Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/1eeaf983-8d3a-3115-9b6e-30dfa0207e58.roa
File:                     1eeaf983-8d3a-3115-9b6e-30dfa0207e58.roa (raw, json)
Hash identifier:          ygwv4hA0u0s7VCuJ3+u7BOPETKaP+sjo9kHdroUU7Nw=
Subject key identifier:   DF:FB:6D:AA:3D:4F:85:D5:9C:27:91:04:7D:1F:FF:F0:94:BB:4B:E7
Certificate issuer:       /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial:       010D0C9F432858471BA5AC7B0B26DD2352411AC0
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/1eeaf983-8d3a-3115-9b6e-30dfa0207e58.roa
Signing time:             Thu 05 Sep 2024 01:00:30 +0000
ROA not before:           Thu 05 Sep 2024 01:00:30 +0000
ROA not after:            Wed 04 Dec 2024 02:00:30 +0000
asID:                     61317
IP address blocks:        2604:4500:1200::/40 maxlen: 40
                          2604:4500:1300::/40 maxlen: 40
                          2604:4500:1400::/40 maxlen: 40
                          2604:4500:1500::/40 maxlen: 40
                          2604:4500:1600::/40 maxlen: 40
                          2604:4500:1700::/40 maxlen: 40
                          2604:4500:1800::/40 maxlen: 40
                          2604:4500:1900::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1b:a5:ac:7b:0b:26:dd:23:52:41:1a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
        Validity
            Not Before: Sep  5 01:00:30 2024 GMT
            Not After : Dec  4 02:00:30 2024 GMT
        Subject: CN=b3552651-9b45-4765-909c-565e65a86f97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0e:c9:38:f8:58:a2:3f:8a:90:69:6d:d2:cb:
                    7f:a8:89:ff:80:4f:6d:1e:08:ef:8d:ba:b1:d6:47:
                    23:6b:a3:82:09:87:17:8a:82:7f:ba:34:ed:e1:45:
                    ae:7a:90:10:b0:ee:75:cf:cf:3e:07:ae:10:29:36:
                    99:48:8c:ff:dc:e3:82:7b:e4:f2:57:eb:38:93:b6:
                    34:89:86:9e:d2:c2:1c:ed:3a:2a:68:d8:f2:df:31:
                    8d:5b:e5:a2:0c:05:97:e4:3c:25:e9:c0:42:0b:0b:
                    80:25:f1:1a:e0:ae:30:71:94:46:30:62:bd:e7:af:
                    3f:5f:af:37:b1:49:9f:7f:d5:5b:ed:94:c8:4b:22:
                    7f:a5:77:a4:70:17:99:ab:44:bd:dc:d5:fc:73:16:
                    d7:6f:fd:07:c2:67:45:da:c8:f9:72:44:8e:49:e4:
                    36:58:0c:5a:5d:1d:c1:34:7d:f3:31:61:d3:a9:84:
                    08:78:b9:5d:d1:72:7f:e6:1d:39:a5:69:e3:8c:4f:
                    9b:42:4e:3c:2f:6f:b2:2e:b3:de:65:93:32:cc:9b:
                    cb:11:d8:81:91:61:90:88:40:cd:a8:83:ea:56:2b:
                    9f:90:80:f6:c0:0f:86:a4:c6:c1:d9:c0:24:16:3d:
                    8e:f2:31:0b:ed:69:2f:d5:46:f0:7e:cb:f5:56:95:
                    8c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:FB:6D:AA:3D:4F:85:D5:9C:27:91:04:7D:1F:FF:F0:94:BB:4B:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/1eeaf983-8d3a-3115-9b6e-30dfa0207e58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl

            X509v3 Authority Key Identifier:
                keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:4500:1200::-2604:4500:19ff:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:7e:da:f9:9e:b5:2f:ec:0d:b0:6d:62:17:dc:be:81:37:77:
         71:74:10:87:28:0e:c6:af:35:cd:4c:9b:37:3b:35:42:c6:31:
         97:9b:06:7a:96:01:12:87:2f:09:27:30:71:b4:84:27:53:0d:
         e5:5d:30:a9:6d:b1:24:1b:68:0a:9c:b4:58:f5:83:8a:ee:e4:
         36:28:fb:fb:e5:37:35:0f:d2:85:27:81:6d:fc:59:d3:68:bb:
         fe:44:da:a7:11:05:96:87:8a:82:f6:ef:f9:3f:e6:41:1d:a1:
         61:1e:4b:30:7d:33:6c:63:7b:ac:84:92:d5:f8:49:7d:54:27:
         cf:e1:f2:9b:78:dc:fa:6a:9d:26:5f:c3:06:bb:40:8b:2e:65:
         03:33:b4:77:47:3f:41:6f:29:b2:1b:5c:4a:e3:ac:69:55:f9:
         3c:37:a4:d9:c2:de:64:6c:aa:4e:20:11:c9:dc:70:cb:db:46:
         06:e0:dd:f8:57:ea:74:a2:e0:44:ca:de:22:c5:42:c8:38:33:
         57:59:5b:f6:c1:6a:66:e1:a1:ce:75:6a:c6:9d:87:0f:43:bc:
         72:2b:4b:c7:bf:3b:35:1b:0d:04:91:8e:7e:8a:be:58:f0:8c:
         6e:39:43:ae:3f:bf:df:3c:d8:01:78:18:97:4c:75:02:dd:f3:
         ab:38:cb:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:36:00 2024 by rpki-client on console-fra.rpki-client.org