Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/95f84eb9-bf21-3413-a217-d56b009e4492.roa
File:                     95f84eb9-bf21-3413-a217-d56b009e4492.roa (raw, json)
Hash identifier:          q1B9F5AEBE5hmO5pF6wzXrgAY9SBKRxlLR0FTBxKgOs=
Subject key identifier:   47:D3:CE:71:D2:4F:5E:3D:CD:B6:22:BC:F1:EC:0D:92:6F:50:CC:EE
Certificate issuer:       /CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d
Certificate serial:       010D0C9F4328584746F3A7F32CC1371073899B80
Authority key identifier: EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/95f84eb9-bf21-3413-a217-d56b009e4492.roa
Signing time:             Fri 20 Sep 2024 13:17:28 +0000
ROA not before:           Fri 20 Sep 2024 13:17:28 +0000
ROA not after:            Thu 19 Dec 2024 14:17:28 +0000
asID:                     27446
IP address blocks:        2001:4850:f000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:46:f3:a7:f3:2c:c1:37:10:73:89:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d
        Validity
            Not Before: Sep 20 13:17:28 2024 GMT
            Not After : Dec 19 14:17:28 2024 GMT
        Subject: CN=6945f5c5-e679-4640-9fcf-5a5e27247c11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:1e:ee:46:33:dc:95:6c:1e:2b:ab:12:e7:f5:
                    0f:20:71:88:4b:54:42:c8:6a:de:6e:b5:34:cb:68:
                    bc:0d:ea:4a:4c:e9:1b:5a:b1:b2:d2:a5:b6:ae:fc:
                    28:8b:49:0e:1e:e5:ce:fc:8e:09:62:d2:2f:e6:a1:
                    16:04:a7:54:f3:88:a5:f0:04:30:d6:b6:87:46:27:
                    7d:74:f5:b7:6c:ae:a3:25:2a:42:50:26:87:e4:86:
                    1f:64:9c:c6:b0:6c:3c:ce:39:14:48:e8:4a:5f:e5:
                    36:09:a7:70:4e:60:73:b4:ef:55:7e:41:b4:17:e2:
                    75:85:58:97:6a:c3:58:4d:5f:93:ea:be:e2:e3:36:
                    93:d3:41:f2:11:a5:7e:48:d2:da:d0:e1:82:45:3f:
                    66:a7:6b:ed:17:1a:f3:b3:fc:cf:80:31:56:f2:ed:
                    8a:85:9a:ae:5e:a7:f6:dd:f3:2c:7f:17:cc:32:3d:
                    41:8e:ef:91:89:ca:e4:9e:d8:33:07:4c:ef:52:f5:
                    80:70:cf:de:6d:81:9e:89:b8:e5:0f:01:66:dc:6a:
                    fb:4d:d1:b2:66:e6:4b:a1:75:bf:2b:3f:32:a0:35:
                    ce:3b:d5:e4:e8:e7:c3:9c:af:45:d6:ca:e8:36:29:
                    a8:07:b0:77:ec:02:b4:e3:fd:a6:ad:8f:ad:38:d6:
                    c8:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:D3:CE:71:D2:4F:5E:3D:CD:B6:22:BC:F1:EC:0D:92:6F:50:CC:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/95f84eb9-bf21-3413-a217-d56b009e4492.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.crl

            X509v3 Authority Key Identifier:
                keyid:EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4850:f000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cf:94:ce:49:d5:05:ab:bf:ad:0c:19:58:38:6c:74:b3:73:f1:
         34:29:b9:72:7e:ba:fd:e0:ca:dc:31:06:7f:8f:f7:da:83:ce:
         5f:a6:b5:ca:cd:3b:07:9b:64:f6:98:ff:97:ea:20:eb:da:01:
         24:8b:1c:16:35:52:55:1b:e2:3f:f2:6e:8e:8a:44:80:d6:f4:
         4a:00:41:e6:2a:7f:2e:b6:c2:71:5b:92:8b:5f:a2:50:bc:18:
         58:b0:ac:c8:aa:5b:f4:b1:f4:ab:31:07:87:28:95:dc:b6:7c:
         1e:b8:04:c3:c5:57:4b:0a:bd:bb:d8:58:27:1e:af:5f:f5:f7:
         c2:c3:d8:78:c4:0b:45:18:32:24:21:58:1c:96:01:9f:80:e6:
         90:32:7c:e6:1e:0c:03:a4:65:1a:db:b1:76:cd:1e:5f:65:73:
         0d:5d:53:cb:8c:26:1e:d1:8d:cf:4d:a1:7c:98:5d:f1:00:30:
         fa:22:54:da:1c:c8:04:36:b3:5a:d1:fe:e9:a9:c8:d3:3c:6b:
         5d:f3:17:71:91:bc:79:40:a1:07:89:2b:03:2f:2b:56:d1:a4:
         b8:ef:45:83:7d:ed:ff:e1:b3:c9:0f:c0:05:60:ff:4b:14:65:
         60:34:fb:95:e6:cb:b1:a8:4e:fd:1d:03:a8:9b:24:20:8f:22:
         1d:f6:55:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:39:19 2024 by rpki-client on console-ams.rpki-client.org