Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/cbca4450-20f9-32e6-bc57-fc70588eee82.roa
File:                     cbca4450-20f9-32e6-bc57-fc70588eee82.roa (raw, json)
Hash identifier:          +z1i3Ik3ugvg+N3itc3V7sOIOA2xZsdBL6IRGS22C2Q=
Subject key identifier:   C4:4E:FA:45:5B:BA:70:24:3C:29:22:07:41:0F:58:26:B7:F0:24:CC
Certificate issuer:       /CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d
Certificate serial:       010D0C9F432858476C9DBD0BF4FAD5187DD72100
Authority key identifier: EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/cbca4450-20f9-32e6-bc57-fc70588eee82.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     27446
IP address blocks:        2001:4850::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9d:bd:0b:f4:fa:d5:18:7d:d7:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=4ae70c4b-985a-4e66-a943-85b842d0ebfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:3e:a3:54:bb:9e:5b:e6:b3:2f:85:6f:af:63:
                    b7:a5:3d:08:18:fe:2c:49:f3:3c:b3:00:18:5f:e6:
                    e2:74:d9:7a:61:0b:77:8e:2a:87:f4:61:8c:5f:15:
                    07:ff:3c:80:d5:ff:cf:9f:0e:bc:bf:82:73:12:4c:
                    43:09:76:83:7c:1d:5b:a0:b1:2d:a7:5a:c0:20:4b:
                    e3:a7:7a:12:11:75:9e:e5:45:db:20:c5:7b:16:29:
                    95:f1:49:c8:1f:a0:99:59:2a:4a:90:00:49:7a:3a:
                    03:18:89:87:e2:8a:d3:27:e4:56:1b:58:2d:14:7b:
                    00:1b:a6:2d:90:4e:b8:f5:46:30:75:65:b5:7e:ba:
                    9d:85:41:d2:c1:ea:bc:46:43:af:6d:45:4a:12:f5:
                    3f:31:73:8a:47:e5:6b:54:cd:4f:66:58:d6:94:7b:
                    7d:02:20:50:17:8a:0b:d3:67:0f:b6:22:81:a7:f7:
                    90:62:2b:80:4d:7f:9e:0a:80:31:39:a7:4e:c3:17:
                    25:8c:8b:ea:09:f0:2d:59:b6:c9:f1:a5:e8:bd:8b:
                    41:16:4b:40:f4:98:2e:a7:d2:b8:dd:ff:cc:ee:e7:
                    e6:5c:0e:8f:fa:5d:f3:01:99:d5:0f:51:8d:3e:2a:
                    08:d6:e4:f7:86:80:c7:5c:d9:94:df:18:1b:eb:df:
                    a5:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:4E:FA:45:5B:BA:70:24:3C:29:22:07:41:0F:58:26:B7:F0:24:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/cbca4450-20f9-32e6-bc57-fc70588eee82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.crl

            X509v3 Authority Key Identifier:
                keyid:EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4850::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:52:5e:ec:8f:dd:86:e2:4e:7f:90:bc:9a:33:1c:6d:ee:0d:
         74:54:75:db:84:33:6c:90:90:8d:12:85:dd:6b:e7:46:3a:5a:
         ac:49:65:ce:c9:06:5a:e0:e7:96:e6:86:74:1f:c4:da:17:01:
         b1:ed:a7:26:dc:05:f5:ca:28:c9:fb:93:6d:7a:0b:06:40:e3:
         2c:71:10:fd:89:81:7a:40:fc:65:71:5d:64:c2:d6:67:08:61:
         e9:a7:5e:00:42:8c:4b:f2:99:0d:35:12:d2:b1:11:bd:87:68:
         df:f6:c8:e3:cc:26:22:21:fe:ac:d5:47:be:99:ef:f0:9c:b9:
         5f:a3:11:99:27:60:57:75:85:97:a3:df:72:9b:a1:ee:64:1b:
         a4:1f:2f:25:98:b3:f8:7b:60:24:b7:66:ba:37:5e:e5:90:71:
         61:e2:2d:bd:2e:f4:79:28:76:5e:17:c4:cc:c0:e5:b8:f0:2e:
         85:d2:c6:5a:40:ee:0f:26:71:e4:a0:5e:ac:4c:6a:18:d2:78:
         9c:6c:b1:1b:d9:7f:bb:50:62:4e:e0:7f:60:80:0f:f9:8d:85:
         c7:01:66:3b:83:ab:9f:23:b0:17:b4:31:3d:5a:09:4e:5d:6d:
         15:75:14:cf:c9:e5:e5:8c:ba:09:33:a2:7d:cf:02:43:88:0c:
         ba:e4:04:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:39:19 2024 by rpki-client on console-ams.rpki-client.org