Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0808dbd-8138-4b99-ac5a-4f6a7f475f92/cd01d152-7a59-32c5-a3b2-e76ed7233eca.roa
File:                     cd01d152-7a59-32c5-a3b2-e76ed7233eca.roa (raw, json)
Hash identifier:          HPeAxNIa1iOVV19o+TBwSAaTgAYo07XXXJs/JztMv40=
Subject key identifier:   4F:3A:1D:C9:2E:8A:6A:20:04:4E:BE:24:2E:0D:8E:0E:C9:83:B4:1F
Certificate issuer:       /CN=e0808dbd-8138-4b99-ac5a-4f6a7f475f92
Certificate serial:       010D0C9F4328584782F10050EF965569CCF0E200
Authority key identifier: CA:54:C2:97:29:E2:9F:BF:FD:7B:3F:D5:DB:32:2A:8B:CC:EC:9A:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0808dbd-8138-4b99-ac5a-4f6a7f475f92.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0808dbd-8138-4b99-ac5a-4f6a7f475f92/cd01d152-7a59-32c5-a3b2-e76ed7233eca.roa
Signing time:             Sat 12 Oct 2024 01:00:32 +0000
ROA not before:           Sat 12 Oct 2024 01:00:32 +0000
ROA not after:            Fri 10 Jan 2025 02:00:32 +0000
asID:                     396919
IP address blocks:        2605:940::/40 maxlen: 56
                          2605:940:400::/40 maxlen: 56
                          2605:940:510::/44 maxlen: 56
                          2605:940:610::/44 maxlen: 56
                          2605:940:710::/44 maxlen: 56

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0808dbd-8138-4b99-ac5a-4f6a7f475f92/e0808dbd-8138-4b99-ac5a-4f6a7f475f92.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0808dbd-8138-4b99-ac5a-4f6a7f475f92/e0808dbd-8138-4b99-ac5a-4f6a7f475f92.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0808dbd-8138-4b99-ac5a-4f6a7f475f92.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:82:f1:00:50:ef:96:55:69:cc:f0:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0808dbd-8138-4b99-ac5a-4f6a7f475f92
        Validity
            Not Before: Oct 12 01:00:32 2024 GMT
            Not After : Jan 10 02:00:32 2025 GMT
        Subject: CN=81b00c9e-5357-482a-8b6a-fba68b4e6bd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:15:85:00:a2:58:95:8d:cd:9d:b0:ab:32:d3:
                    3c:1e:06:91:f3:e8:bd:40:e0:af:59:89:44:75:d7:
                    64:3c:a0:d0:98:58:c2:bc:54:e2:00:4c:e3:14:49:
                    50:32:da:eb:5b:69:88:d7:69:03:db:f7:be:2c:53:
                    e4:87:f6:dc:3e:e2:23:59:73:cd:1d:f3:90:ca:26:
                    ca:97:c9:0f:1f:be:5d:44:91:53:0e:64:53:f2:91:
                    98:06:61:79:ae:c4:4a:8e:2d:8f:07:20:ed:34:ce:
                    74:1a:61:e3:0e:e4:da:c8:61:a0:0e:82:45:95:a8:
                    e7:3f:bc:98:01:21:56:b3:a6:57:3b:7c:96:f6:40:
                    1f:7b:34:13:1f:d8:5d:e4:72:73:cf:f9:c3:12:9b:
                    7f:33:d7:7d:bd:2e:2a:0a:cb:ab:c8:66:7f:af:ea:
                    5e:68:31:78:a3:75:e7:71:41:e6:ed:b4:9f:f9:92:
                    30:a6:39:6a:f8:11:cf:49:d3:c0:77:d0:13:2a:8a:
                    f6:48:32:6c:9a:4d:d4:b7:70:2d:65:a1:4d:6e:70:
                    19:87:e4:61:56:25:a2:b7:9e:a7:03:cd:bd:2b:39:
                    2e:5a:ec:0a:4d:b1:fd:1f:15:d7:d8:19:fc:68:c5:
                    a8:08:dc:de:bf:cc:85:92:ff:33:08:b1:98:3e:55:
                    c8:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:3A:1D:C9:2E:8A:6A:20:04:4E:BE:24:2E:0D:8E:0E:C9:83:B4:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0808dbd-8138-4b99-ac5a-4f6a7f475f92/cd01d152-7a59-32c5-a3b2-e76ed7233eca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0808dbd-8138-4b99-ac5a-4f6a7f475f92/e0808dbd-8138-4b99-ac5a-4f6a7f475f92.crl

            X509v3 Authority Key Identifier:
                keyid:CA:54:C2:97:29:E2:9F:BF:FD:7B:3F:D5:DB:32:2A:8B:CC:EC:9A:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0808dbd-8138-4b99-ac5a-4f6a7f475f92.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:940::/40
                  2605:940:400::/40
                  2605:940:510::/44
                  2605:940:610::/44
                  2605:940:710::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:95:09:32:ca:e1:e8:ca:e5:e8:2f:1b:2e:16:c3:61:46:cb:
         a6:b8:7e:dc:1b:34:20:51:58:3a:2a:dc:82:fa:ba:ff:9f:9e:
         c1:5d:ad:37:f6:0f:33:a8:04:04:21:91:47:c1:fd:01:72:91:
         49:06:3b:9e:a0:52:d1:7f:c6:d4:60:c3:1c:91:75:46:30:08:
         d0:40:43:25:51:38:98:95:67:a8:4e:2e:c7:b3:ba:dd:e4:2f:
         48:bf:1e:fd:00:98:9a:b1:2e:d2:35:6b:f3:bb:61:11:11:21:
         41:6f:6f:de:b5:e1:b4:a6:da:2f:d4:61:b6:3d:69:62:75:94:
         3d:f3:c8:e3:34:1f:54:f2:f9:82:e5:15:21:3a:22:74:e7:e5:
         f4:3f:80:3e:c6:3c:1a:54:cb:4a:20:99:aa:a9:c4:45:5c:f6:
         fc:20:dd:1f:b2:a3:45:8b:33:28:1b:d8:d5:68:b1:8d:5f:f4:
         a8:95:48:eb:bf:ab:87:36:74:b9:56:57:4c:d6:3a:a1:44:83:
         e4:e0:1b:6c:18:9a:3e:08:81:60:30:83:0b:00:04:74:79:5d:
         9b:23:f9:e5:e2:6f:e2:51:5f:97:a5:63:55:ec:10:35:b7:f9:
         c0:1b:8a:2c:77:ef:b2:8f:bb:7a:3c:b7:a1:b2:7d:05:24:3d:
         be:48:31:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:55:05 2024 by rpki-client on console-ams.rpki-client.org