Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/b2c1c2e4-54f0-3fd2-b7ca-8d105d8db91e.roa
File:                     b2c1c2e4-54f0-3fd2-b7ca-8d105d8db91e.roa (raw, json)
Hash identifier:          uzW5E95VFMwSuT7EHRUpfBIbV/PD1oseOZgbLmHmn80=
Subject key identifier:   70:9A:AE:A4:76:00:C9:1E:BA:4F:77:6A:43:D4:1D:96:22:9B:14:41
Certificate issuer:       /CN=55c9af4a-e2e4-4fb9-9f53-869c87710e31
Certificate serial:       010D0C9F43285847B10160740E6F5E6A8CC2ABC0
Authority key identifier: CE:0E:A4:D7:05:EC:89:A2:4E:D5:E2:D0:EC:5A:D1:C5:E2:1D:5B:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/b2c1c2e4-54f0-3fd2-b7ca-8d105d8db91e.roa
Signing time:             Mon 28 Oct 2024 13:00:40 +0000
ROA not before:           Mon 28 Oct 2024 13:00:40 +0000
ROA not after:            Sun 26 Jan 2025 14:00:40 +0000
asID:                     46261
IP address blocks:        2605:a880::/32 maxlen: 64
                          2607:3f00::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/55c9af4a-e2e4-4fb9-9f53-869c87710e31.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/55c9af4a-e2e4-4fb9-9f53-869c87710e31.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b1:01:60:74:0e:6f:5e:6a:8c:c2:ab:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55c9af4a-e2e4-4fb9-9f53-869c87710e31
        Validity
            Not Before: Oct 28 13:00:40 2024 GMT
            Not After : Jan 26 14:00:40 2025 GMT
        Subject: CN=f6087f50-7d34-4516-9d83-70225ad8361e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:63:dd:22:d2:a0:d9:b9:9f:4f:22:f3:1c:70:
                    a3:a0:79:4b:c4:13:af:ab:b3:97:2b:d7:24:b5:4f:
                    32:b8:33:d2:64:24:7e:dd:3d:44:07:c8:aa:f7:cc:
                    ad:82:07:17:75:81:26:ce:5e:4c:e5:68:0b:1e:49:
                    79:5a:95:25:d5:55:f7:b0:3c:2f:b0:2e:d2:41:68:
                    ea:69:0f:78:9b:f1:d4:2e:9c:6e:36:5b:8b:a7:94:
                    f4:ae:37:06:50:2b:e6:51:35:50:bf:ec:7d:bf:de:
                    c6:c9:b5:e5:da:bf:09:00:02:5f:53:7b:1b:7a:b3:
                    a9:9b:87:ab:6c:d6:42:11:cb:13:32:8f:bb:e8:4d:
                    25:6d:53:4e:a2:36:0f:9b:d2:63:6b:a1:da:1f:b8:
                    57:3b:da:4e:6b:86:d4:6a:60:0e:e7:e7:1e:ab:d3:
                    b2:6b:cf:68:a8:50:74:69:91:36:cb:0e:88:f2:08:
                    b5:a6:7a:ce:1b:b0:da:47:39:4d:a2:5c:ca:e6:45:
                    a4:0b:02:48:18:ae:3c:3b:71:85:3c:59:54:2a:37:
                    6a:65:85:6d:8d:b1:11:89:c7:df:ed:c3:71:3d:9d:
                    77:4e:cc:13:a2:92:e9:1a:e8:56:c0:4f:f3:3c:b1:
                    df:2e:ba:4a:68:62:be:07:cd:24:75:21:41:2f:df:
                    3e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:9A:AE:A4:76:00:C9:1E:BA:4F:77:6A:43:D4:1D:96:22:9B:14:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/b2c1c2e4-54f0-3fd2-b7ca-8d105d8db91e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/55c9af4a-e2e4-4fb9-9f53-869c87710e31.crl

            X509v3 Authority Key Identifier:
                keyid:CE:0E:A4:D7:05:EC:89:A2:4E:D5:E2:D0:EC:5A:D1:C5:E2:1D:5B:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a880::/32
                  2607:3f00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:57:33:9a:15:64:a5:e3:04:f4:01:e0:8d:53:15:11:01:91:
         dc:6f:06:d5:2e:3e:18:84:a8:1f:0b:db:eb:30:bb:da:92:45:
         e0:d0:39:3c:0e:42:68:4a:a0:15:63:08:b6:4e:18:ff:60:24:
         4b:00:4f:88:b1:3f:cb:44:61:9f:49:1a:d0:21:53:dd:8c:a5:
         8d:6e:8b:78:02:0b:39:32:6b:6c:a5:5c:fd:60:c2:62:6a:29:
         f9:7f:af:6d:e9:52:d8:11:46:ad:b2:0c:ee:8c:07:b6:42:d0:
         1e:ce:6a:34:6b:b6:84:db:71:21:f9:54:2c:b5:b7:bb:93:ed:
         a2:99:41:65:34:07:05:d9:40:2b:0b:0e:3d:c5:41:e8:4d:95:
         9f:eb:fc:65:4f:4c:25:87:aa:db:2e:ca:20:bf:aa:ae:4c:f2:
         9a:98:b3:f8:ed:58:36:fd:34:d7:db:31:5b:ed:d2:0d:38:26:
         f3:31:84:de:df:59:ff:a7:1a:f4:be:b9:4e:d0:9f:5f:77:57:
         1e:2a:af:3d:a5:3b:a3:1e:12:00:7d:81:b5:9f:96:e8:28:11:
         3c:e3:fe:61:dd:81:ed:dd:b6:3a:7d:3e:c7:32:8f:95:6e:38:
         40:52:7c:91:9b:00:04:5c:ef:cf:dc:27:ea:65:4a:5c:53:e8:
         08:6c:2d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:42:14 2024 by rpki-client on console-ams.rpki-client.org