Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/f590dd2d-63b1-3e0b-9e7f-e4af95d55385.roa
File:                     f590dd2d-63b1-3e0b-9e7f-e4af95d55385.roa (raw, json)
Hash identifier:          gedujVUKBf6eEP43KP60sE/fI97qbnvDdBO+u9kaUqw=
Subject key identifier:   4E:B6:AF:2A:76:E6:94:C2:DE:8E:CA:F4:C8:73:1F:A0:A6:DE:E6:85
Certificate issuer:       /CN=cb49febe-7885-4a3a-8290-3710b3f34905
Certificate serial:       010D0C9F432858474FEB479FF016030F9656A2F3
Authority key identifier: BC:E1:B3:66:4C:39:9B:46:8C:0D:19:86:EB:B2:97:DC:97:D0:19:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/f590dd2d-63b1-3e0b-9e7f-e4af95d55385.roa
Signing time:             Mon 23 Sep 2024 18:22:52 +0000
ROA not before:           Mon 23 Sep 2024 18:22:52 +0000
ROA not after:            Sun 22 Dec 2024 19:22:52 +0000
asID:                     376
IP address blocks:        2001:510:302::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/cb49febe-7885-4a3a-8290-3710b3f34905.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/cb49febe-7885-4a3a-8290-3710b3f34905.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4f:eb:47:9f:f0:16:03:0f:96:56:a2:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb49febe-7885-4a3a-8290-3710b3f34905
        Validity
            Not Before: Sep 23 18:22:52 2024 GMT
            Not After : Dec 22 19:22:52 2024 GMT
        Subject: CN=50b6c934-9e6d-479e-8e29-ce38c9f760ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c5:f6:c2:66:5f:72:7f:41:f6:8d:d0:64:8a:
                    86:f0:15:c6:7a:db:23:78:3b:72:20:5c:01:57:bb:
                    97:c9:0d:82:a1:02:04:29:42:e8:e9:b0:64:83:48:
                    94:02:75:13:55:69:48:b3:bf:63:f9:37:89:e6:2d:
                    aa:2d:73:97:6c:d6:c8:a9:f6:ba:6a:e4:59:1d:47:
                    82:cd:d8:f7:7a:b5:ee:3a:2d:55:94:23:a8:83:7f:
                    58:71:4e:66:c1:f6:5d:4d:b7:a7:59:a6:f5:10:5f:
                    36:d1:9a:fd:c8:de:0b:81:98:9f:4d:ad:8b:55:b4:
                    a4:24:52:c1:1f:f3:a9:61:46:7b:fa:bc:76:59:43:
                    38:cb:1d:2d:41:a5:3e:71:f8:d2:b6:83:4a:48:c5:
                    6e:49:90:1b:cd:1b:38:c5:57:03:f3:1e:95:25:b9:
                    25:1d:99:e3:56:ff:a5:ef:1a:b8:fd:0d:95:d2:cf:
                    f8:8d:57:b2:c7:d2:81:c9:a5:82:d1:29:33:56:2e:
                    10:39:12:ab:1f:18:0e:98:64:43:57:cb:69:00:16:
                    cf:b5:37:08:33:af:5e:49:88:3e:97:2c:11:7c:2b:
                    94:04:38:ac:51:78:40:51:2a:da:29:b1:57:28:7e:
                    d0:58:1f:1b:d7:f6:ac:14:b3:ae:7a:8a:9d:11:73:
                    05:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:B6:AF:2A:76:E6:94:C2:DE:8E:CA:F4:C8:73:1F:A0:A6:DE:E6:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/f590dd2d-63b1-3e0b-9e7f-e4af95d55385.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/cb49febe-7885-4a3a-8290-3710b3f34905.crl

            X509v3 Authority Key Identifier:
                keyid:BC:E1:B3:66:4C:39:9B:46:8C:0D:19:86:EB:B2:97:DC:97:D0:19:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:510:302::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:1e:5b:bb:df:7c:75:f3:c7:97:75:58:28:8c:0f:94:2e:77:
         79:0c:68:72:ba:e0:53:b1:71:d2:90:fa:96:25:63:07:6f:5a:
         33:c3:99:24:ab:78:63:fd:30:11:cb:f2:22:db:f9:ac:87:d6:
         50:2d:11:f2:28:f7:dd:cb:6b:fa:60:ea:fe:39:6b:3a:ff:69:
         94:e4:0d:dc:ab:10:0e:60:ca:00:54:f7:c9:86:d5:c4:ac:bb:
         a0:06:6d:23:14:d7:58:6f:61:3a:bf:8a:77:83:f7:d9:09:c2:
         44:75:73:92:d3:07:d2:b9:b0:62:e7:9a:59:9b:d2:ff:38:72:
         22:98:47:d1:e0:60:28:3f:ae:06:7a:07:b1:87:f5:6e:77:bf:
         3f:65:e0:4b:a6:94:b1:a6:91:35:3d:57:fc:20:6e:47:3e:4f:
         90:49:86:97:c5:05:1b:8f:19:27:b1:10:a7:5e:db:db:cd:93:
         f3:32:1d:57:67:ff:85:8c:10:17:e1:6c:df:9f:36:98:4a:b3:
         37:a7:7b:5a:2c:f9:90:7f:a5:05:a7:1b:82:e7:f8:14:69:56:
         1e:13:b7:d3:45:5d:86:17:54:40:5a:35:15:47:67:f9:ac:d3:
         fe:38:8f:19:dd:95:8f:e6:f6:95:28:cd:6a:e7:c7:a3:09:6b:
         ab:49:e5:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:25:10 2024 by rpki-client on console-fra.rpki-client.org