be:ce:2f:9a:a9:03:e7:2f:02:df:60:9d:de:3e:19:0d:fb:
         1f:42:ca:a1:a1:54:4f:ff:9b:b4:f8:d8:f6:47:57:a5:23:28:
         a0:65:23:aa:cb:e9:ea:12:74:fc:d1:ab:03:50:82:64:dc:6d:
         8f:68:f4:bb:d2:d4:b4:2a:24:b5:5b:0f:9a:3a:91:ce:f5:e6:
         bb:bc:16:b3:0a:17:59:8e:5b:65:9f:32:c5:20:9e:34:9d:62:
         33:e7:4e:2a:79:5f:2b:fa:aa:0e:78:94:64:eb:c2:e8:e8:1c:
         bf:78:cd:2f:6c:63:c4:f1:0d:ca:1e:0e:11:19:ce:8d:b2:0d:
         c9:70:0a:6d:ae:3a:69:f8:c6:7f:bc:0f:ae:81:92:69:02:c1:
         25:c8:ab:07:08:76:d2:8c:e7:10:2f:bb:7e:65:f2:12:92:04:
         a7:89:87:b9:98:65:9f:13:00:86:72:5c:8b:e0:d1:9a:f6:f9:
         f5:51:55:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:34:39 2024 by rpki-client on console-fra.rpki-client.org