Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/74a7fad8-dd78-48ee-b80f-33c16bd717de/95d67456-7bfe-3633-bb8e-6f617a5bea59.roa
File:                     95d67456-7bfe-3633-bb8e-6f617a5bea59.roa (raw, json)
Hash identifier:          q/x++zW5Wz6sErSXDTAV+2yv2D4Xjt6AqWcM/jasi5A=
Subject key identifier:   86:AA:47:B1:BA:59:5A:B0:66:06:9C:88:A1:54:5B:CC:71:F1:DB:63
Certificate issuer:       /CN=74a7fad8-dd78-48ee-b80f-33c16bd717de
Certificate serial:       010D0C9F432858475AF9C2BCB0821865392DC580
Authority key identifier: 32:83:79:E9:5E:97:FC:E4:82:97:20:3B:F0:D7:1D:C2:34:93:AF:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/74a7fad8-dd78-48ee-b80f-33c16bd717de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/74a7fad8-dd78-48ee-b80f-33c16bd717de/95d67456-7bfe-3633-bb8e-6f617a5bea59.roa
Signing time:             Fri 27 Sep 2024 17:25:56 +0000
ROA not before:           Fri 27 Sep 2024 17:25:56 +0000
ROA not after:            Thu 26 Dec 2024 18:25:56 +0000
asID:                     55194
IP address blocks:        2604:5480:20::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/74a7fad8-dd78-48ee-b80f-33c16bd717de/74a7fad8-dd78-48ee-b80f-33c16bd717de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/74a7fad8-dd78-48ee-b80f-33c16bd717de/74a7fad8-dd78-48ee-b80f-33c16bd717de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/74a7fad8-dd78-48ee-b80f-33c16bd717de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5a:f9:c2:bc:b0:82:18:65:39:2d:c5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74a7fad8-dd78-48ee-b80f-33c16bd717de
        Validity
            Not Before: Sep 27 17:25:56 2024 GMT
            Not After : Dec 26 18:25:56 2024 GMT
        Subject: CN=03d51f2f-88f3-476a-aff2-e32ebfd5fe0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:17:e9:33:f3:be:7b:46:06:99:03:9b:22:39:
                    89:87:d8:c4:fd:1e:b3:ba:f0:17:cd:cd:c5:ab:b4:
                    ef:db:8b:f7:78:0e:a1:63:0f:76:ae:43:a1:b4:69:
                    36:94:b9:f2:dc:7b:85:a5:b8:60:8d:2a:b5:e9:bb:
                    e6:c3:d1:8b:cc:f8:14:6c:65:25:4a:d4:39:73:6f:
                    ba:08:79:37:49:ac:3b:3a:08:ea:9f:b8:9f:df:a8:
                    95:af:8a:9e:e3:9f:ac:8f:68:d3:cb:e7:60:fa:36:
                    dd:a6:ce:65:81:bd:9c:79:a8:04:87:8d:2f:90:a8:
                    28:a3:33:e8:5a:31:5f:83:c2:5c:74:02:2c:e8:51:
                    62:8d:3a:66:80:fc:ed:ec:3c:d3:50:87:54:3c:67:
                    09:83:ec:53:66:7a:9f:75:12:de:30:6d:20:50:d4:
                    e2:05:7f:79:f4:94:a2:ce:b1:95:29:d6:de:11:cf:
                    0d:3a:5b:8f:a5:3e:55:21:17:31:6f:56:73:61:37:
                    52:c0:e8:6f:65:40:a0:2e:31:a1:ab:3d:5f:60:88:
                    e2:6a:37:e3:b5:d4:62:85:82:d7:e2:43:c3:89:5a:
                    86:f8:08:84:e8:e3:13:1e:1e:03:27:41:ac:84:fe:
                    47:d3:b5:0c:13:af:c5:7c:22:55:9b:27:25:b1:56:
                    18:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:AA:47:B1:BA:59:5A:B0:66:06:9C:88:A1:54:5B:CC:71:F1:DB:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/74a7fad8-dd78-48ee-b80f-33c16bd717de/95d67456-7bfe-3633-bb8e-6f617a5bea59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/74a7fad8-dd78-48ee-b80f-33c16bd717de/74a7fad8-dd78-48ee-b80f-33c16bd717de.crl

            X509v3 Authority Key Identifier:
                keyid:32:83:79:E9:5E:97:FC:E4:82:97:20:3B:F0:D7:1D:C2:34:93:AF:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/74a7fad8-dd78-48ee-b80f-33c16bd717de.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:5480:20::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:be:0e:43:93:f2:2b:82:a4:02:03:61:ee:5a:25:96:4e:63:
         e6:aa:58:9f:69:ee:07:ef:14:73:bc:c2:31:8b:a3:75:fc:3f:
         8c:1e:7a:d5:a5:c7:27:41:ca:76:e6:44:dc:5a:37:51:46:02:
         33:0f:90:de:27:9f:e4:f1:17:d9:f5:96:ce:b8:b2:ad:1f:77:
         1d:a8:26:48:d0:aa:dc:2d:02:39:9a:cf:c6:63:60:45:52:6a:
         48:b3:56:b8:9b:ba:43:cb:db:28:c3:1e:06:fd:a3:a7:8c:6d:
         e8:03:ac:ff:72:5d:8a:b4:00:ec:ea:ab:60:65:79:25:a7:1d:
         7b:3b:46:2b:17:9d:e6:3b:f1:8b:a8:4a:7c:4e:80:42:a9:4e:
         e7:fe:ea:fe:24:9d:25:ec:c3:ca:b7:87:1f:33:96:e1:ce:92:
         ce:ce:23:93:09:cb:69:37:f3:2d:9d:2d:c5:be:6d:6c:cd:16:
         43:22:cc:dd:31:04:75:42:64:f8:bd:a9:8a:00:e4:9e:5f:5f:
         5c:cd:cc:0d:0a:8d:b1:94:c2:be:01:55:96:2d:d6:11:75:63:
         08:e9:d0:60:dd:12:d1:86:3a:1a:be:63:96:a8:71:2c:bc:ef:
         d1:a5:ba:cf:b8:8e:62:c3:76:89:25:a3:18:c6:1e:a8:79:7b:
         25:65:cf:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 18:28:37 2024 by rpki-client on console-ams.rpki-client.org