Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/8870644e-30b4-3e41-9fe2-f378575547f3.roa
File:                     8870644e-30b4-3e41-9fe2-f378575547f3.roa (raw, json)
Hash identifier:          IyLKbJEavQ+5x0mxtKVFQR1SHsIrFtxVQp/MTi/gFQo=
Subject key identifier:   43:9A:65:A9:FF:BA:E4:41:63:D5:AE:14:83:C9:4D:94:FE:B9:83:B3
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F4328584774FB97ADC524E52824290500
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/8870644e-30b4-3e41-9fe2-f378575547f3.roa
Signing time:             Mon 07 Oct 2024 01:00:31 +0000
ROA not before:           Mon 07 Oct 2024 01:00:31 +0000
ROA not after:            Sun 05 Jan 2025 02:00:31 +0000
asID:                     11055
IP address blocks:        2605:4a80:ef80::/41 maxlen: 41

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:74:fb:97:ad:c5:24:e5:28:24:29:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: Oct  7 01:00:31 2024 GMT
            Not After : Jan  5 02:00:31 2025 GMT
        Subject: CN=6354b4e9-205d-4042-a4ab-828e0174e896
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:60:af:47:d0:e5:6b:d7:42:84:c2:a7:eb:ae:
                    d5:6f:cd:61:ee:51:0d:18:82:49:22:16:99:d1:4c:
                    ce:c1:04:25:0a:dc:b1:6a:e1:ac:36:d8:ef:5a:52:
                    40:2e:ef:e9:9a:b9:a8:31:8c:f1:df:da:72:31:a5:
                    fd:a6:f7:9f:ca:83:1c:2f:5e:74:3b:9f:26:c3:86:
                    37:10:ae:7c:aa:e7:2b:36:6f:12:00:f9:e1:8d:3e:
                    a6:e8:c3:98:8d:40:cd:81:fb:50:7e:bb:f3:e7:e6:
                    4b:71:65:37:86:f4:c9:93:10:02:be:f8:67:a0:53:
                    93:fe:88:08:36:93:b5:00:f1:26:ab:10:a3:72:46:
                    f5:13:8b:54:53:07:ec:07:33:0c:18:5a:39:f6:43:
                    c9:4e:df:65:6b:60:c0:7a:62:6c:a6:3c:03:cd:bb:
                    58:36:7b:c7:4f:92:14:b6:85:30:42:d8:bc:95:70:
                    52:38:11:7d:a9:cc:85:b3:5a:f7:07:4b:67:74:3b:
                    18:75:c6:aa:69:a2:28:45:21:cf:0c:be:cf:98:43:
                    df:b5:cc:b1:33:38:0c:3e:29:20:06:b4:f1:63:82:
                    36:8d:37:86:0f:ef:a7:ab:33:78:ea:f3:90:2c:06:
                    4e:2c:a8:de:ba:bc:c1:84:0c:92:dc:6d:0e:75:69:
                    31:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:9A:65:A9:FF:BA:E4:41:63:D5:AE:14:83:C9:4D:94:FE:B9:83:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/8870644e-30b4-3e41-9fe2-f378575547f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4a80:ef80::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:fd:42:33:fc:22:40:9d:c5:4a:39:27:95:4f:8f:02:dd:2b:
         43:42:e3:79:9e:b6:ee:b3:1d:95:45:de:f9:6c:a5:c3:62:e2:
         3a:2e:31:c1:19:8f:6f:f1:e6:81:c5:ca:b2:e1:96:77:43:10:
         a6:51:35:aa:18:a2:0c:1b:d2:40:f6:7c:8c:4a:dd:d2:1e:07:
         31:1a:92:70:fb:84:3d:e0:8d:0a:fc:ac:24:e4:1a:98:5c:95:
         d3:c6:47:48:08:47:3f:34:12:30:21:28:2e:9b:19:b2:a3:ca:
         62:aa:83:89:97:49:84:9f:da:f8:1b:49:6f:16:97:8a:2d:2c:
         cf:d8:d1:aa:08:51:c1:66:98:77:0c:97:88:46:b4:e6:8a:3f:
         c4:7c:a1:20:23:f4:62:5f:6c:9c:c1:16:f7:c2:82:41:0c:c8:
         5e:49:1d:a0:68:21:7c:09:cb:d2:f6:86:c1:8a:ee:0b:2d:2c:
         ac:6c:c5:fd:6c:96:68:7f:bf:0b:38:f9:1d:73:ca:ad:b5:a0:
         28:d1:9d:0a:ab:78:3b:ad:36:53:1b:5c:d9:f3:7c:c5:22:e6:
         08:78:a6:01:46:5e:00:22:9c:a8:2d:64:91:62:2a:5e:1c:87:
         0c:b2:79:8e:22:ed:71:da:a6:2e:65:80:05:93:d9:96:20:e4:
         3b:5d:11:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:23:03 2024 by rpki-client on console-fra.rpki-client.org