Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/4d791053-3127-3f02-a4e7-20d3e1e44946.roa
File:                     4d791053-3127-3f02-a4e7-20d3e1e44946.roa (raw, json)
Hash identifier:          +odZFKHpYt3GrHL7Y+e6OdrKwuAJOg1k2htOAG3E4gk=
Subject key identifier:   B7:5C:71:AC:D9:74:02:F3:36:2E:89:D4:F3:39:66:59:A1:EF:90:EB
Certificate issuer:       /CN=8e49b4c6-4d58-42e0-abe2-93754fdcda35
Certificate serial:       010D0C9F4328584716104C0C14F3772BF92F92C0
Authority key identifier: 0A:49:18:96:98:6F:CF:D4:8D:B3:E6:A2:22:27:C1:26:59:D2:EB:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/4d791053-3127-3f02-a4e7-20d3e1e44946.roa
Signing time:             Tue 03 Sep 2024 01:00:31 +0000
ROA not before:           Tue 03 Sep 2024 01:00:31 +0000
ROA not after:            Mon 02 Dec 2024 02:00:31 +0000
asID:                     399045
IP address blocks:        2606:d640:100::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:16:10:4c:0c:14:f3:77:2b:f9:2f:92:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e49b4c6-4d58-42e0-abe2-93754fdcda35
        Validity
            Not Before: Sep  3 01:00:31 2024 GMT
            Not After : Dec  2 02:00:31 2024 GMT
        Subject: CN=85b8e618-e163-41bd-bcac-e924e1b63cc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:21:05:75:73:08:4c:7d:a2:f9:52:ef:60:b7:
                    fc:9c:14:e5:e5:c3:8f:e6:c3:ae:c8:fe:87:e9:64:
                    a4:89:f3:ad:35:a4:3d:34:a1:f6:1e:d9:43:42:07:
                    5e:91:98:38:cd:00:f0:1f:86:c6:59:41:04:df:99:
                    44:69:41:d5:1a:ff:69:ba:99:cf:0c:0a:6a:04:5f:
                    9f:9f:ac:68:1c:42:61:2e:9e:d0:3b:95:13:0c:73:
                    4f:96:7c:36:5e:23:c7:a0:99:9f:88:7d:29:e5:4b:
                    71:6f:d9:a8:b7:4a:f4:89:10:2e:e9:fe:64:ad:d4:
                    22:30:8e:41:da:9f:eb:a5:91:74:4e:fa:3a:7a:56:
                    47:af:c4:3c:f0:cb:7a:30:64:4f:94:74:b1:0e:ee:
                    b4:d1:06:8a:ae:ce:89:ac:7b:a6:a4:5c:d1:9b:bf:
                    cf:6b:84:4d:70:c3:26:b5:f0:18:89:16:be:98:6d:
                    72:d9:2a:32:88:c7:8d:fb:bb:5c:38:47:a8:8a:94:
                    8d:f6:c1:5d:47:9a:56:8b:56:bb:12:5c:4b:c2:c2:
                    7c:4b:18:1f:9b:ea:5e:2f:14:95:52:35:5c:33:29:
                    b2:31:e4:91:a5:21:e0:f7:3a:d5:9e:01:f3:65:c7:
                    c6:2d:cd:ba:12:86:60:8f:22:62:0a:fa:ed:78:18:
                    22:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:5C:71:AC:D9:74:02:F3:36:2E:89:D4:F3:39:66:59:A1:EF:90:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/4d791053-3127-3f02-a4e7-20d3e1e44946.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.crl

            X509v3 Authority Key Identifier:
                keyid:0A:49:18:96:98:6F:CF:D4:8D:B3:E6:A2:22:27:C1:26:59:D2:EB:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:d640:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:1d:d5:27:40:f1:5b:be:bc:c6:ea:a9:34:73:18:5a:cd:dd:
         9b:be:f6:32:8e:19:8a:5c:55:ef:ec:27:2e:fe:ca:5e:5a:14:
         4a:a0:b3:79:d0:54:4e:ad:ad:06:01:7b:95:58:73:9b:21:9c:
         cd:cb:79:52:50:ca:24:b3:c5:a7:db:e4:11:4c:59:be:f4:d2:
         9d:ea:f2:90:fd:1f:eb:84:ab:61:4c:c8:2e:7e:2a:ae:46:34:
         88:a5:03:56:0f:68:b6:54:1b:82:13:f9:6d:93:3c:58:16:ac:
         47:e9:a4:45:9d:45:db:33:8a:9e:cc:fe:63:0e:78:a4:fd:d1:
         bc:80:c8:5b:e0:bd:f0:08:0e:5b:e9:d3:a5:7d:e9:ce:de:aa:
         79:40:70:85:70:bf:ee:91:a1:dd:ea:89:80:45:4a:e9:d8:49:
         9e:85:12:2d:aa:39:cb:b9:9b:28:09:fd:43:c4:36:3d:99:bf:
         11:37:5e:e7:87:37:33:58:fd:65:9b:1f:af:db:f2:15:fc:61:
         c5:24:cc:86:44:21:21:1a:1f:22:e6:cf:8e:14:10:c5:92:ca:
         46:1a:26:56:77:cd:73:10:7f:ca:4e:d8:40:9f:d9:26:83:5b:
         c9:2c:0d:5f:ba:64:00:ee:6a:f4:7a:a3:55:81:4b:db:4a:57:
         06:33:82:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:51 2024 by rpki-client on console-ams.rpki-client.org