Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/7e8917db-fb5e-33a3-9add-8c1dc42f27d8.roa
File:                     7e8917db-fb5e-33a3-9add-8c1dc42f27d8.roa (raw, json)
Hash identifier:          p40CcL7mwOv6E8FNuKhFGBRQGLLUxDozk2CciCVrxwM=
Subject key identifier:   78:30:D4:BF:39:78:67:58:3B:5B:A7:8A:56:25:C1:FC:D7:BC:C5:BB
Certificate issuer:       /CN=da0b54d4-921a-405a-8c7a-6aa1dcb263ea
Certificate serial:       010D0C9F43285847D40492682D253A637D25C380
Authority key identifier: 04:BF:3B:6B:DE:61:C1:E7:75:29:6F:0B:70:E8:23:14:D8:1B:BC:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/7e8917db-fb5e-33a3-9add-8c1dc42f27d8.roa
Signing time:             Sun 10 Nov 2024 02:00:27 +0000
ROA not before:           Sun 10 Nov 2024 02:00:27 +0000
ROA not after:            Sat 08 Feb 2025 02:00:27 +0000
asID:                     395403
IP address blocks:        2620:4d:400a::/48 maxlen: 48
                          2620:4d:4021::/48 maxlen: 48
                          2620:4d:402f::/48 maxlen: 48
                          2620:4d:4030::/48 maxlen: 48
                          2620:4d:4031::/48 maxlen: 48
                          2620:4d:4032::/48 maxlen: 48
                          2620:4d:4033::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d4:04:92:68:2d:25:3a:63:7d:25:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da0b54d4-921a-405a-8c7a-6aa1dcb263ea
        Validity
            Not Before: Nov 10 02:00:27 2024 GMT
            Not After : Feb  8 02:00:27 2025 GMT
        Subject: CN=d025ff1c-bcf8-4485-8e46-d571cff274ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:79:18:06:a4:ff:51:4d:3a:15:e3:47:56:90:
                    5d:df:b4:a9:39:7e:56:76:42:c4:5c:0d:0b:fc:ba:
                    20:8d:7c:92:72:63:31:23:58:3e:35:78:a5:36:ea:
                    4d:55:b2:cb:08:f5:0e:92:bf:bf:bd:2d:81:b6:99:
                    39:40:3c:2a:fe:d7:34:ea:57:b1:83:eb:9f:d2:36:
                    e5:67:d3:e8:0c:f0:c1:13:e8:9a:62:7f:01:b8:44:
                    6f:0d:a2:c8:bd:99:3a:a1:91:5e:74:6b:87:40:ad:
                    18:af:d4:a2:08:5b:68:4f:a3:37:9c:3e:e2:80:2c:
                    20:6d:3d:44:c1:ef:d3:5a:83:a2:24:66:a1:e0:ad:
                    53:1a:71:5a:20:b2:ca:30:57:5c:2f:9b:62:e0:93:
                    a1:ce:2d:0c:71:d9:f5:39:bc:77:c2:d3:fa:6d:b3:
                    a2:7f:0a:d7:ed:63:4e:17:02:d0:74:51:fd:fe:2a:
                    d2:cf:4b:0f:36:9b:d3:3a:fc:84:db:00:b3:05:a0:
                    07:1b:00:17:ef:16:52:8b:e2:63:0f:d9:5f:16:50:
                    9a:02:ff:3a:43:ab:26:62:ac:3c:5b:8d:62:a6:a0:
                    b0:84:b2:ce:cf:03:8c:fe:15:bf:63:b3:b2:7d:4d:
                    9a:b7:e6:52:01:73:51:46:84:a0:0e:2a:29:63:bc:
                    a0:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:30:D4:BF:39:78:67:58:3B:5B:A7:8A:56:25:C1:FC:D7:BC:C5:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/7e8917db-fb5e-33a3-9add-8c1dc42f27d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.crl

            X509v3 Authority Key Identifier:
                keyid:04:BF:3B:6B:DE:61:C1:E7:75:29:6F:0B:70:E8:23:14:D8:1B:BC:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:4d:400a::/48
                  2620:4d:4021::/48
                  2620:4d:402f::-2620:4d:4033:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:2f:76:26:d4:6b:2f:e5:64:0c:9d:ac:0a:37:f2:af:9c:32:
         59:a9:25:50:a6:07:da:fe:30:5f:dc:cd:71:0f:7b:44:23:c1:
         df:9f:c5:78:95:08:7e:4f:7f:de:ec:39:1d:b1:c4:e4:8c:bf:
         19:70:ca:ed:48:d8:36:28:9e:76:fc:36:33:57:52:fb:55:d6:
         fa:fb:32:1e:2a:d2:25:ec:ba:1f:ce:31:51:05:d9:6e:06:e1:
         49:31:a7:08:46:70:40:65:43:95:f6:62:1c:6f:51:b9:95:a2:
         18:24:61:e6:ed:11:c2:b8:e1:15:04:42:d0:ae:9d:60:c7:dc:
         90:01:df:17:c4:95:e0:4d:47:38:06:76:26:b7:56:18:b5:53:
         82:9d:ef:74:16:41:c2:9b:6f:04:b8:8e:47:a1:4f:85:28:4c:
         0f:56:89:2e:48:17:0f:4e:12:94:b2:ad:a4:bd:fd:ad:94:c5:
         ea:8b:0d:fa:0c:0a:c6:f4:4c:c7:2b:8d:68:d3:09:a6:81:34:
         8d:37:39:2c:5e:f9:e2:69:ec:8f:2a:8c:4e:6e:0a:6f:ce:b7:
         18:aa:a2:de:bc:7f:b8:8e:26:41:0b:e3:a3:a2:ff:d6:af:5a:
         54:65:53:90:41:3d:6e:d4:74:a5:df:84:e6:9b:da:cb:3a:b9:
         b5:09:a9:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:24:28 2024 by rpki-client on console-fra.rpki-client.org