Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e3693519-dc60-3f8d-932a-7020a1f3b096.roa
File:                     e3693519-dc60-3f8d-932a-7020a1f3b096.roa (raw, json)
Hash identifier:          EinluWIx8l877awxsUd5PPYUFEJONNBFwGGNAp8lHHg=
Subject key identifier:   B8:F4:F7:84:37:E2:47:FD:7A:8B:73:47:DD:8E:50:40:9F:FC:99:07
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584731FB3D4E5EB0DD9988CE6740
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e3693519-dc60-3f8d-932a-7020a1f3b096.roa
Signing time:             Fri 13 Sep 2024 01:00:32 +0000
ROA not before:           Fri 13 Sep 2024 01:00:32 +0000
ROA not after:            Thu 12 Dec 2024 02:00:32 +0000
asID:                     7016
IP address blocks:        2603:2549:8000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:31:fb:3d:4e:5e:b0:dd:99:88:ce:67:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 13 01:00:32 2024 GMT
            Not After : Dec 12 02:00:32 2024 GMT
        Subject: CN=a552a0bd-9e86-42c1-9daf-92230295befb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:74:8b:3b:71:87:47:ea:22:8d:22:64:c4:3c:
                    8a:4d:65:9d:67:a8:9e:19:1a:24:52:0a:b6:c1:23:
                    b8:68:6a:e8:a3:1c:5f:4f:49:53:cb:b3:af:bd:db:
                    a5:83:bc:61:c2:9d:e7:10:3c:6d:54:a7:00:c8:6c:
                    90:a4:16:0a:3a:6b:7a:fd:bc:4c:f6:a4:9f:b6:e2:
                    8d:d1:bc:9e:91:07:82:5a:3b:c5:cb:7a:12:48:8d:
                    1c:15:f9:56:6b:fe:0f:5d:30:14:77:d9:63:eb:fe:
                    2b:9f:98:c8:47:49:97:be:00:8e:51:26:91:92:d9:
                    74:cd:30:22:e6:67:81:76:83:46:14:65:f5:ce:d2:
                    62:2e:15:af:c4:e0:c0:d8:df:82:dc:80:c8:74:1e:
                    6d:64:6d:b2:61:03:08:7b:d1:30:dc:02:17:3a:a0:
                    88:32:0e:76:a8:9b:a9:f9:53:19:1a:d9:6b:9c:f9:
                    20:63:25:21:b7:e5:43:e7:23:18:6a:c9:fe:f1:72:
                    74:72:60:c7:83:22:0e:6a:53:24:2f:e3:02:75:7b:
                    56:a2:6d:40:2c:d9:0f:63:24:4f:f4:51:b9:cb:7a:
                    b3:4c:98:85:61:db:ef:8d:ba:0d:68:d5:65:a5:33:
                    50:93:e8:8d:0d:bf:20:94:5f:a6:da:19:0e:16:5a:
                    1c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:F4:F7:84:37:E2:47:FD:7A:8B:73:47:DD:8E:50:40:9F:FC:99:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e3693519-dc60-3f8d-932a-7020a1f3b096.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:2549:8000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:87:37:02:03:4c:92:9c:19:7d:b7:a1:44:4d:26:88:f1:23:
         c3:47:cb:09:98:7d:9c:b6:60:a5:81:bc:81:7b:a5:14:2a:25:
         9e:d9:e9:c3:21:2c:70:d4:83:1a:e4:e3:64:b4:0a:7a:5b:30:
         b4:9d:df:2d:54:c4:f9:9f:db:41:15:af:f0:d6:f0:f6:18:d9:
         65:fe:76:dc:d2:99:32:80:63:dd:8b:81:a8:52:64:c7:fe:f3:
         e9:1f:93:cc:93:8f:8c:fa:aa:00:14:1e:43:8c:74:5a:e3:3c:
         37:f5:55:bd:0d:0b:f2:a8:e4:b0:01:94:fd:ad:a3:81:6c:d4:
         3f:ae:9f:6c:c1:cf:a9:fa:23:bc:4b:6b:ee:f3:c8:09:cb:a3:
         a0:89:4a:e8:21:3b:71:02:c7:30:02:f9:b0:46:45:c1:e2:fd:
         1e:65:eb:44:8e:23:61:12:ec:6b:e7:22:5f:5c:1d:05:04:47:
         9f:1f:83:c3:7b:16:a4:d7:0c:3a:dc:52:c2:24:98:4d:53:3d:
         a7:d2:5f:ee:51:04:a4:aa:f3:55:40:ea:0f:8a:39:ff:d5:ee:
         66:19:77:da:cb:fe:23:a6:a8:dc:0f:70:c8:9b:87:83:4c:ee:
         85:57:79:9e:49:6c:34:4c:9e:1f:93:a1:fb:43:be:01:6c:44:
         b9:97:95:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:47:42 2024 by rpki-client on console-fra.rpki-client.org