Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f2561219-445b-3b8b-af16-c541c59d55db.roa
File:                     f2561219-445b-3b8b-af16-c541c59d55db.roa (raw, json)
Hash identifier:          3hdU3Ggj+HgwcYmJSqXmmKDvsAJmjYIjR3Z0MwQLgAM=
Subject key identifier:   91:96:FE:79:25:00:8B:A4:06:06:FC:20:3C:99:3D:AA:12:2E:B2:63
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9BAB074D206933192DD0C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f2561219-445b-3b8b-af16-c541c59d55db.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33491
IP address blocks:        2603:2806:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9b:ab:07:4d:20:69:33:19:2d:d0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=4759af02-7b5a-4e85-a7aa-15e5c08eb63d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:87:05:ab:d7:e4:1a:e3:c8:33:2b:c0:d2:d9:
                    e4:da:61:2a:b0:1c:6c:8a:68:03:f5:85:87:b3:1b:
                    66:ec:10:2e:29:17:3d:ec:fe:f2:0e:f0:4d:37:8a:
                    89:b6:32:43:e0:b9:f9:e2:fd:5b:35:43:62:0a:e1:
                    ed:7d:2c:fc:b3:36:c5:1a:79:c0:a3:ae:b7:72:41:
                    44:ed:d3:57:c7:2e:9a:97:93:16:da:2b:0b:79:87:
                    e2:10:fa:64:9d:e0:70:3f:8c:69:53:dd:21:3d:24:
                    41:5a:2a:90:3c:fc:e6:bc:43:48:92:51:35:28:ef:
                    81:48:fe:2f:81:1a:74:ec:5a:36:c7:5b:ff:db:33:
                    c6:89:c8:62:d4:d5:84:9b:c4:93:69:0a:26:fb:0e:
                    d7:1d:6c:9f:2d:fa:2a:27:c6:aa:3e:0d:49:18:2c:
                    c5:c2:aa:ef:a8:0e:9d:95:cc:bc:81:ae:64:a6:30:
                    5a:70:b4:2f:75:11:30:e8:c7:c3:22:ec:c5:1c:6d:
                    af:79:91:f8:40:aa:a3:f9:b8:5b:0b:09:97:6e:02:
                    1f:95:43:59:ac:fd:4a:45:90:60:15:78:46:9f:23:
                    a1:f9:07:4f:c4:ff:79:0b:67:39:4d:c8:77:10:90:
                    e2:1a:00:1c:2e:34:6f:87:66:b1:53:6d:12:2e:16:
                    9e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:96:FE:79:25:00:8B:A4:06:06:FC:20:3C:99:3D:AA:12:2E:B2:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f2561219-445b-3b8b-af16-c541c59d55db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:2806:4000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:2e:2a:96:7d:07:6c:70:1d:21:37:f2:d2:0d:80:b2:65:32:
         35:71:b8:48:93:24:64:26:7d:dc:b5:77:a0:98:af:4d:1d:62:
         f9:e2:12:48:7e:40:49:53:00:d6:5e:1a:67:cc:c5:df:e8:b9:
         11:1b:c2:1d:30:4d:0c:99:11:bd:96:9a:ee:b9:91:07:01:3b:
         8a:8c:62:d4:f0:ec:14:95:5f:1b:72:6f:11:05:5e:d0:e9:b5:
         e5:9d:fb:8b:40:55:1d:fd:ae:e6:f0:64:b1:84:75:49:8e:20:
         b3:50:31:4a:80:31:18:ea:1a:bd:58:be:28:bc:cc:e2:4f:13:
         db:5e:87:38:65:e3:75:6e:0b:1d:0f:35:46:0d:29:84:94:18:
         df:4e:7b:c8:a5:55:f7:ac:01:67:83:1a:76:9e:ef:33:83:a9:
         f9:9d:42:f8:f1:20:f7:ad:14:0c:04:19:b8:ca:fd:b9:52:14:
         50:27:ea:82:12:29:eb:69:c0:60:bf:bd:45:1a:04:88:ed:3d:
         12:5d:5d:e9:c0:cd:48:db:53:47:82:bd:e4:ef:b0:5c:7c:79:
         ed:3b:56:eb:12:6c:44:85:79:b1:a5:3e:50:ce:7a:06:0c:96:
         6d:a8:c9:f7:7b:6f:e5:9c:a0:7f:17:7b:19:df:e2:6e:9c:d2:
         6f:b6:e5:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 15:37:54 2024 by rpki-client on console-fra.rpki-client.org