Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/64eea55b-781e-31ff-8d87-1ecfa068f2b2.roa
File:                     64eea55b-781e-31ff-8d87-1ecfa068f2b2.roa (raw, json)
Hash identifier:          M8fIvho+KYM5+wpMzfveS/JWgqZKYOR3yC67BBb0zBI=
Subject key identifier:   25:08:43:8E:9B:58:A4:70:D9:A6:A3:87:72:08:0D:DB:28:03:49:79
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C674496FE0E323C4252300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/64eea55b-781e-31ff-8d87-1ecfa068f2b2.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     7015
IP address blocks:        2601:18c:c000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c6:74:49:6f:e0:e3:23:c4:25:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=a5fd2674-16f7-4e7a-9d9b-697fcb77a7c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:91:89:85:08:61:21:99:b5:c2:f5:8c:bc:be:
                    d1:44:46:fd:3f:40:e5:59:34:6b:b8:2c:b5:93:a7:
                    0c:cb:a7:ac:36:49:00:22:9c:f5:85:99:a8:e6:18:
                    09:68:89:22:73:c4:ae:a1:c6:a9:f5:75:37:f9:30:
                    73:a0:16:c4:ef:84:c1:81:dd:3f:fc:6c:20:49:6c:
                    e4:75:f1:ae:3e:3a:06:1e:20:8a:40:c8:26:5b:38:
                    22:b7:30:f0:3b:1e:26:50:04:c4:fe:16:56:9f:4b:
                    ad:33:95:42:28:24:78:6b:24:99:54:00:34:93:f0:
                    88:81:6d:db:0b:ba:b9:57:33:bf:5f:69:d5:8d:2b:
                    c9:0a:88:80:60:82:b4:fa:07:a1:89:cc:ac:98:d2:
                    42:02:65:dc:b5:c2:11:22:3e:bf:d6:0e:d7:6c:48:
                    cd:61:a6:79:e0:86:dd:3d:c1:84:57:8b:71:a7:b8:
                    c4:60:05:91:25:6a:9c:22:6e:3f:01:82:6a:95:e8:
                    ca:d4:0e:c1:b0:46:af:85:d5:b7:68:54:15:86:ce:
                    ba:e2:f5:3f:71:61:29:f4:2e:88:44:c7:f0:93:3e:
                    10:71:ff:dc:a0:fe:b8:35:cb:cf:0c:74:2d:b7:10:
                    ec:55:f9:63:e8:3a:95:a1:6a:70:42:22:dd:42:a7:
                    8f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:08:43:8E:9B:58:A4:70:D9:A6:A3:87:72:08:0D:DB:28:03:49:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/64eea55b-781e-31ff-8d87-1ecfa068f2b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:18c:c000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:7a:de:5d:3d:d8:2e:05:2d:69:e9:46:a7:d4:19:ed:e4:5b:
         51:a0:66:f6:10:bf:01:6e:e6:6c:90:bc:fe:76:a2:07:52:78:
         57:7d:9f:39:03:31:47:dc:c0:36:3e:bb:39:4d:d4:7d:e2:82:
         a1:0f:88:54:27:1b:a2:60:ac:3e:e3:1a:8f:40:fb:44:38:f5:
         7b:29:57:af:01:b2:af:4e:b3:3b:e2:17:43:74:42:6e:91:88:
         bc:c5:9f:fe:7e:00:a7:d8:ab:0f:dd:fe:12:fd:4e:b1:a1:6b:
         2c:bd:6d:cc:77:8f:78:89:24:0d:3b:8c:e4:04:e1:f2:f4:a9:
         ff:99:59:ac:70:f6:0a:b9:d0:ce:e0:58:8b:b9:aa:87:a7:04:
         bf:1c:49:7d:1e:7f:b5:a1:e4:c9:ba:6e:9d:62:d4:46:08:cd:
         7f:fa:40:5f:e3:1e:84:f4:57:fb:4f:e3:a7:86:2f:5a:b2:2a:
         d7:5d:5b:e6:2b:a1:77:ef:ef:4d:a7:ba:b1:e8:27:8f:10:81:
         1b:f0:26:53:f6:6e:fd:a2:c7:1b:2b:e0:76:61:5c:08:4b:e6:
         32:6a:80:29:69:63:72:11:f0:db:d3:05:5b:19:0b:33:34:ce:
         8c:eb:d1:33:c3:4a:cd:09:0a:51:8b:62:23:08:fc:74:d7:12:
         ea:9e:4f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:26:26 2024 by rpki-client on console-fra.rpki-client.org