Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dfdb680a-7f5e-3dda-82e6-5512e61a75cd.roa
File:                     dfdb680a-7f5e-3dda-82e6-5512e61a75cd.roa (raw, json)
Hash identifier:          xXrHlEecm6c4+VQ4XKLX/ZxraJrvvNKi40Oy36IAv9A=
Subject key identifier:   7A:96:D4:AC:24:30:DE:83:52:47:3C:9F:45:38:5A:17:05:B0:58:F7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848116FFE7F9791398D4C60FB00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dfdb680a-7f5e-3dda-82e6-5512e61a75cd.roa
Signing time:             Mon 02 Dec 2024 02:00:40 +0000
ROA not before:           Mon 02 Dec 2024 02:00:40 +0000
ROA not after:            Sun 02 Mar 2025 02:00:40 +0000
asID:                     22258
IP address blocks:        2601:3c5::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:11:6f:fe:7f:97:91:39:8d:4c:60:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  2 02:00:40 2024 GMT
            Not After : Mar  2 02:00:40 2025 GMT
        Subject: CN=5675ddae-a053-45a7-bc3c-22c73c00d203
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f6:eb:30:bc:87:93:e9:72:31:49:17:89:bf:
                    38:25:e8:97:97:e2:6d:86:63:44:62:66:03:39:e7:
                    1b:59:64:70:da:75:72:1c:24:bc:db:c5:71:3f:ac:
                    ba:ec:b0:d8:4f:12:29:4f:ad:aa:6c:9e:a8:2b:7f:
                    d1:50:00:69:7e:1d:0d:1b:fc:c6:79:4b:24:f1:50:
                    8e:d1:46:2a:6e:38:3b:c4:e7:a8:86:55:0a:9a:08:
                    38:c1:ce:29:4b:6f:bb:32:72:35:21:6a:80:70:e5:
                    a0:39:d7:50:bf:41:2e:81:a1:6e:ed:43:e4:fa:f2:
                    64:09:74:3e:82:48:3f:56:ae:54:90:70:09:6c:89:
                    9a:58:dc:17:34:7a:be:02:df:fa:ed:10:f8:df:a3:
                    6c:fa:65:b1:49:8b:90:6d:da:77:2f:b0:40:a0:51:
                    df:d4:d2:11:c5:79:bd:7c:b8:d1:01:59:5a:50:6f:
                    6d:67:25:ba:5a:5f:04:72:23:df:51:8f:42:96:7f:
                    ec:fd:f0:49:b6:57:b7:26:ad:e0:ff:0a:da:1a:74:
                    f8:04:07:a9:22:e0:0b:af:eb:6d:f5:ac:d8:8f:ed:
                    b5:c5:80:53:03:20:06:27:a3:44:42:68:17:99:10:
                    a5:b7:1d:a4:f2:fe:5c:db:5b:70:cf:df:da:0c:6a:
                    01:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:96:D4:AC:24:30:DE:83:52:47:3C:9F:45:38:5A:17:05:B0:58:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dfdb680a-7f5e-3dda-82e6-5512e61a75cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:3c5::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:cf:5d:18:8c:9f:6c:6e:5f:33:f9:bc:d1:78:28:73:a9:e5:
         76:b2:85:6a:16:c8:99:c0:f7:ab:61:cc:db:a9:7f:06:bb:f7:
         28:37:d0:82:7e:0e:d9:36:91:4a:c1:ac:dc:26:9e:b9:dd:11:
         9e:c3:bf:ee:c0:5f:ce:e9:78:59:41:79:49:2d:60:fc:cc:86:
         2b:12:fa:59:dc:d8:44:8a:a9:11:51:b7:0e:df:a2:7a:81:82:
         5a:a3:de:a4:ff:c1:09:44:1c:a8:43:d0:fc:4e:2a:4a:c4:88:
         f8:e5:ec:f9:9c:6d:93:de:04:7f:a6:44:dc:19:c1:6a:df:53:
         03:98:70:94:b8:55:fd:74:54:6d:6e:2c:d6:e7:bd:ab:6d:d2:
         86:6f:9d:78:fb:12:f5:76:f1:d6:1b:cf:92:a5:db:68:08:27:
         5e:a4:65:ad:e1:b3:a1:c7:b9:fa:be:9b:be:28:b4:82:9a:94:
         ab:2a:e4:ae:49:a7:c2:02:40:71:28:c1:0a:92:9f:12:9d:bc:
         c6:09:12:6b:51:09:02:88:2e:5b:85:2e:28:c4:21:e8:75:08:
         13:4c:ff:d8:dd:10:c3:c4:c9:7d:da:1a:0f:f4:20:25:ce:0a:
         02:ec:85:7b:47:43:e6:74:6d:59:97:b8:6b:8b:24:29:da:1e:
         0b:43:44:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 15:35:33 2024 by rpki-client on console-fra.rpki-client.org