Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2bf0c4c6-b80c-3c40-b8c8-2a4d0ef9c3ec.roa
File:                     2bf0c4c6-b80c-3c40-b8c8-2a4d0ef9c3ec.roa (raw, json)
Hash identifier:          Bb4W9KIhwUbRwTjXffBHtc+mZ3SrrsIflCbE+xBmgBA=
Subject key identifier:   08:F4:F9:88:A0:E0:63:7C:7B:BF:E1:E8:39:D9:66:20:CE:72:D6:4D
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285847F1553D579BE3631055246540
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2bf0c4c6-b80c-3c40-b8c8-2a4d0ef9c3ec.roa
Signing time:             Wed 20 Nov 2024 14:00:52 +0000
ROA not before:           Wed 20 Nov 2024 14:00:52 +0000
ROA not after:            Tue 18 Feb 2025 14:00:52 +0000
asID:                     7029
IP address blocks:        2604:cb00:e::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f1:55:3d:57:9b:e3:63:10:55:24:65:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Nov 20 14:00:52 2024 GMT
            Not After : Feb 18 14:00:52 2025 GMT
        Subject: CN=443d13fd-a502-4c8f-a9aa-7aae3693c604
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:11:33:0e:6c:2e:b6:0f:89:9f:58:72:84:a1:
                    78:8d:0d:fe:e7:53:24:ef:ed:ba:8d:1d:a9:c8:ad:
                    2e:ce:bc:48:44:13:eb:a2:95:35:27:7c:99:a9:44:
                    65:ed:c2:d4:82:96:6b:ea:7b:a4:bc:4a:05:6f:19:
                    d0:84:78:db:32:7c:8d:a1:c6:06:7b:39:98:e1:6a:
                    5e:48:5d:93:52:b9:6a:b0:88:65:f5:1e:c4:0b:34:
                    81:5a:88:48:63:b1:3e:01:cc:76:20:f1:25:5f:d3:
                    ef:5c:fe:47:c7:d7:9d:42:33:68:d2:32:4e:b7:8d:
                    88:80:f8:d8:cc:07:5e:42:46:4f:5b:72:17:42:4f:
                    fa:36:95:0e:5b:99:40:1e:b7:b5:cd:6a:11:32:ff:
                    ae:56:d5:c5:1d:99:2f:b3:e6:2d:7c:39:58:71:61:
                    2a:ca:ce:76:fb:45:4a:6c:98:0c:a4:82:c2:de:05:
                    e0:5e:8f:dd:f4:f4:d2:96:94:f1:43:6f:c9:66:91:
                    37:dd:17:98:20:56:cb:8d:77:cf:f0:81:b2:d0:c9:
                    56:2d:fe:fc:64:4e:58:71:18:40:48:09:d8:10:ec:
                    63:39:70:e4:28:50:a9:74:22:a8:e5:dd:b3:3e:08:
                    30:55:1c:e9:c6:ca:38:7b:29:82:38:dd:fe:0f:58:
                    b9:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:F4:F9:88:A0:E0:63:7C:7B:BF:E1:E8:39:D9:66:20:CE:72:D6:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2bf0c4c6-b80c-3c40-b8c8-2a4d0ef9c3ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:cb00:e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:6f:bb:30:d9:0b:fa:31:81:e1:a8:a8:89:00:9c:a4:ee:17:
         56:38:f5:cf:52:8e:29:9c:9f:46:d7:db:56:be:c6:bf:b5:16:
         63:13:15:3a:91:77:c4:6b:46:d0:dc:59:1b:cf:50:81:14:a8:
         36:aa:70:0d:21:a6:1b:0b:d7:f4:11:3a:ca:1f:b6:a9:d2:2c:
         5d:40:73:9f:e7:1f:94:6f:5b:05:75:00:a2:50:5c:2e:54:3c:
         4f:ad:3e:61:ae:d5:2c:89:25:d6:e0:fd:50:43:90:94:b1:d8:
         84:4a:92:0d:b2:ca:f4:1f:f2:8d:82:a6:07:dc:2f:b2:4b:23:
         c4:c0:e1:bb:1b:62:d0:b6:d0:a7:5b:fd:9f:e3:e3:c6:88:48:
         ad:55:6d:34:dd:74:ce:3e:98:4f:2f:2a:6d:91:ed:a5:c4:94:
         66:a3:2f:13:49:7e:54:b0:69:bf:bd:ae:45:7d:e5:f1:18:34:
         b4:7d:06:41:8d:33:82:68:62:61:c3:32:c2:41:d3:c9:79:88:
         1d:90:e7:e2:22:fb:17:9d:59:66:31:79:bc:61:d4:12:ed:8b:
         e0:0b:9c:c1:7a:3c:07:a2:d7:1c:01:3a:04:26:a6:9b:b7:47:
         61:2d:51:aa:71:e2:83:c3:e6:2b:3e:28:26:3e:12:a7:ab:3a:
         bc:61:4e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:46:27 2024 by rpki-client on console-ams.rpki-client.org