Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/47bc9f14-b382-49d7-83c7-57ffd2164eea/e5b8e88d-d1c8-3192-8f83-30f1061b40d8.roa
File:                     e5b8e88d-d1c8-3192-8f83-30f1061b40d8.roa (raw, json)
Hash identifier:          2gLHq5BapdKZYEQz3z6pw0bM8BxbO5iYLLJ/UgKBoi0=
Subject key identifier:   A4:90:D0:F2:17:EB:B8:E8:44:AF:DA:53:AF:22:A1:8A:19:62:2D:F6
Certificate issuer:       /CN=47bc9f14-b382-49d7-83c7-57ffd2164eea
Certificate serial:       010D0C9F43285847B10165A90FE6601C7B0848F4
Authority key identifier: CB:93:C8:F7:73:55:9C:E8:AE:6B:79:E3:8E:7E:B5:DA:2A:8C:B3:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/47bc9f14-b382-49d7-83c7-57ffd2164eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/47bc9f14-b382-49d7-83c7-57ffd2164eea/e5b8e88d-d1c8-3192-8f83-30f1061b40d8.roa
Signing time:             Mon 28 Oct 2024 13:00:40 +0000
ROA not before:           Mon 28 Oct 2024 13:00:40 +0000
ROA not after:            Sun 26 Jan 2025 14:00:40 +0000
asID:                     21681
IP address blocks:        2604:cf40::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/47bc9f14-b382-49d7-83c7-57ffd2164eea/47bc9f14-b382-49d7-83c7-57ffd2164eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/47bc9f14-b382-49d7-83c7-57ffd2164eea/47bc9f14-b382-49d7-83c7-57ffd2164eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/47bc9f14-b382-49d7-83c7-57ffd2164eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b1:01:65:a9:0f:e6:60:1c:7b:08:48:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47bc9f14-b382-49d7-83c7-57ffd2164eea
        Validity
            Not Before: Oct 28 13:00:40 2024 GMT
            Not After : Jan 26 14:00:40 2025 GMT
        Subject: CN=6a1d1da6-9ad6-4da3-a0cb-a256745d0818
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:28:05:b9:4b:72:b5:61:28:e8:8d:0d:39:fa:
                    19:53:f4:e1:38:6c:34:54:76:f3:64:8a:69:6d:a2:
                    27:90:00:b4:0b:6b:fd:45:d0:cb:86:ca:d0:05:9d:
                    6c:14:65:0f:d2:42:5f:71:96:81:4f:be:5d:27:90:
                    59:04:64:0b:50:66:4c:f1:a4:be:ed:60:ee:71:fa:
                    8b:eb:cd:fa:ab:7d:36:0b:34:de:c4:6c:41:c1:00:
                    38:22:fa:f1:5e:b6:25:58:3c:e2:f5:72:3d:4e:0b:
                    dc:77:de:19:4b:15:09:c1:42:78:37:e4:f3:d8:77:
                    f3:c5:11:f1:ef:60:42:e8:48:6b:2b:d6:df:31:31:
                    92:9d:de:38:ad:2f:64:68:55:77:4b:6c:34:9c:1d:
                    ba:e5:57:29:ec:31:39:54:d5:5b:b4:75:82:81:6d:
                    a8:2e:76:e9:a4:88:a1:fc:d8:53:1d:f5:78:db:7e:
                    63:64:4d:52:ab:c2:8c:b0:ca:45:b8:91:4f:c2:21:
                    f8:54:3f:38:e8:db:c0:b5:5f:01:b9:75:59:a8:55:
                    e8:38:9a:b5:ad:40:a0:9e:16:cc:cd:f6:2c:44:4f:
                    65:31:83:8b:3a:ec:0f:75:ef:13:1e:e0:eb:92:cb:
                    1a:8f:b8:8c:7c:77:8f:a9:f6:fe:62:1b:08:79:b4:
                    7d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:90:D0:F2:17:EB:B8:E8:44:AF:DA:53:AF:22:A1:8A:19:62:2D:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/47bc9f14-b382-49d7-83c7-57ffd2164eea/e5b8e88d-d1c8-3192-8f83-30f1061b40d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/47bc9f14-b382-49d7-83c7-57ffd2164eea/47bc9f14-b382-49d7-83c7-57ffd2164eea.crl

            X509v3 Authority Key Identifier:
                keyid:CB:93:C8:F7:73:55:9C:E8:AE:6B:79:E3:8E:7E:B5:DA:2A:8C:B3:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/47bc9f14-b382-49d7-83c7-57ffd2164eea.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:cf40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cb:39:bd:01:93:65:10:28:21:87:97:38:98:3b:b4:43:32:fd:
         9e:6a:6b:50:2f:ee:09:9c:26:9d:15:73:4c:1a:0f:ab:62:f3:
         7d:36:6a:7f:76:48:fa:46:e9:49:34:ad:22:64:b0:04:e9:0c:
         7b:6d:2f:5c:f9:93:25:30:43:c4:0c:8f:26:c7:10:ce:ec:4e:
         94:1d:da:95:bc:df:88:f8:de:53:d6:9e:f0:ae:ec:09:78:08:
         0b:57:13:bc:d0:98:1c:80:bf:75:d1:30:07:b6:11:d8:bb:65:
         54:70:37:7c:4d:50:88:ec:53:50:69:96:db:0d:c3:f0:37:9c:
         8d:c6:49:f1:1e:ce:75:08:cf:71:51:2c:34:b4:7a:e6:5c:90:
         f0:61:51:5c:64:4e:c0:5a:26:f3:96:64:54:c4:f4:ac:ed:40:
         5f:40:ee:04:b2:45:e3:3a:5a:48:ce:97:27:01:72:c7:64:12:
         01:2d:0c:3f:4f:42:1a:ac:12:8c:7b:aa:ff:21:09:58:b5:2f:
         46:ef:03:f5:15:de:1f:76:02:0a:a3:5e:17:b6:56:b4:4d:c6:
         1b:ff:9f:88:c5:43:39:f7:cc:02:21:d9:3d:d3:4d:a3:28:0f:
         03:6a:88:39:2b:81:f7:8e:95:b3:b8:23:5d:ef:dc:c7:b4:f0:
         a0:7b:3d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:07:48 2024 by rpki-client on console-fra.rpki-client.org