Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b4e041ad-84f1-37e3-bcc1-004da2110497.roa
File:                     b4e041ad-84f1-37e3-bcc1-004da2110497.roa (raw, json)
Hash identifier:          Psru0ysF4j39mHPvcehfFqwBKkRnr8kL0LXTe7v7qSg=
Subject key identifier:   AB:F9:F4:A0:96:33:26:36:DD:BD:12:31:F7:2D:64:4F:2A:88:DE:C0
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847CFD4C5FEC0D5618FBBE09980
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b4e041ad-84f1-37e3-bcc1-004da2110497.roa
Signing time:             Fri 08 Nov 2024 14:00:39 +0000
ROA not before:           Fri 08 Nov 2024 14:00:39 +0000
ROA not after:            Thu 06 Feb 2025 14:00:39 +0000
asID:                     33654
IP address blocks:        2603:2000::/26 maxlen: 26

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 02 Jan 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cf:d4:c5:fe:c0:d5:61:8f:bb:e0:99:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  8 14:00:39 2024 GMT
            Not After : Feb  6 14:00:39 2025 GMT
        Subject: CN=0b11ae09-5e19-4418-9a69-bc615d876991
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:db:ef:8c:8d:00:58:7e:75:02:81:29:ab:b7:
                    67:57:a3:5d:20:3b:4b:53:1c:93:5a:54:0d:80:6a:
                    93:40:57:a2:9d:09:7b:c2:56:b3:3c:d4:90:de:6d:
                    68:a7:d3:c5:68:3d:40:f6:a0:82:7c:63:b8:51:66:
                    25:79:ac:0b:a1:49:1c:5c:01:b1:f1:7b:f7:b3:8f:
                    42:a6:aa:20:60:ec:4e:4e:bf:f0:19:2b:ae:fa:4b:
                    c8:31:43:18:d0:e3:6d:ae:97:1d:ac:fb:3b:2c:0d:
                    5f:40:ff:6a:ff:b6:e9:e4:59:95:64:5b:a5:4a:1e:
                    17:fd:cc:47:2b:56:f2:41:cd:19:9f:a9:03:ad:e2:
                    e9:35:33:7c:d6:7f:2b:ba:d8:a4:ec:cf:54:de:73:
                    bb:38:01:a3:da:a9:83:a7:e8:d1:d4:91:a2:8a:c0:
                    9e:84:7c:62:80:7e:1b:53:f1:36:b9:11:bb:dc:21:
                    13:3d:9b:4b:6a:20:45:81:3d:3b:32:fe:7b:0d:3f:
                    78:8f:49:a7:28:cb:1d:ef:b0:6e:fd:ac:c1:b4:23:
                    eb:08:14:98:f9:4d:c7:b3:a8:ac:70:99:1b:80:04:
                    5c:6c:7c:21:b1:ad:ca:0c:24:da:37:79:97:0c:c4:
                    9e:15:12:f3:5e:0e:c7:f0:40:da:3b:a5:c9:9c:bd:
                    d0:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:F9:F4:A0:96:33:26:36:DD:BD:12:31:F7:2D:64:4F:2A:88:DE:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b4e041ad-84f1-37e3-bcc1-004da2110497.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:2000::/26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:6a:50:8f:db:67:72:bb:12:e4:4e:a4:28:da:17:7b:1a:72:
         44:18:47:59:cb:6e:90:ef:4c:df:8d:4e:8b:c0:3d:68:05:95:
         09:ac:ff:9d:ee:bb:15:e0:c4:ff:1b:a3:1e:af:1c:c0:75:a5:
         7d:c9:49:8e:18:a6:ef:e7:45:1d:2b:3a:29:dd:89:2d:6c:5a:
         c6:d2:02:92:75:a5:43:42:51:5d:27:17:22:12:99:48:99:76:
         ef:d6:30:94:4f:fd:5f:0a:26:c8:79:23:89:fb:95:42:70:8e:
         04:a1:9c:18:c7:4a:c1:df:b3:ca:fc:96:7b:39:15:0d:f6:d7:
         a6:3f:94:2b:2a:db:1c:f9:0f:7d:07:da:25:99:ae:63:08:18:
         21:c8:40:37:41:9c:ed:c4:f5:a7:71:88:92:0b:c1:47:06:c6:
         cc:51:77:f5:b0:0f:a3:7a:0a:b4:3d:9b:97:d0:ea:e6:06:54:
         01:9b:e3:43:41:bb:c3:c0:1c:76:58:c6:3d:1a:8c:5f:59:03:
         89:a1:30:83:4b:5c:5e:5e:fa:4e:6c:5d:a4:03:00:82:87:fb:
         cc:6e:93:b2:b9:61:06:c7:3d:48:90:2f:5c:95:13:1a:6e:74:
         3c:b8:80:bc:81:69:a3:59:12:ed:fb:0f:97:35:4a:74:07:2e:
         9b:ae:79:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 31 12:54:17 2024 by rpki-client on console-fra.rpki-client.org