Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/3428cc45-73a3-37b3-a9c8-d2366e878b14.roa
File:                     3428cc45-73a3-37b3-a9c8-d2366e878b14.roa (raw, json)
Hash identifier:          rCHVDLrwv5qb1YtOhDSXuJKua4W5DiUKvvcwMOiSy5M=
Subject key identifier:   EA:B3:B7:A7:A3:D5:85:A9:DF:50:CA:0A:FF:4F:C1:4C:9A:0C:CB:D8
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F43285847B531543986D2BD9664AB2D80
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/3428cc45-73a3-37b3-a9c8-d2366e878b14.roa
Signing time:             Wed 30 Oct 2024 01:00:32 +0000
ROA not before:           Wed 30 Oct 2024 01:00:32 +0000
ROA not after:            Tue 28 Jan 2025 02:00:32 +0000
asID:                     11055
IP address blocks:        2605:4a80:ef01::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b5:31:54:39:86:d2:bd:96:64:ab:2d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: Oct 30 01:00:32 2024 GMT
            Not After : Jan 28 02:00:32 2025 GMT
        Subject: CN=47fe79b2-6a16-4b6e-958e-d8b1812a21f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:44:36:6f:45:88:f7:c6:76:46:87:38:4e:c2:
                    9d:d8:8f:62:55:03:20:4f:09:99:36:9f:47:e2:96:
                    58:f7:0e:79:b7:b2:8d:b7:db:14:76:90:58:8b:f7:
                    90:84:09:1c:a7:ab:9a:51:6d:3c:85:85:7f:8c:a5:
                    5f:de:76:0f:0a:09:8b:68:ea:60:27:e0:95:fb:41:
                    30:91:3a:e5:e3:ea:b1:0a:c6:90:ef:60:77:fd:8e:
                    32:6b:07:00:61:d4:71:29:41:56:08:82:10:0a:00:
                    c2:66:cd:95:0b:05:a8:97:0b:ae:d0:91:81:98:93:
                    71:18:b5:f5:ca:df:bd:cc:7d:50:bd:d0:76:ce:68:
                    d0:3e:d9:5e:65:51:cf:8a:b4:94:7c:d3:9e:3d:6b:
                    ec:d9:97:81:7d:35:3d:d0:7f:d5:5b:89:93:bc:51:
                    a3:be:e4:8c:ed:5f:f4:3d:af:81:3b:a2:e7:fe:1b:
                    8e:3f:c4:da:f6:87:92:91:14:88:ff:69:6a:09:ef:
                    d4:58:55:de:fc:57:fa:c0:b5:e8:fa:e5:9a:ef:8f:
                    84:bd:9a:b8:c5:12:09:cf:7e:d1:b3:5c:95:fe:1c:
                    67:a8:c6:1f:b9:1d:6a:03:5d:cc:a4:43:2c:29:b3:
                    c2:fe:00:21:c9:ca:fb:2f:9c:e1:63:51:a0:29:e6:
                    a4:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:B3:B7:A7:A3:D5:85:A9:DF:50:CA:0A:FF:4F:C1:4C:9A:0C:CB:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/3428cc45-73a3-37b3-a9c8-d2366e878b14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4a80:ef01::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:56:0e:f4:15:0a:3a:62:62:3c:95:fd:31:fe:b1:55:bf:d7:
         17:69:d9:23:f9:fd:f0:f2:ce:5a:3c:00:9f:17:90:d5:b6:dc:
         fa:dd:5a:a6:7f:5a:5e:0f:aa:c0:bf:77:2a:cf:2f:24:6a:4d:
         52:1c:08:cc:ff:37:44:3b:28:26:91:0c:e7:52:9d:52:99:fd:
         b3:31:9c:e7:4d:0f:e2:03:63:cd:0e:d6:ab:d9:57:6f:2c:89:
         39:4e:65:e7:55:e3:31:79:ee:e9:63:b9:2b:94:1b:48:2c:a3:
         ef:b6:65:6d:76:29:44:ad:f7:80:4d:90:a6:51:8e:4f:92:ad:
         a6:6f:eb:bb:30:de:0f:27:6b:1e:5f:ef:da:a0:3b:66:5c:32:
         ab:8c:dd:7a:e6:5f:70:f2:7b:d8:5a:7a:57:7e:84:0e:ca:85:
         3a:01:48:c3:3a:97:c1:a7:8f:77:65:c2:fc:2e:57:3c:df:20:
         54:64:1a:65:a4:4e:92:44:6d:50:15:93:50:b0:1a:30:f6:2a:
         ae:6f:9a:3d:9d:a8:38:0d:0c:62:2e:2e:42:c3:82:9e:fa:1a:
         ac:38:14:ea:35:8e:4c:80:1f:8a:d4:51:c1:2e:a8:5b:a8:52:
         c9:06:ab:66:69:e1:f6:fb:ef:c1:91:d6:c0:bd:da:62:0c:a2:
         6e:cb:c6:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:23:03 2024 by rpki-client on console-fra.rpki-client.org