Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/df5148de-ede2-3842-905b-9207fff8922c.roa
File:                     df5148de-ede2-3842-905b-9207fff8922c.roa (raw, json)
Hash identifier:          dm7L9EUDBHFxUWTxJPrrckvQ8t35DX2GHWjoEfblHBo=
Subject key identifier:   A6:82:A7:49:2E:B8:F2:85:F8:23:E1:85:7D:88:AF:80:C9:2D:79:EC
Certificate issuer:       /CN=4931e717-c1d1-4dd8-863d-5c06fb76f47b
Certificate serial:       010D0C9F4328584797E14303D9D070FAC21D6120
Authority key identifier: CE:42:FE:71:11:71:C3:49:1B:8D:B6:7B:74:E4:1F:4F:E2:91:DE:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/df5148de-ede2-3842-905b-9207fff8922c.roa
Signing time:             Sat 19 Oct 2024 13:00:42 +0000
ROA not before:           Sat 19 Oct 2024 13:00:42 +0000
ROA not after:            Fri 17 Jan 2025 14:00:42 +0000
asID:                     21713
IP address blocks:        2605:c380::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:97:e1:43:03:d9:d0:70:fa:c2:1d:61:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4931e717-c1d1-4dd8-863d-5c06fb76f47b
        Validity
            Not Before: Oct 19 13:00:42 2024 GMT
            Not After : Jan 17 14:00:42 2025 GMT
        Subject: CN=2bdcf7f2-2ff0-4886-830c-a4d856dd9393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:88:a8:09:b1:c2:3a:25:17:ae:a1:21:e9:6c:
                    0d:89:78:78:b0:7d:97:2e:13:81:0e:3b:7a:54:fa:
                    d1:01:57:79:10:71:3b:73:6b:d8:fb:b2:f3:1d:63:
                    a2:4d:91:75:05:99:d3:b7:8c:a3:c0:43:a0:d6:8c:
                    0d:66:38:bb:c4:cc:36:e8:14:8f:86:7a:fe:8b:96:
                    13:19:6b:8b:69:e7:11:31:88:60:86:01:34:ee:de:
                    02:d0:b5:e6:d0:5f:54:5b:2e:35:c7:47:2e:88:84:
                    12:b1:02:b7:2f:5f:59:5b:29:e5:2d:e7:1f:f7:96:
                    3b:a8:52:f9:15:2f:cb:5d:76:24:2a:90:d2:92:59:
                    3d:bf:f9:88:43:01:31:6b:74:11:04:b3:29:df:5c:
                    91:99:89:d0:d8:53:be:e9:4b:61:a9:2f:a3:30:63:
                    c3:8f:88:fd:75:fe:71:fd:67:ec:68:cb:7e:9f:1b:
                    9f:eb:a3:de:be:c7:8e:6a:b4:fc:ae:1c:84:ed:6b:
                    0d:3d:b9:17:f4:ca:0a:6d:9e:51:e2:e1:fa:f5:23:
                    b1:79:e6:c7:ab:df:56:70:42:c6:6b:5b:83:05:f3:
                    a4:f6:36:46:1b:ff:71:0a:98:a0:cb:04:ee:ad:88:
                    e6:6e:5b:8a:4b:8a:84:be:b6:1b:dc:3a:f6:63:d3:
                    0e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:82:A7:49:2E:B8:F2:85:F8:23:E1:85:7D:88:AF:80:C9:2D:79:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/df5148de-ede2-3842-905b-9207fff8922c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.crl

            X509v3 Authority Key Identifier:
                keyid:CE:42:FE:71:11:71:C3:49:1B:8D:B6:7B:74:E4:1F:4F:E2:91:DE:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:c380::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:28:14:e1:df:9c:89:fc:7b:4e:29:ca:de:b1:08:c2:72:ec:
         d3:d0:db:dc:42:3e:72:db:02:90:f5:97:d7:6a:45:cb:a9:03:
         68:99:84:54:e6:a9:78:79:9e:21:46:d6:7e:e0:a2:79:ce:f9:
         64:14:68:0c:ef:e6:48:e0:09:d7:01:ca:6a:a1:40:96:5a:6c:
         9b:23:1d:16:0d:0b:e4:2f:8c:df:90:88:42:e8:54:08:d6:ee:
         39:02:d8:29:60:ba:d5:be:e4:d9:85:3a:58:68:68:3a:eb:1e:
         45:63:5e:02:15:c1:87:fb:2f:d3:e6:09:c2:86:e1:d8:e7:25:
         12:9a:70:3b:91:fc:74:27:2d:a4:a4:98:72:bf:4f:e9:f2:4e:
         e7:72:88:53:11:d6:e7:49:a9:18:28:53:f6:64:46:d0:b6:4f:
         6a:f5:c4:41:64:c6:21:db:68:d2:5c:3a:bb:e5:cf:e4:9a:f8:
         e9:33:97:73:2b:02:7c:ce:43:99:7e:58:18:cd:2d:49:00:cb:
         7f:e3:c2:ae:dd:75:8d:c5:3b:ae:d6:64:de:13:e7:4f:8b:df:
         79:e8:a1:4d:ac:98:ba:b7:db:3c:de:fc:83:bf:50:49:46:52:
         1f:fe:f5:30:4e:9e:ad:e1:9a:b3:d0:25:0c:8b:56:9f:8e:07:
         59:04:61:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 16:03:21 2024 by rpki-client on console-ams.rpki-client.org