Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/3d2f377f-1667-3064-a226-3cf473e49e64.roa
File:                     3d2f377f-1667-3064-a226-3cf473e49e64.roa (raw, json)
Hash identifier:          d4V5UIjgEMz3lDGA7Q4HM/OPt2s4+/2rH47u3VUzWS4=
Subject key identifier:   C8:3C:F4:7B:A1:4D:35:75:F8:6D:DB:6A:BB:9D:9E:AF:50:EC:F2:27
Certificate issuer:       /CN=cb49febe-7885-4a3a-8290-3710b3f34905
Certificate serial:       010D0C9F432858475021426206BED79B04E49840
Authority key identifier: BC:E1:B3:66:4C:39:9B:46:8C:0D:19:86:EB:B2:97:DC:97:D0:19:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/3d2f377f-1667-3064-a226-3cf473e49e64.roa
Signing time:             Mon 23 Sep 2024 20:11:38 +0000
ROA not before:           Mon 23 Sep 2024 20:11:38 +0000
ROA not after:            Sun 22 Dec 2024 21:11:38 +0000
asID:                     376
IP address blocks:        2001:510:108::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/cb49febe-7885-4a3a-8290-3710b3f34905.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/cb49febe-7885-4a3a-8290-3710b3f34905.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:50:21:42:62:06:be:d7:9b:04:e4:98:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb49febe-7885-4a3a-8290-3710b3f34905
        Validity
            Not Before: Sep 23 20:11:38 2024 GMT
            Not After : Dec 22 21:11:38 2024 GMT
        Subject: CN=c93f0771-0d96-4283-9a4b-b20dec348827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:d2:f9:a7:64:c9:54:e6:0e:48:c6:e6:5e:e5:
                    cb:c5:d1:38:2b:e5:ce:f4:ec:16:b3:08:be:a2:28:
                    9b:13:c3:2c:60:ee:73:1a:f3:03:b6:cf:cc:75:22:
                    51:fa:d7:ac:1b:d1:ae:09:c3:d4:78:31:73:18:1a:
                    d6:06:46:5f:d5:de:a2:24:d8:ee:45:ad:65:76:89:
                    a5:6c:0b:51:05:30:aa:7e:67:f6:24:55:3f:04:a4:
                    22:18:48:f2:4c:fd:ae:de:42:39:be:c8:51:23:76:
                    19:fe:51:eb:22:81:5a:c0:5c:bd:0f:55:70:89:e1:
                    4b:80:83:9d:b0:d1:2e:01:4c:ec:b0:70:74:59:c6:
                    9f:f1:92:ea:ce:eb:d2:e4:1c:2e:e8:aa:f6:db:0d:
                    54:b8:5e:6b:ea:fc:f4:cd:86:9d:60:cc:a1:a4:ae:
                    e5:b9:51:06:f7:85:61:74:06:b4:4c:ff:a0:c2:88:
                    da:e6:0c:1b:34:5b:03:ad:78:4f:85:04:a0:46:ee:
                    4f:7e:49:94:3a:54:c0:f6:6c:f5:32:d7:e4:fb:87:
                    56:07:d1:7b:2e:74:e6:51:d7:ad:9a:96:7e:07:01:
                    8f:21:33:5b:d1:52:dd:44:f2:1c:02:32:5c:e3:9d:
                    c7:3e:5a:29:13:15:b1:c4:f5:d9:50:91:f5:57:30:
                    de:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:3C:F4:7B:A1:4D:35:75:F8:6D:DB:6A:BB:9D:9E:AF:50:EC:F2:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/3d2f377f-1667-3064-a226-3cf473e49e64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/cb49febe-7885-4a3a-8290-3710b3f34905.crl

            X509v3 Authority Key Identifier:
                keyid:BC:E1:B3:66:4C:39:9B:46:8C:0D:19:86:EB:B2:97:DC:97:D0:19:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:510:108::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:b6:72:c2:50:89:9e:be:55:87:74:3c:71:07:19:62:35:00:
         a6:96:8d:ba:4a:cf:eb:16:d3:a7:aa:7c:b8:d4:a3:d3:c8:ec:
         07:6d:e5:f6:33:af:5c:0d:ec:d3:44:5a:63:85:b1:db:e6:0d:
         2a:6f:d5:c2:46:2e:93:b2:af:b5:41:ec:15:88:f6:3b:fa:10:
         33:0b:19:b5:4f:67:96:19:18:9a:f4:df:d2:72:f9:1d:29:48:
         cf:b9:89:0a:17:7e:1b:7c:be:67:cf:a3:a1:5a:23:20:c7:64:
         23:1d:29:3d:91:a4:c4:4b:c9:27:95:a4:0e:6e:a8:65:ae:29:
         75:45:c4:d3:42:b5:8f:c5:f4:35:fd:04:cc:1e:7c:3d:06:ca:
         de:3b:52:ed:05:88:d9:73:39:d2:7c:c5:7d:31:de:e6:5d:89:
         86:68:71:e7:e0:bc:b3:2b:69:fc:99:5d:b6:6b:e1:59:71:3f:
         0d:17:58:0f:aa:e9:32:f2:a4:48:a7:4a:b6:68:e7:85:46:f1:
         fe:d9:1e:05:b8:06:73:96:9a:c2:f9:29:c5:08:41:7b:87:3b:
         cb:ef:df:ab:0e:3e:0e:85:97:f3:06:df:68:ad:19:4a:a2:68:
         61:3f:3c:df:73:1c:93:a7:55:20:d5:20:95:0f:1d:5d:56:2a:
         66:a9:f1:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:40:03 2024 by rpki-client on console-ams.rpki-client.org