Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/69b1537c-e993-385a-af26-4c5dbf12578e.roa
File:                     69b1537c-e993-385a-af26-4c5dbf12578e.roa (raw, json)
Hash identifier:          wUVBKBAVaRrNlIA0WUBeAeoHOClHUrVXuXITowrJMT8=
Subject key identifier:   49:53:45:84:B0:18:88:E1:C9:32:FA:A2:14:7E:47:A4:30:E8:1C:C0
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C76E72047F0258F08BAE00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/69b1537c-e993-385a-af26-4c5dbf12578e.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     33668
IP address blocks:        2601:402:8000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c7:6e:72:04:7f:02:58:f0:8b:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=b443c10a-425d-4b59-b4b0-9687e6ed9423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c6:25:41:fb:be:f5:66:c3:26:09:b4:53:83:
                    3e:46:aa:9e:fc:85:cd:2e:26:7f:58:d4:b4:b7:45:
                    eb:e5:de:69:50:1b:24:ff:e7:53:b5:00:39:b1:04:
                    45:63:a6:22:88:5e:1c:db:13:d5:02:b4:af:89:00:
                    80:4b:9d:5f:f1:9d:58:20:5b:68:05:a6:f3:3f:b9:
                    7d:98:90:93:51:69:da:7d:42:01:fc:ff:8f:5f:13:
                    45:78:b8:74:99:ec:78:46:43:69:fb:ea:bc:b3:7e:
                    2f:6d:9b:a8:0c:97:53:b5:56:9b:fb:57:f1:fc:7a:
                    8e:ea:b1:f8:e1:79:ee:38:6c:af:2f:42:11:f2:33:
                    7e:ce:ca:09:1e:17:99:02:a2:b8:bd:75:ba:2e:fb:
                    e8:b6:0d:43:b9:4b:e6:50:19:98:12:c2:ac:56:83:
                    b4:e7:08:30:e8:85:5f:24:ea:54:4b:9b:d6:88:cb:
                    1a:8c:59:aa:a0:4f:f7:dc:e0:e1:f7:ff:7f:c1:85:
                    9b:2e:e9:f4:a5:4a:5d:f5:25:d7:d0:a4:78:49:43:
                    18:5d:42:9d:a4:5b:e0:ef:f6:0e:19:bd:f8:3c:53:
                    b3:e0:41:6f:12:27:6c:0b:2a:70:4a:cd:96:e4:07:
                    8c:ed:31:99:fb:3c:79:78:d0:e5:16:77:94:36:1a:
                    c5:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:53:45:84:B0:18:88:E1:C9:32:FA:A2:14:7E:47:A4:30:E8:1C:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/69b1537c-e993-385a-af26-4c5dbf12578e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:402:8000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:aa:86:bc:ce:71:22:8e:ea:eb:09:e7:12:45:f8:84:3d:bc:
         a1:01:fa:43:6a:f2:dc:9c:05:95:f5:22:59:57:50:69:22:d2:
         84:a2:02:3e:91:74:b7:c7:a6:bc:92:e0:86:11:42:85:37:88:
         ed:ef:6a:f5:fc:f0:db:27:d5:a3:be:3b:8a:db:87:f0:43:27:
         25:4b:fa:5d:f9:eb:46:8b:9b:09:ab:ee:aa:12:51:af:05:1a:
         0d:ed:7a:ea:88:ad:0f:35:84:91:d7:69:eb:57:5b:94:db:a0:
         a2:7c:ee:7c:c3:c2:a7:54:91:0e:71:63:45:d9:99:01:96:4a:
         c5:ee:03:33:84:72:50:07:76:6d:08:1a:38:a4:a8:23:51:87:
         3e:b9:13:19:12:cf:58:a4:3f:71:bf:0a:c4:e8:cf:99:3b:a1:
         fe:ab:f9:67:58:16:d9:b4:e4:04:16:a2:25:23:9a:28:7a:9a:
         fd:d5:13:42:3e:cb:50:27:f6:2e:70:35:76:40:5e:02:0c:47:
         97:eb:5a:6f:2c:b3:d9:7f:a7:98:44:6d:99:b4:d9:ba:a4:97:
         7e:59:f8:b4:a2:2d:04:80:4b:a3:57:ae:3e:c2:a9:b2:70:f6:
         bc:c7:89:d3:24:48:87:d7:0d:0f:23:21:2b:c9:37:bf:91:f6:
         91:29:96:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 05:05:24 2024 by rpki-client on console-ams.rpki-client.org