Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d5c408f2-c34c-320d-8fa0-0eee682499de.roa
File:                     d5c408f2-c34c-320d-8fa0-0eee682499de.roa (raw, json)
Hash identifier:          IiKurmcp7eh/OPwryXQqJaYEjE04qaLs/4ChdJYAXTE=
Subject key identifier:   1A:6B:00:39:E6:08:A5:C6:68:AF:32:AC:5D:7B:45:49:C1:98:06:CE
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9D01945007215D5B6BDD80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d5c408f2-c34c-320d-8fa0-0eee682499de.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33651
IP address blocks:        2603:2646:8000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9d:01:94:50:07:21:5d:5b:6b:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=c3588b28-d294-4351-8872-064a45c9b7ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f0:7c:cc:5a:83:8a:f6:f1:6f:25:f3:a0:61:
                    f2:08:75:94:ec:35:ba:1c:8c:12:34:61:9f:11:17:
                    29:55:60:6f:7c:f2:c6:37:81:4b:84:c2:93:28:91:
                    5a:83:ea:0b:47:4b:f5:1f:1d:fb:26:77:bd:56:e8:
                    82:36:17:9e:a2:a3:a3:81:91:d7:f5:62:44:03:b1:
                    3c:96:44:94:1f:34:35:ec:b5:d2:ae:52:15:9a:d4:
                    b2:7a:6c:bc:47:12:8a:c4:a3:3c:68:e0:7f:79:9d:
                    17:41:49:10:e3:50:d5:92:20:eb:8a:b3:29:fd:33:
                    65:05:56:41:63:bf:cb:c0:d7:ac:84:ee:30:4c:a8:
                    b7:41:8f:4e:79:95:35:58:ec:2d:de:34:d5:a3:29:
                    5d:be:dd:a5:0e:9c:34:4d:52:c1:05:7a:eb:e7:64:
                    c3:93:70:a9:7b:1e:9f:4b:1a:ad:60:6d:9b:17:65:
                    6c:27:92:7b:c0:2f:2a:f3:39:ba:75:c7:41:3c:ba:
                    55:07:66:3e:a3:53:26:30:ee:fb:1a:ab:ea:89:c5:
                    bb:55:bb:72:06:65:a6:c2:23:0b:eb:24:6c:59:c1:
                    1e:40:b4:5a:af:33:e7:2c:37:79:f5:00:f9:18:36:
                    13:df:e5:18:c7:6a:d3:21:1c:61:93:1f:7d:7f:09:
                    0f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:6B:00:39:E6:08:A5:C6:68:AF:32:AC:5D:7B:45:49:C1:98:06:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d5c408f2-c34c-320d-8fa0-0eee682499de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:2646:8000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:52:5e:7b:e5:57:fb:87:79:2c:ef:8c:3a:4c:0b:0e:2d:fa:
         22:e3:10:35:fe:f1:e1:14:27:2d:4c:f7:51:a6:9b:61:ea:6a:
         32:91:02:4d:40:d1:ed:c4:1e:1e:4b:e1:ba:e2:c5:3e:fa:86:
         63:5c:c6:82:db:ae:f2:25:99:d9:6f:0b:b6:a5:f6:b1:8b:26:
         2e:1a:78:4f:01:93:86:1e:df:07:0d:b5:98:6d:b7:e4:78:b2:
         e0:45:f3:c7:03:43:2d:33:e3:ce:72:b1:98:fc:42:68:a3:6a:
         4c:47:a8:c2:55:3e:0d:f6:28:c7:a2:3f:38:55:7b:18:01:6a:
         d9:9b:1c:98:64:bc:78:10:bc:3d:25:5a:77:f8:42:48:cc:4b:
         b8:4e:49:06:f9:78:1e:19:ea:66:83:e0:53:b2:16:30:dc:02:
         75:93:9d:69:db:83:79:1c:34:90:80:21:ab:a4:e2:93:08:29:
         ac:83:b8:c4:7f:ae:05:0d:9d:2d:81:29:e9:45:58:00:9f:a1:
         f9:7a:ed:d5:07:5a:b7:12:91:f4:3a:cf:2f:83:2d:dc:98:6c:
         33:e5:93:b2:42:e6:02:6a:f3:1c:01:f0:c8:c0:05:c8:5f:b6:
         cf:ac:d5:d2:a8:d8:1d:e5:49:87:26:86:51:0a:27:52:4b:60:
         fe:cd:3d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:35:42 2024 by rpki-client on console-fra.rpki-client.org