Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/2b015a4d-c526-3743-b151-49b3a927738c.roa
File:                     2b015a4d-c526-3743-b151-49b3a927738c.roa (raw, json)
Hash identifier:          CY/zJ+E0uKZWxTYqQFKcoVYLupbzKktAwiWfo90ol+E=
Subject key identifier:   09:79:38:31:C9:4D:94:3E:47:85:5B:9B:97:07:15:FE:69:A9:3A:00
Certificate issuer:       /CN=63817736-7e5e-4740-8ee1-ac6f2317f08d
Certificate serial:       010D0C9F432858478E1BCE1F1153369DB81E7900
Authority key identifier: B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/2b015a4d-c526-3743-b151-49b3a927738c.roa
Signing time:             Wed 16 Oct 2024 01:00:31 +0000
ROA not before:           Wed 16 Oct 2024 01:00:31 +0000
ROA not after:            Tue 14 Jan 2025 02:00:31 +0000
asID:                     46407
IP address blocks:        2001:19f0:a06::/48 maxlen: 48
                          2001:19f0:a07::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8e:1b:ce:1f:11:53:36:9d:b8:1e:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63817736-7e5e-4740-8ee1-ac6f2317f08d
        Validity
            Not Before: Oct 16 01:00:31 2024 GMT
            Not After : Jan 14 02:00:31 2025 GMT
        Subject: CN=d16de1bf-d931-4c2f-b465-1e1cfd09304a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:51:5c:b4:e0:a6:43:d5:a8:8e:d0:a1:97:ee:
                    2b:ad:8d:81:1c:53:fe:b2:14:fe:3b:1a:6b:ce:4f:
                    9d:9c:35:80:46:ac:5b:ff:35:a2:f6:7c:35:a3:19:
                    72:39:e9:67:43:05:9a:e5:75:55:b7:bf:ec:22:44:
                    bf:08:d5:01:63:4f:ee:c2:7a:93:cc:9d:12:19:63:
                    05:e4:aa:34:24:e7:1c:05:13:62:cb:e2:c1:43:1e:
                    b1:ac:1a:de:7f:f4:7a:b2:57:2e:75:ea:02:25:61:
                    cc:5b:a1:0a:4a:89:b1:df:36:03:f8:cc:a9:aa:01:
                    74:26:93:6d:26:d0:01:cd:41:b1:ff:dc:90:40:37:
                    16:ef:22:21:bb:04:dd:8f:f0:aa:28:0e:da:4e:b6:
                    bd:02:99:54:e9:7f:cc:d2:9a:82:d2:04:1d:bf:e1:
                    22:5e:c1:d5:0a:ae:cf:66:98:60:52:a7:8d:cc:0c:
                    40:6b:95:ce:6e:23:cb:e4:a5:45:7b:03:81:e8:2b:
                    4c:63:07:9e:e5:a5:ea:91:0f:8c:fd:e5:bc:89:aa:
                    6f:3b:d2:8c:18:58:42:96:66:c7:31:41:d2:04:74:
                    77:b7:15:fa:1b:90:18:62:98:35:8e:1b:6b:53:5f:
                    1d:62:57:13:64:41:91:10:d3:cf:ea:1d:ef:77:a2:
                    81:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:79:38:31:C9:4D:94:3E:47:85:5B:9B:97:07:15:FE:69:A9:3A:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/2b015a4d-c526-3743-b151-49b3a927738c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.crl

            X509v3 Authority Key Identifier:
                keyid:B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:19f0:a06::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:19:1d:74:18:94:ac:a1:54:35:0b:97:e5:c4:92:22:e5:93:
         ae:f2:0d:ee:19:6e:de:7a:7e:11:f8:74:b1:be:e3:3c:c3:94:
         ca:33:bd:dc:2e:13:a4:5b:32:a9:3e:c1:d9:de:e2:fd:26:69:
         ff:16:97:97:7e:5a:3b:e0:34:a4:70:a5:85:a9:b2:cb:f4:2d:
         e4:10:cc:71:ba:53:27:3f:07:bd:92:c1:32:64:56:23:00:2e:
         44:f3:83:80:94:01:8f:30:83:f3:32:31:a8:d1:20:ff:52:e3:
         16:68:30:1a:16:35:60:dd:5e:ea:d5:4e:be:7e:7c:62:2f:4f:
         d8:5c:0e:f8:60:fb:e8:7f:d4:e1:cc:a7:91:61:f2:b4:46:56:
         65:15:f7:f1:ab:f9:eb:34:77:d9:f8:da:52:d3:06:d6:4e:7f:
         81:fb:b5:e3:e3:45:3e:e0:fb:14:56:b3:90:ab:1d:74:b0:40:
         44:d6:40:d4:ac:e4:ee:fc:8f:71:03:7a:70:a7:f8:d1:f9:d9:
         ec:aa:05:90:63:98:f3:ba:f5:0f:69:de:9b:08:eb:0a:fa:ce:
         7c:01:a9:87:27:91:9f:d0:f1:43:01:42:93:87:ca:29:b8:1e:
         86:59:ea:72:45:85:ab:fd:92:6c:17:e2:ae:fa:61:e1:f4:e0:
         af:a1:d5:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:59:52 2024 by rpki-client on console-ams.rpki-client.org