Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/99e1c5da-052d-3f74-b29f-1fe52d8e988b.roa
File:                     99e1c5da-052d-3f74-b29f-1fe52d8e988b.roa (raw, json)
Hash identifier:          Q5biRYZJH3z/krbTQIS1ajTbm1pW97U4gRyFcH1Ku+Y=
Subject key identifier:   FD:0C:12:D4:92:72:0C:84:6B:90:24:CE:B8:72:B1:17:E8:B8:35:D2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584731FB3169EF0E1ADAA281EA80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/99e1c5da-052d-3f74-b29f-1fe52d8e988b.roa
Signing time:             Fri 13 Sep 2024 01:00:32 +0000
ROA not before:           Fri 13 Sep 2024 01:00:32 +0000
ROA not after:            Thu 12 Dec 2024 02:00:32 +0000
asID:                     7016
IP address blocks:        2601:541:c000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:31:fb:31:69:ef:0e:1a:da:a2:81:ea:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 13 01:00:32 2024 GMT
            Not After : Dec 12 02:00:32 2024 GMT
        Subject: CN=c88cf21d-83c1-44cb-9ef2-70a94208c2c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:b8:39:2f:11:6d:9a:62:79:a4:7c:0f:51:fd:
                    af:fd:4f:44:8d:5b:07:0c:a0:ba:32:c4:22:c2:78:
                    3a:6f:10:81:81:b8:57:69:ec:9e:55:03:93:30:63:
                    c7:02:76:8b:11:3c:99:4d:12:fd:08:e4:a0:ab:46:
                    71:7e:02:93:b8:75:2f:bf:32:b2:74:aa:08:29:82:
                    ad:c5:48:55:43:90:6c:a2:6a:09:50:73:63:76:a7:
                    cd:08:15:6b:6e:08:af:0d:d6:27:9a:cd:df:59:d6:
                    25:a5:ed:e2:7c:c9:fa:16:00:a6:52:42:3e:06:59:
                    15:91:1c:be:91:70:fb:63:25:c5:39:cd:ad:70:6b:
                    4d:60:3c:17:da:68:97:ba:20:fc:64:6f:a6:c0:6c:
                    11:b5:30:b6:52:60:6b:c9:f7:2a:eb:78:02:b6:ba:
                    b8:91:cf:c1:e1:79:dc:bc:5c:cd:4d:e3:ca:80:9e:
                    83:1e:b5:90:84:4d:dc:44:ec:22:82:97:5f:75:27:
                    b4:3e:87:8c:a5:48:bd:3d:50:05:76:12:0a:74:a3:
                    ba:84:fa:4b:19:37:0a:a6:ae:00:06:74:c1:aa:cd:
                    fe:ab:b0:ec:a7:8b:7b:af:ca:95:89:08:fd:40:a3:
                    11:c7:f7:07:a4:db:94:30:93:e6:72:5d:27:8c:28:
                    bd:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:0C:12:D4:92:72:0C:84:6B:90:24:CE:B8:72:B1:17:E8:B8:35:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/99e1c5da-052d-3f74-b29f-1fe52d8e988b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:541:c000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:7d:9c:e2:6c:d7:ab:e8:65:33:80:2c:44:04:2b:6c:7c:2f:
         59:01:d4:f3:65:32:e3:1a:92:d1:7b:58:1b:e4:9e:73:97:cf:
         01:85:63:d1:be:bb:a1:03:69:46:aa:d4:99:c7:32:d6:93:91:
         68:39:70:e1:15:10:3d:21:a8:2e:d3:c2:37:06:aa:55:2c:ec:
         a7:4c:16:9e:2d:96:24:a0:b2:41:e9:fc:12:0c:23:91:16:58:
         df:fb:7c:ec:78:9f:6c:2a:e5:71:fb:64:05:3e:08:1c:72:33:
         15:ba:ea:fd:54:6a:00:7a:0f:6d:5b:4f:be:83:6a:5b:39:1d:
         e6:03:fd:76:bb:c6:25:88:aa:38:a0:f4:9c:9b:54:39:98:58:
         10:95:a1:57:ee:0c:8b:87:9b:89:a6:37:a2:ae:d9:46:e3:5d:
         fe:85:ae:5c:e6:d3:2d:06:09:57:09:07:d3:dc:99:25:9e:f3:
         20:ac:bf:3c:ca:a6:15:9f:24:93:a0:04:31:4e:0e:70:78:13:
         c5:dc:da:ca:1b:89:3b:9a:af:3b:9d:ed:4b:3e:a6:86:33:47:
         f0:ae:88:27:9d:94:fd:09:93:c3:d9:03:56:bc:c8:de:0b:17:
         54:19:64:85:d4:00:43:57:67:2b:6a:80:44:34:0c:57:92:5e:
         a8:3f:b0:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:41:35 2024 by rpki-client on console-fra.rpki-client.org