Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df/3a2d7274-4236-30bd-9654-d9ab9dfd3cfa.roa
File:                     3a2d7274-4236-30bd-9654-d9ab9dfd3cfa.roa (raw, json)
Hash identifier:          YFqAcYz3I8IxiflTHS5GKwlYxQMmaU/GfbBHpLON874=
Subject key identifier:   D5:C7:9D:0A:29:41:AF:27:1B:97:44:58:45:47:05:89:A1:D3:A6:61
Certificate issuer:       /CN=2cdca715-b3ad-4985-b6fd-0bd7308257df
Certificate serial:       010D0C9F4328584773965D04DF01E495277E4F40
Authority key identifier: D4:4C:25:AF:8A:8B:17:51:21:2B:12:3E:FC:3E:07:12:A7:BA:F9:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df/3a2d7274-4236-30bd-9654-d9ab9dfd3cfa.roa
Signing time:             Sun 06 Oct 2024 13:00:41 +0000
ROA not before:           Sun 06 Oct 2024 13:00:41 +0000
ROA not after:            Sat 04 Jan 2025 14:00:41 +0000
asID:                     19528
IP address blocks:        2605:14c0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df/2cdca715-b3ad-4985-b6fd-0bd7308257df.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df/2cdca715-b3ad-4985-b6fd-0bd7308257df.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:73:96:5d:04:df:01:e4:95:27:7e:4f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cdca715-b3ad-4985-b6fd-0bd7308257df
        Validity
            Not Before: Oct  6 13:00:41 2024 GMT
            Not After : Jan  4 14:00:41 2025 GMT
        Subject: CN=6d2892d4-a32a-4361-8bb6-9e452383a571
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c8:1c:89:87:65:63:c8:36:71:83:39:ad:7e:
                    b7:39:c1:91:2f:74:db:b9:25:60:4f:4e:49:7f:de:
                    09:0e:ea:cc:7c:90:5b:44:84:6a:94:df:06:4d:1d:
                    05:9a:17:6a:20:a9:75:92:5f:c5:77:b2:a0:37:a4:
                    50:81:51:fc:49:02:81:c8:c3:76:27:90:8c:a4:64:
                    c8:3d:8f:8d:8f:0a:f1:8d:b8:b3:7a:fb:33:c8:a2:
                    49:46:50:b2:8d:2a:d6:33:6c:71:69:3f:da:ba:75:
                    36:29:56:21:8e:52:ef:3b:a7:bd:81:a0:f3:50:8e:
                    47:66:77:61:e3:e7:23:e3:f7:56:1e:63:c6:0c:ca:
                    f9:66:b0:49:5b:a7:f3:8f:5a:a8:25:0b:db:97:34:
                    b0:4b:81:7a:d3:2f:6c:e6:4a:13:ca:e2:7a:16:4c:
                    7b:9c:94:b3:a0:30:4f:14:6e:e8:bb:50:71:fe:43:
                    41:b2:df:5e:7f:e7:c4:b8:0d:80:eb:a3:8a:c7:1b:
                    76:a3:9c:4e:ee:b7:fc:97:ed:fb:1e:73:1d:c4:f1:
                    79:36:0d:d7:39:4a:ed:a3:1c:2b:74:ce:08:f0:50:
                    c2:69:5c:ca:9b:93:01:08:f4:ab:eb:3d:f2:60:d9:
                    69:a5:39:1f:21:74:03:52:cc:1e:9a:fe:96:cc:ad:
                    f7:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:C7:9D:0A:29:41:AF:27:1B:97:44:58:45:47:05:89:A1:D3:A6:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df/3a2d7274-4236-30bd-9654-d9ab9dfd3cfa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df/2cdca715-b3ad-4985-b6fd-0bd7308257df.crl

            X509v3 Authority Key Identifier:
                keyid:D4:4C:25:AF:8A:8B:17:51:21:2B:12:3E:FC:3E:07:12:A7:BA:F9:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:14c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:6c:2e:09:b7:90:21:17:2f:5a:44:e7:14:7d:1d:12:ce:ad:
         cb:5c:33:c2:02:ad:32:a6:84:d9:42:b3:39:c6:30:33:a8:27:
         90:c3:f7:81:82:45:8b:90:9c:e5:60:60:7d:66:a0:07:81:94:
         b4:65:1a:fc:f1:e0:d6:39:18:16:a4:71:73:be:7f:e0:2d:76:
         1b:2d:cf:2a:ea:2a:de:d9:d6:10:0a:fd:ba:9a:c3:86:3f:a4:
         c9:e8:4b:14:0b:a7:d2:ee:cc:b3:f2:7c:42:10:c6:09:65:a7:
         18:b8:6a:98:f4:43:22:c9:02:c2:cd:25:56:a0:b6:d9:4d:c2:
         4a:8d:6a:6f:65:e9:c5:c5:24:0f:d9:9c:d7:eb:b6:b0:31:a4:
         ca:97:94:cf:c2:64:bd:54:5a:90:a1:b0:06:ba:b2:ed:ec:66:
         14:2c:53:39:c4:ce:6d:07:b0:58:fc:53:d9:b7:74:e7:34:47:
         fb:aa:67:df:c8:dc:21:e0:09:49:a0:fe:10:fd:b2:c1:18:53:
         a7:1c:c0:88:99:55:d2:3d:8c:cf:7a:73:6e:73:e8:a5:4f:85:
         96:6a:2d:c4:c7:14:ee:eb:b2:c9:2a:ab:42:29:31:96:d6:4f:
         51:fc:ec:7d:00:17:df:db:d4:2d:fa:34:5a:6c:6b:42:d3:ea:
         12:84:03:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:50:32 2024 by rpki-client on console-fra.rpki-client.org