Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c/2fc8f455-2632-3f35-9046-77d0559fc266.roa
File:                     2fc8f455-2632-3f35-9046-77d0559fc266.roa (raw, json)
Hash identifier:          VjfAkz3dwdk3H4Nxf10GAhHHPNJU+9GlX7vIF59+GaE=
Subject key identifier:   AC:5A:CD:16:E8:C9:CF:1E:53:34:30:E6:16:F1:5E:2F:BD:E1:4E:F1
Certificate issuer:       /CN=4ab53067-4493-47ab-bcf2-7fa9ad46579c
Certificate serial:       010D0C9F43285846F1720273049290212DD32700
Authority key identifier: AE:FD:6E:3F:D6:AE:31:B2:0C:6E:7B:C6:38:A5:2F:3A:28:53:4B:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c/2fc8f455-2632-3f35-9046-77d0559fc266.roa
Signing time:             Tue 20 Aug 2024 22:12:32 +0000
ROA not before:           Tue 20 Aug 2024 22:12:32 +0000
ROA not after:            Mon 18 Nov 2024 23:12:32 +0000
asID:                     2055
IP address blocks:        2607:f390:1440::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c/4ab53067-4493-47ab-bcf2-7fa9ad46579c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c/4ab53067-4493-47ab-bcf2-7fa9ad46579c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Sep 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:f1:72:02:73:04:92:90:21:2d:d3:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab53067-4493-47ab-bcf2-7fa9ad46579c
        Validity
            Not Before: Aug 20 22:12:32 2024 GMT
            Not After : Nov 18 23:12:32 2024 GMT
        Subject: CN=f0071235-219f-45e3-9707-b36d1e5ede4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:74:02:b4:1b:3e:85:26:5c:f4:56:88:f9:31:
                    03:bf:e5:62:c3:0b:20:19:cc:8b:68:10:32:7b:5f:
                    9d:e1:15:c2:ca:7f:f9:55:ae:e7:9b:73:2c:c6:1b:
                    1b:8a:ed:b7:1d:0e:c0:8e:e1:84:00:85:3e:3b:ce:
                    5a:e0:97:3b:8e:4e:39:ed:bd:49:4e:98:a2:c9:53:
                    37:0e:57:75:2d:78:c5:ba:24:36:27:c9:8b:43:00:
                    81:ac:4f:86:b1:6e:39:d1:60:ab:24:11:3a:2c:9a:
                    49:09:30:43:7d:05:7e:02:1c:9c:d6:8a:73:3c:87:
                    de:ee:3a:51:6f:f1:9a:e6:15:10:a8:c0:79:05:64:
                    c4:39:f7:42:a7:bf:82:d6:f0:20:a0:85:7f:09:7c:
                    8a:09:95:59:84:90:5b:bf:7c:6d:7f:e1:68:c9:fa:
                    03:8d:02:1d:a6:eb:c4:2b:6a:0e:91:15:29:d9:f7:
                    2c:76:e5:2d:3d:62:94:31:f0:0f:76:0d:b1:f4:b4:
                    ce:7b:3a:72:28:3d:1e:b1:9b:9d:8f:6d:e5:e3:c3:
                    3f:8a:0f:b9:71:99:bb:82:65:5d:6e:7f:e9:f4:be:
                    88:6e:ee:e7:00:1b:7f:6f:42:b5:7d:8d:5d:a3:b3:
                    6b:37:e1:db:b1:e9:b0:bb:e0:22:31:32:60:2a:3c:
                    bf:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:5A:CD:16:E8:C9:CF:1E:53:34:30:E6:16:F1:5E:2F:BD:E1:4E:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c/2fc8f455-2632-3f35-9046-77d0559fc266.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c/4ab53067-4493-47ab-bcf2-7fa9ad46579c.crl

            X509v3 Authority Key Identifier:
                keyid:AE:FD:6E:3F:D6:AE:31:B2:0C:6E:7B:C6:38:A5:2F:3A:28:53:4B:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f390:1440::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:f2:12:18:45:92:29:46:18:bd:63:52:d5:a2:d6:e2:dd:ad:
         9f:a9:3f:8f:02:06:d3:af:65:3c:0e:09:91:b4:c3:9c:a1:38:
         0c:2f:0e:1d:d2:85:ae:48:00:ec:5f:c5:8a:7a:10:c0:17:ef:
         25:55:22:a1:52:59:c5:5d:15:0f:73:95:35:50:4e:00:8a:43:
         f0:a6:e6:98:61:97:48:06:4b:78:17:26:0f:53:82:e9:f5:62:
         f7:9b:f6:ae:9d:fd:d2:7f:20:c6:5d:5f:29:c3:90:56:cb:e1:
         89:da:9c:b2:44:ec:50:ce:38:db:2d:f0:12:21:67:7d:51:b3:
         98:7a:f6:2a:c5:fd:96:6f:70:44:b4:36:63:ee:1e:58:54:b2:
         4c:d3:e1:95:13:84:4f:aa:10:ca:f9:34:e1:86:a1:12:f5:f9:
         00:04:a3:c0:37:29:fe:f8:7a:59:7f:36:6d:1e:73:63:af:b7:
         4d:f5:1d:1c:ca:5a:eb:b0:8e:df:de:18:e3:a2:9a:68:d5:e4:
         c8:39:f8:92:85:03:da:9b:3b:be:20:5c:c3:77:44:6f:5e:22:
         cd:54:b0:2f:7c:49:4f:3b:83:33:2c:95:cd:5e:c5:ef:b5:dc:
         d9:df:8a:ba:fe:b3:88:e1:1b:f1:8e:a6:8b:6c:0e:fa:8c:78:
         22:bc:5a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 05:59:11 2024 by rpki-client on console-fra.rpki-client.org