Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/408b8acd-25e4-3702-afae-34ae4e67b8f2.roa
File:                     408b8acd-25e4-3702-afae-34ae4e67b8f2.roa (raw, json)
Hash identifier:          1pXjHep3+yaFDHk3/M+mwByY8dNKl9gxTqbfJlOvveQ=
Subject key identifier:   99:8D:F1:4A:2E:C8:9E:32:1E:18:93:9F:DA:42:20:51:A4:6D:81:BA
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F43285847B53153DEF22E720A74BE58E8
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/408b8acd-25e4-3702-afae-34ae4e67b8f2.roa
Signing time:             Wed 30 Oct 2024 01:00:32 +0000
ROA not before:           Wed 30 Oct 2024 01:00:32 +0000
ROA not after:            Tue 28 Jan 2025 02:00:32 +0000
asID:                     62896
IP address blocks:        2605:4a80:fff0::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b5:31:53:de:f2:2e:72:0a:74:be:58:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: Oct 30 01:00:32 2024 GMT
            Not After : Jan 28 02:00:32 2025 GMT
        Subject: CN=97764882-cd56-4a70-896f-b76de89e9d63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:0f:f9:48:8c:8f:f9:1c:61:e9:9c:12:1b:72:
                    62:95:1d:bc:97:b7:9f:06:b9:7f:8f:2f:05:5a:c7:
                    9d:7d:1c:d3:c9:31:19:47:e8:52:58:33:8d:d0:63:
                    d6:05:ca:3e:b9:f6:b5:15:92:8a:16:8b:8d:72:f1:
                    33:17:f9:4c:33:27:f5:1c:d2:4d:86:fb:2f:97:20:
                    14:3c:8f:e2:11:b8:5b:83:bf:8b:81:a2:57:74:71:
                    bc:8b:63:f5:8b:8e:e2:05:25:1c:15:d9:d4:f5:0f:
                    ff:88:86:28:c1:5d:b8:99:0b:96:e5:22:63:4b:97:
                    f8:c5:64:4f:d6:00:69:12:d0:7e:d6:bd:e2:b6:16:
                    ca:bb:8e:7e:87:ec:24:c1:3f:37:ad:e3:20:d5:d0:
                    8f:ae:b2:07:62:b8:8d:7c:b3:ff:28:a5:1e:c1:9d:
                    a3:d5:41:cf:76:57:d8:bd:0c:f6:f5:e6:8b:db:cc:
                    8c:0d:a2:e5:ff:34:dc:6f:4f:19:02:01:25:c3:c2:
                    6c:c6:a5:5a:f5:0a:53:7b:11:8d:13:45:95:a4:ae:
                    8c:e7:80:dc:fc:ec:6e:04:00:0a:0d:6d:ed:38:b1:
                    e1:9e:95:fb:1f:8e:e3:fe:62:1f:02:31:fd:7d:5e:
                    09:93:95:35:37:df:9e:15:0f:58:25:72:2e:6f:db:
                    b6:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:8D:F1:4A:2E:C8:9E:32:1E:18:93:9F:DA:42:20:51:A4:6D:81:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/408b8acd-25e4-3702-afae-34ae4e67b8f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4a80:fff0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:87:a0:f5:28:64:8a:c2:c8:ea:43:18:21:ac:ea:30:ef:70:
         9f:11:69:64:92:a3:0d:1a:d3:6a:24:7a:c6:1b:cd:fa:b6:fb:
         6c:f3:cd:68:88:12:fe:ae:66:a3:60:a9:fd:e9:b0:da:07:ba:
         f9:01:80:43:94:2b:4f:c9:10:b8:dd:92:15:53:f1:c9:45:78:
         79:3f:e7:c8:5e:1f:77:ca:d8:4c:3e:f6:72:9b:66:ec:4e:61:
         76:87:d3:05:a3:90:56:76:f6:ce:20:ef:d1:8b:88:c0:29:9f:
         31:1e:b9:11:0b:2a:f5:3a:b3:1c:80:62:c9:71:c6:2f:3e:1a:
         04:c5:51:0c:5b:9a:5b:38:92:3b:1c:3c:8a:f3:33:40:f5:c7:
         a5:e1:fe:46:bd:c3:73:27:22:52:df:af:19:f1:4d:21:e2:7e:
         29:85:75:f5:f4:5c:1e:2d:91:83:44:71:66:1b:67:b9:c6:11:
         64:7e:fa:d7:22:5e:74:12:5b:37:db:2a:f0:4d:95:d2:25:91:
         d3:d3:83:2b:88:4d:e1:d2:72:f5:4d:d4:7a:6a:6f:01:fc:2c:
         1f:93:e6:42:5a:ce:d3:21:39:66:8f:f4:a1:78:3f:de:ec:2f:
         a1:c7:a9:af:3f:2b:11:ad:0e:6c:f4:de:ba:d0:9a:6e:76:ed:
         8d:c9:c3:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:37:45 2024 by rpki-client on console-ams.rpki-client.org