Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c46e8334-d837-383a-bcb1-a9be6245b9cc.roa
File:                     c46e8334-d837-383a-bcb1-a9be6245b9cc.roa (raw, json)
Hash identifier:          NZ/dfNarKfiBnJkSulsn2mUPWGRSAHh8pCJ5lrNa96g=
Subject key identifier:   0F:D5:7C:66:1B:74:51:C4:C3:EA:72:83:ED:30:81:31:2F:64:4B:21
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9BACCC7E08BA96674A3260
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c46e8334-d837-383a-bcb1-a9be6245b9cc.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33491
IP address blocks:        2603:300a:2300::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9b:ac:cc:7e:08:ba:96:67:4a:32:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=1e1a888c-e955-4de8-aadb-1b62ed5a60c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:15:ed:5e:6a:fa:be:ef:6a:55:46:af:63:50:
                    94:8e:df:c7:25:30:30:0a:b8:36:ed:e5:bb:a4:8a:
                    eb:f6:bd:5b:7f:f8:cb:63:10:b0:ab:bf:19:8a:79:
                    1b:54:6f:c8:7f:b8:3d:40:03:97:65:71:c7:29:9b:
                    81:19:46:51:75:1f:21:ec:9d:23:74:8d:ee:31:f1:
                    5f:56:fa:50:e6:6f:e0:b9:4e:84:82:58:97:eb:94:
                    a1:c9:81:04:0a:1b:00:56:86:f6:0d:19:c1:4b:eb:
                    d8:33:7b:53:80:97:e7:de:fd:d3:36:c7:95:93:a0:
                    8d:51:3d:b6:d7:ec:a2:f5:c4:48:0b:21:f7:28:7f:
                    62:da:46:57:41:85:c5:8f:6e:f7:38:3c:41:84:4b:
                    2b:83:af:a8:e7:c5:15:28:76:39:84:4e:d8:5c:1c:
                    02:6d:5a:99:27:2a:9e:85:d2:26:19:30:2c:75:0e:
                    44:80:88:22:ac:16:11:5a:f5:13:bd:64:cd:ab:1b:
                    db:cc:38:d2:64:2a:4a:1c:8f:f7:61:1a:34:32:be:
                    95:8e:80:40:30:07:a1:7e:3d:ef:d6:49:0d:66:4d:
                    e5:45:30:bd:62:64:7a:c7:6f:d1:36:41:55:29:0c:
                    99:db:22:85:12:d8:bb:6e:79:84:60:89:f0:8f:25:
                    51:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:D5:7C:66:1B:74:51:C4:C3:EA:72:83:ED:30:81:31:2F:64:4B:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c46e8334-d837-383a-bcb1-a9be6245b9cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:300a:2300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:c8:dd:85:d4:7b:97:22:18:7c:aa:6e:04:63:70:59:9e:f3:
         1a:80:e4:17:04:26:7f:6b:c0:ef:7c:1f:4a:6c:e1:ee:d7:63:
         4a:bf:a6:4f:55:e3:d5:a0:69:fa:ae:f5:d8:bd:d4:fa:8c:b8:
         28:26:a0:73:6f:bb:1b:5e:bd:26:ae:07:6e:aa:ef:6c:46:59:
         db:7e:ee:c1:3e:df:30:eb:1c:ce:08:2f:02:ee:1a:3a:c7:c1:
         97:49:b4:90:df:16:b0:85:08:72:ed:34:8a:16:0d:cd:26:89:
         07:4b:39:ae:88:df:ba:95:5a:7b:4f:c5:43:d4:4d:d4:43:26:
         98:b7:cf:25:19:58:60:ee:c3:38:85:86:a7:f0:80:b4:a5:23:
         1e:8c:b6:48:26:60:8c:fb:2b:84:0d:94:6a:c3:a0:b3:c0:a5:
         54:ef:d1:5f:8d:6e:77:d4:b1:d6:b3:61:56:93:ac:12:d1:0e:
         61:81:2f:58:96:46:4c:5f:b8:2f:fc:de:68:06:62:3d:6c:39:
         bd:ea:a2:91:bb:6a:2c:27:44:82:63:91:59:ac:40:ac:9d:9f:
         36:90:fa:01:42:85:89:97:fc:66:ce:52:6a:be:8b:b4:fc:2e:
         6b:99:a1:a5:88:0b:21:05:0d:2c:bc:4b:27:64:06:60:6f:13:
         70:13:1a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 15:30:56 2024 by rpki-client on console-fra.rpki-client.org