Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/995dbffa-30d9-3550-93a4-bf6155f3d8df.roa
File:                     995dbffa-30d9-3550-93a4-bf6155f3d8df.roa (raw, json)
Hash identifier:          4mMuC18/vBCmr5RNVO1NkVgWyEFfMNheg9r0iOueYf0=
Subject key identifier:   21:E0:A1:82:44:B6:37:6F:D6:E2:05:AB:08:19:C3:07:3D:20:1E:E1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848116FCE7E2A35A728FBC257C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/995dbffa-30d9-3550-93a4-bf6155f3d8df.roa
Signing time:             Mon 02 Dec 2024 02:00:40 +0000
ROA not before:           Mon 02 Dec 2024 02:00:40 +0000
ROA not after:            Sun 02 Mar 2025 02:00:40 +0000
asID:                     22258
IP address blocks:        2603:3014:c00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:11:6f:ce:7e:2a:35:a7:28:fb:c2:57:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  2 02:00:40 2024 GMT
            Not After : Mar  2 02:00:40 2025 GMT
        Subject: CN=707f7a8e-e6f8-465e-bf52-d13f340d31b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:28:b8:fb:23:f6:00:b0:db:96:8a:c6:35:12:
                    50:eb:ad:47:9d:64:a1:74:3f:7b:c9:c3:88:8b:c2:
                    a0:d4:db:e9:0d:55:c1:a2:6b:7c:6b:82:49:b6:48:
                    86:48:26:2a:13:e2:65:d0:f1:34:e4:cf:e4:1d:d4:
                    22:54:2e:d2:f2:af:fa:82:14:98:b0:b0:c3:4a:7c:
                    75:30:c3:7c:07:6b:ec:ad:a7:5e:d0:3f:43:2e:61:
                    f1:8d:25:46:ab:fb:77:31:cf:c2:01:59:0b:f6:8b:
                    89:2f:18:97:7b:2c:88:5d:9e:4a:de:7c:9e:99:87:
                    2d:70:17:41:ec:71:13:57:35:b7:c4:e8:19:fa:21:
                    13:1f:3f:9e:8a:d1:02:41:dd:4c:14:3b:00:7e:14:
                    f8:47:34:c1:87:11:12:af:2c:20:50:c2:10:b5:bc:
                    e2:8f:14:56:18:36:d6:15:4b:19:98:82:8d:91:c0:
                    af:cf:17:db:75:4c:7f:f4:cc:39:3d:af:e0:15:32:
                    52:a6:f6:a3:64:10:4e:51:a4:3e:8a:cf:ee:da:48:
                    7e:50:f4:09:68:38:9d:dc:d2:59:6f:0d:cd:3d:19:
                    d5:6d:65:e7:73:60:e7:c7:19:6e:1c:93:73:32:1e:
                    89:e6:a6:7f:fd:e7:1c:01:b6:b4:63:81:72:d7:64:
                    e8:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:E0:A1:82:44:B6:37:6F:D6:E2:05:AB:08:19:C3:07:3D:20:1E:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/995dbffa-30d9-3550-93a4-bf6155f3d8df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:3014:c00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:68:54:a3:d6:9d:1e:9e:cf:e5:13:ce:c1:8c:35:f4:15:58:
         3b:bd:f8:d0:aa:92:d0:04:01:be:77:94:85:ad:f5:ca:a5:3c:
         f4:a4:fb:d2:a9:ff:15:a6:57:ee:7f:2f:66:c7:c5:88:22:27:
         77:52:9b:68:00:b6:96:48:a6:73:bc:0d:a7:32:07:19:ec:cb:
         2d:ce:d5:5d:f0:83:b8:b7:52:07:e5:47:68:5d:13:20:b3:67:
         1b:c8:c0:96:84:10:10:dd:c0:c5:ce:51:f8:6f:d8:54:0d:1e:
         2e:9f:11:76:83:2f:1c:72:e1:c8:75:01:fa:6a:bd:09:39:2e:
         3f:13:f5:a1:af:5b:82:09:5e:d9:ce:3e:68:d6:b0:5c:72:40:
         b5:a0:ba:dc:1f:5b:33:a4:ab:c1:16:4a:59:97:ac:41:40:e6:
         c3:15:6d:f4:71:bf:2d:04:4c:a9:aa:7d:37:e0:9f:7b:46:87:
         63:6b:8b:17:29:dd:68:51:d1:7d:52:2a:92:ef:c5:dd:e7:2e:
         ae:a3:b4:42:c1:2a:04:e1:3f:82:da:10:27:8b:5f:80:4e:6b:
         52:d3:fe:9f:1b:7e:51:8e:b2:f7:94:07:71:54:2e:9b:5d:07:
         57:2e:ae:16:22:46:9a:16:fa:7a:d3:7f:c0:d3:53:ff:c9:46:
         c6:b3:01:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 16:35:24 2024 by rpki-client on console-ams.rpki-client.org