Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/2a3b35d7-1df8-3a46-8e06-935ce2ee1d98.roa
File:                     2a3b35d7-1df8-3a46-8e06-935ce2ee1d98.roa (raw, json)
Hash identifier:          s0k1afuNBHWfRn2ikHDWWyy6zHm2uaLCFP5uYaAZTYU=
Subject key identifier:   B5:75:CA:F0:3B:F8:26:B6:56:63:51:A7:B5:82:D1:E2:7C:60:47:22
Certificate issuer:       /CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
Certificate serial:       010D0C9F43285847C8D9D280EF4AFC07BFB0A980
Authority key identifier: 57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/2a3b35d7-1df8-3a46-8e06-935ce2ee1d98.roa
Signing time:             Wed 06 Nov 2024 02:00:28 +0000
ROA not before:           Wed 06 Nov 2024 02:00:28 +0000
ROA not after:            Tue 04 Feb 2025 02:00:28 +0000
asID:                     57439
IP address blocks:        2605:f440:53::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c8:d9:d2:80:ef:4a:fc:07:bf:b0:a9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
        Validity
            Not Before: Nov  6 02:00:28 2024 GMT
            Not After : Feb  4 02:00:28 2025 GMT
        Subject: CN=954c4edc-bf00-44f3-9ab0-082a500fd7b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:7f:10:cd:9c:43:19:f9:f2:bf:8c:26:69:14:
                    de:1d:31:b3:b3:38:01:f0:9d:ca:e3:6a:c3:f8:9d:
                    84:c1:bd:db:0d:1a:0b:d4:d3:ba:97:ec:9f:f4:b2:
                    53:ae:99:b0:b2:b3:57:d1:3a:a6:de:db:bb:5d:b1:
                    20:41:8e:7f:60:1f:70:4d:28:c1:ac:80:6d:e2:1a:
                    66:b6:03:d4:d8:e5:15:6c:62:e6:20:dc:90:b0:e2:
                    d8:53:97:02:08:c0:80:50:84:03:b6:06:72:6d:92:
                    06:bf:e8:3c:8b:73:19:1c:49:22:01:c6:8e:ac:0c:
                    66:03:38:12:5c:26:6b:5c:d5:3d:21:ad:e1:e0:78:
                    ee:23:3b:0a:ab:2b:e1:92:e9:69:9d:4d:eb:93:59:
                    69:87:7e:a1:2b:73:52:f8:2c:c6:ad:37:2f:c7:28:
                    2a:b3:7c:1b:56:90:b0:cf:d6:b5:3f:18:94:ff:f7:
                    2d:8b:dc:dd:e8:41:fa:c0:4b:40:26:fe:1b:1b:0b:
                    c2:b6:57:bd:18:12:e2:54:4e:51:3b:87:35:d7:e5:
                    24:74:72:35:b2:ea:ab:9c:02:7f:25:bc:5e:7b:7d:
                    da:07:ed:86:22:72:95:86:bb:18:68:53:a3:01:e5:
                    8e:45:53:7c:2f:f3:df:db:b5:6a:e1:e8:55:91:62:
                    1a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:75:CA:F0:3B:F8:26:B6:56:63:51:A7:B5:82:D1:E2:7C:60:47:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/2a3b35d7-1df8-3a46-8e06-935ce2ee1d98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl

            X509v3 Authority Key Identifier:
                keyid:57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:f440:53::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:b6:37:a8:31:6d:95:9a:95:b3:cc:da:06:d5:e5:20:f0:aa:
         cd:61:f2:f0:b0:ed:0e:d4:15:00:2f:96:20:68:0e:4e:aa:98:
         85:ea:d6:05:bf:2a:99:55:e4:c3:7c:e7:e5:71:7b:98:14:82:
         07:8a:33:04:5c:5b:90:7f:02:d9:26:f9:6e:29:a8:6f:49:c7:
         44:da:3e:f5:68:ac:87:cc:2b:56:ea:7b:40:1b:e4:7e:93:19:
         ef:28:cf:fa:a0:58:7f:08:8b:1f:66:8a:af:5c:81:97:61:50:
         0f:86:d5:92:32:d0:0c:05:4a:65:ce:73:02:bc:6d:c8:65:93:
         02:6e:b2:89:ab:9e:a4:f6:23:fa:42:2e:a3:f5:2d:15:46:33:
         4c:10:d1:22:75:dd:7c:93:33:73:19:3c:34:8a:b4:2f:30:92:
         de:99:3f:5a:aa:b4:2a:2a:e0:f5:da:8a:52:7a:e0:12:dd:a8:
         59:d0:eb:21:9f:5a:b3:9f:f7:b5:47:c3:37:b7:16:b9:59:b0:
         03:11:b9:e8:e9:06:9a:ba:db:9b:59:7b:30:46:04:ac:f4:f3:
         d3:d6:e7:5e:98:5a:1d:df:e7:eb:e1:0b:c0:c8:0c:c9:39:cd:
         89:77:60:2e:ff:3b:57:70:00:33:7c:2c:29:ba:fb:b3:ea:49:
         b3:52:f7:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:24:22 2024 by rpki-client on console-ams.rpki-client.org