Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/85e46288-1e4e-3ac3-82b3-dcb8e70011b7.roa
File:                     85e46288-1e4e-3ac3-82b3-dcb8e70011b7.roa (raw, json)
Hash identifier:          JcxxvsxT3UBR2qSjZRvTZ3oLe9zALpYz1cdH0SjBn8U=
Subject key identifier:   52:B0:C7:8A:9B:66:51:67:32:85:3B:95:92:B5:B5:CF:C5:48:41:5E
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F43285847B5315496C249DEFE07690980
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/85e46288-1e4e-3ac3-82b3-dcb8e70011b7.roa
Signing time:             Wed 30 Oct 2024 01:00:32 +0000
ROA not before:           Wed 30 Oct 2024 01:00:32 +0000
ROA not after:            Tue 28 Jan 2025 02:00:32 +0000
asID:                     11055
IP address blocks:        2605:4a80:ef06::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b5:31:54:96:c2:49:de:fe:07:69:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: Oct 30 01:00:32 2024 GMT
            Not After : Jan 28 02:00:32 2025 GMT
        Subject: CN=dba7b850-ed0c-42e4-8b2e-e8a5fe813d23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:76:6e:5a:98:32:a9:06:d7:82:af:bf:91:1c:
                    c6:30:74:4f:cf:e5:ee:58:3b:4c:12:97:fd:fc:ff:
                    52:39:4a:81:0b:2d:94:77:95:f8:27:0c:ab:a8:aa:
                    8f:95:37:2b:7d:c5:76:59:ed:6e:2b:9b:61:89:05:
                    3f:e6:b8:10:1c:05:e6:ff:d7:f2:13:07:88:69:91:
                    0f:41:73:7e:90:c0:91:04:96:08:32:73:5e:39:d4:
                    29:a5:d2:66:13:0a:00:bf:bc:d5:be:d4:5f:87:94:
                    c6:08:d0:d8:c6:ba:61:7b:c5:07:5a:8d:b9:93:cc:
                    02:b1:d6:5d:2a:49:87:45:d7:30:13:b2:34:34:e9:
                    fb:06:7b:e4:66:4d:c1:d6:bd:ce:da:bf:fc:eb:1c:
                    5d:f6:b6:31:07:63:ee:a2:b4:6c:71:be:1d:39:f3:
                    ff:c1:1b:43:40:31:f8:e6:7d:0a:fb:b2:02:7a:ee:
                    22:bc:b5:4d:ba:47:0b:a2:70:84:15:fd:85:66:69:
                    96:82:76:2b:d1:37:49:0b:38:de:f0:88:56:6a:0e:
                    3b:41:36:49:74:d5:1f:f2:41:51:e9:0a:43:cf:67:
                    36:dc:03:97:04:b7:b7:e1:2a:1f:ea:04:8c:40:17:
                    2f:ac:d4:72:3e:11:cf:a0:48:4b:ff:66:ca:24:9b:
                    0d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:B0:C7:8A:9B:66:51:67:32:85:3B:95:92:B5:B5:CF:C5:48:41:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/85e46288-1e4e-3ac3-82b3-dcb8e70011b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4a80:ef06::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:7d:6f:57:91:ca:3c:e9:a8:3a:3b:74:d2:54:c2:62:61:cd:
         5e:2c:f4:5a:bb:84:18:bf:d9:db:16:04:85:6c:67:cb:7e:b8:
         e4:3b:ae:f1:a7:cb:b4:b9:e3:47:f7:ef:1f:e0:5c:03:e7:9f:
         d9:46:9d:03:e0:e3:28:26:29:57:b9:6c:1d:ad:92:e4:fb:d6:
         85:9a:aa:bc:1d:c4:08:71:6e:39:04:b1:57:ae:58:eb:fe:aa:
         20:ec:74:97:58:1e:39:b7:fd:4e:66:16:1c:47:60:e5:a7:c0:
         58:f8:88:de:75:a1:b3:14:8c:85:5f:46:1a:c1:44:3f:3e:01:
         bf:35:0c:be:f3:d2:86:3f:d6:cf:53:32:c7:c6:15:97:c7:ed:
         13:8a:ed:a2:a0:aa:51:02:7e:3a:20:49:d3:73:b3:66:17:2d:
         3e:41:63:87:89:ee:a9:9a:de:df:92:9f:9d:59:93:a3:42:c5:
         4b:3c:39:f7:eb:50:20:41:8e:78:e8:67:8b:f5:04:33:eb:fe:
         36:2a:6f:7c:c1:bf:bb:5b:cd:62:5d:9d:73:f2:7a:47:93:ba:
         7f:da:6a:87:12:11:65:5c:41:f4:ca:3d:6c:64:1f:98:0b:0b:
         06:bf:6e:90:25:de:68:c7:59:44:71:54:3d:3a:89:c4:7f:12:
         c3:7f:4d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:23:03 2024 by rpki-client on console-fra.rpki-client.org