Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/1ef053cc-bac0-3910-9233-dd7c632a17d3.roa
File:                     1ef053cc-bac0-3910-9233-dd7c632a17d3.roa (raw, json)
Hash identifier:          6gskMxf3Iqlw2umfg8t31mgchq8N6p23ConhXjc0J1o=
Subject key identifier:   81:60:10:B5:BD:80:15:C9:B9:48:1C:FD:74:DB:22:68:9F:67:F9:2A
Certificate issuer:       /CN=e191232b-cf07-4d3d-95e1-afcd1b928ab1
Certificate serial:       010D0C9F43285847213B12B390698F6E0FE05D80
Authority key identifier: EC:94:41:2C:05:92:7D:C7:FB:4B:08:41:DA:31:BE:F3:EA:B6:BD:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/1ef053cc-bac0-3910-9233-dd7c632a17d3.roa
Signing time:             Sat 07 Sep 2024 01:00:31 +0000
ROA not before:           Sat 07 Sep 2024 01:00:31 +0000
ROA not after:            Fri 06 Dec 2024 02:00:31 +0000
asID:                     29955
IP address blocks:        2001:49d0:1c0::/42 maxlen: 42

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/e191232b-cf07-4d3d-95e1-afcd1b928ab1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/e191232b-cf07-4d3d-95e1-afcd1b928ab1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:21:3b:12:b3:90:69:8f:6e:0f:e0:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e191232b-cf07-4d3d-95e1-afcd1b928ab1
        Validity
            Not Before: Sep  7 01:00:31 2024 GMT
            Not After : Dec  6 02:00:31 2024 GMT
        Subject: CN=3c5fd31f-1de7-4b4a-b520-cdba5d2d0576
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f6:ee:a5:5f:11:3c:7f:9a:08:1c:0a:a7:2b:
                    ff:9c:d3:72:81:47:08:9e:dd:ee:4c:75:57:a7:66:
                    fe:02:8a:36:6b:75:e1:1d:b2:25:3c:66:c7:40:99:
                    ed:ae:4e:f6:05:3c:59:59:e0:c3:df:d5:c4:ed:6d:
                    68:86:94:e7:c2:78:ed:e9:7f:9c:0a:c5:8c:c6:9b:
                    64:be:2d:b3:e1:cd:c5:e4:4e:0b:dc:a7:94:68:d3:
                    b8:c4:9a:e7:34:18:f5:dd:fd:8d:ed:bd:11:63:55:
                    52:91:21:c5:c0:9a:cf:e8:58:cf:9e:9f:76:70:d7:
                    0e:3e:93:b2:1f:cd:f0:85:78:81:1a:88:be:8e:eb:
                    97:e1:63:dd:44:57:fe:3b:f1:f9:70:fd:32:38:7c:
                    e7:6d:fa:b1:96:a1:78:b7:ab:8e:23:3f:48:b5:07:
                    7f:7d:b8:f2:e6:c5:40:79:a9:0b:86:d0:d8:80:0f:
                    7e:a3:7d:7b:ff:85:05:10:d2:16:c8:43:f8:86:47:
                    42:eb:bc:0c:ce:95:79:f8:e1:2b:1d:77:ed:80:d7:
                    05:01:d9:2d:3e:67:ad:f5:91:f9:ca:db:30:fd:55:
                    7d:f9:96:57:7d:63:1f:48:e7:c4:bd:de:db:14:a9:
                    2d:bc:15:4a:dd:ca:d8:27:33:dc:b6:c9:66:97:f8:
                    c9:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:60:10:B5:BD:80:15:C9:B9:48:1C:FD:74:DB:22:68:9F:67:F9:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/1ef053cc-bac0-3910-9233-dd7c632a17d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/e191232b-cf07-4d3d-95e1-afcd1b928ab1.crl

            X509v3 Authority Key Identifier:
                keyid:EC:94:41:2C:05:92:7D:C7:FB:4B:08:41:DA:31:BE:F3:EA:B6:BD:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:49d0:1c0::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:a7:8b:79:80:de:b3:72:53:95:7a:31:1e:91:e3:b8:22:8b:
         f7:06:92:8b:58:b2:67:ab:3d:4f:20:93:ac:ae:47:7f:23:64:
         da:2d:8d:5b:a5:5e:24:74:14:a1:76:92:e9:b6:05:be:6d:24:
         5f:8d:28:ff:d8:65:d3:1c:dc:c2:b8:34:0f:c8:d2:d3:a6:9c:
         50:54:88:dd:34:50:be:78:15:9a:37:ae:42:5c:a8:7e:d0:11:
         63:e4:46:b8:2b:10:d0:3d:99:03:6d:20:0b:4e:6e:7a:12:b7:
         4e:0c:12:1c:b3:f4:1c:b0:38:58:50:ad:a6:e3:70:e4:71:7e:
         83:d5:19:17:ce:4d:83:71:a9:5f:b0:d5:07:32:5a:e4:c7:83:
         aa:98:8f:83:06:e4:07:f6:d5:eb:12:29:25:a9:c4:c9:67:82:
         de:a1:0c:17:6a:8b:c4:9e:20:89:84:79:48:22:75:10:35:04:
         86:31:80:fe:f2:2a:ef:ee:8f:2d:25:a8:40:ad:ff:15:3f:53:
         b5:a7:28:6e:e0:14:6f:27:57:b4:ca:ee:b4:a7:22:de:01:5e:
         90:24:69:88:99:8f:7a:96:3a:90:51:c9:6c:ee:dc:49:15:b1:
         90:c2:fc:23:a8:2b:d8:34:f0:53:39:9e:f5:1f:4e:5f:e5:b0:
         a8:7e:7f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:02:01 2024 by rpki-client on console-ams.rpki-client.org