Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/ce315f21-7bdf-316e-b88e-2c740cdf6096.roa
File:                     ce315f21-7bdf-316e-b88e-2c740cdf6096.roa (raw, json)
Hash identifier:          xwaJJA6tH0LUI9/zO4Rv6CbLhW558cA994lH11jtnQ4=
Subject key identifier:   04:1C:E9:A4:E7:7F:2D:5E:13:A5:1F:2A:5A:CD:5E:7C:8C:40:08:4A
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F43285847C1DF53DEEBA0C035C93C7E60
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/ce315f21-7bdf-316e-b88e-2c740cdf6096.roa
Signing time:             Sun 03 Nov 2024 14:00:49 +0000
ROA not before:           Sun 03 Nov 2024 14:00:49 +0000
ROA not after:            Sat 01 Feb 2025 14:00:49 +0000
asID:                     104
IP address blocks:        2001:468:501::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c1:df:53:de:eb:a0:c0:35:c9:3c:7e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Nov  3 14:00:49 2024 GMT
            Not After : Feb  1 14:00:49 2025 GMT
        Subject: CN=4f9564bf-e890-4f61-9778-829598fd08f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:86:32:c3:c2:81:fa:55:25:f3:46:01:a1:f9:
                    ed:b0:5c:d7:13:a2:41:37:ca:c7:9c:a6:5c:93:01:
                    b0:9c:19:5c:e6:29:b0:18:23:94:97:49:12:37:4a:
                    55:27:58:33:84:06:1c:d4:a1:ee:ba:89:34:0f:52:
                    2d:c4:1f:c4:2c:3a:89:7a:e7:53:77:47:88:55:0f:
                    86:19:f4:0b:66:e7:cf:24:7e:39:1f:b1:82:38:df:
                    23:c1:97:44:60:4a:0a:13:11:28:63:7c:c3:f8:11:
                    66:aa:bc:52:45:35:ed:46:d8:1f:db:ea:2d:5d:06:
                    05:18:03:f0:b2:2a:2e:df:be:bb:c2:c7:21:8f:ac:
                    8b:99:a0:88:f2:e1:c4:a5:67:71:01:7c:99:7d:da:
                    d8:7e:ac:9f:76:f1:aa:0a:7b:5a:55:43:56:55:19:
                    b2:8f:9d:11:e1:0e:5f:f1:3b:d9:2e:82:b4:ce:ad:
                    fd:bb:9a:4f:06:e3:a3:c9:24:09:69:46:8d:2f:8c:
                    14:27:b5:27:da:98:4d:d9:c9:6a:78:55:11:5d:5c:
                    9d:d6:53:2f:f2:ac:14:f8:64:0f:22:70:ef:cf:67:
                    b9:57:a0:13:f5:da:dc:3e:30:2b:0f:29:11:2f:28:
                    a2:55:37:cb:4e:94:f0:e9:ef:77:ab:a8:a8:3d:9e:
                    67:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:1C:E9:A4:E7:7F:2D:5E:13:A5:1F:2A:5A:CD:5E:7C:8C:40:08:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/ce315f21-7bdf-316e-b88e-2c740cdf6096.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:468:501::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:b5:de:f1:87:39:f1:eb:b5:77:9e:2b:1e:30:cd:82:e7:88:
         bf:4f:8f:6a:33:52:db:ac:3a:9d:4c:b9:c5:7f:28:9b:bc:c2:
         cf:97:7d:00:64:67:70:ca:7e:2a:39:67:67:34:78:bd:70:65:
         a0:ad:86:bd:66:6a:69:a7:24:6f:5e:77:14:1e:45:6e:39:90:
         58:5c:f4:67:f8:87:a6:e8:66:03:e0:ab:ad:1f:8b:07:22:2d:
         52:6d:ee:34:0c:f3:bc:ef:40:a8:17:b7:b8:d7:8a:e9:31:bf:
         1b:ed:00:9d:c8:a7:75:e5:e3:05:88:aa:93:09:df:da:df:0c:
         41:2f:0c:cd:d3:c4:17:9c:95:90:1e:40:7a:6a:2f:38:97:ba:
         b2:1f:45:a8:bd:16:28:c0:d9:8b:75:14:51:67:63:b5:ca:e3:
         09:c0:d7:1d:9a:12:40:63:0c:d5:61:bb:90:3c:9e:14:e2:d3:
         cb:c0:b2:05:64:06:7d:3e:bd:c5:1a:33:40:6c:d3:3f:20:c6:
         33:9e:80:36:ee:33:ab:43:75:7c:a0:b0:70:4e:99:cc:da:05:
         90:5f:0e:30:1a:f9:f6:a2:59:bf:56:da:03:a3:30:49:4c:54:
         65:9d:55:d8:11:73:e6:45:7d:67:ec:48:31:f2:a6:ef:0e:70:
         d3:52:24:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:28:46 2024 by rpki-client on console-fra.rpki-client.org