Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/4a1ff14c-7101-31fa-aa4d-382662461a81.roa
File:                     4a1ff14c-7101-31fa-aa4d-382662461a81.roa (raw, json)
Hash identifier:          acl+m8cZOcyECpDQIUPrNZeAnszsBxwPNPCb2PY/ycI=
Subject key identifier:   AB:6E:1D:74:E7:62:1F:D4:93:12:B2:DB:6A:DE:2A:6D:4D:0F:A5:81
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F432858479C112CFC73019CD07F136A80
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/4a1ff14c-7101-31fa-aa4d-382662461a81.roa
Signing time:             Mon 21 Oct 2024 01:00:31 +0000
ROA not before:           Mon 21 Oct 2024 01:00:31 +0000
ROA not after:            Sun 19 Jan 2025 02:00:31 +0000
asID:                     54113
IP address blocks:        2620:11a:c000::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9c:11:2c:fc:73:01:9c:d0:7f:13:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Oct 21 01:00:31 2024 GMT
            Not After : Jan 19 02:00:31 2025 GMT
        Subject: CN=3bd04c7f-6bdd-480b-bc47-edda4489c961
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:cf:d8:19:41:64:ac:f1:09:f4:2c:8d:54:95:
                    c5:ec:19:da:93:bd:d3:db:8a:ab:37:12:f0:c9:0a:
                    70:e5:35:f4:a0:05:b1:2e:9d:12:9c:22:f8:b6:aa:
                    45:1a:6b:69:91:5b:73:72:47:13:a0:40:03:b0:6f:
                    47:d6:0a:03:0e:41:15:4e:87:08:06:d7:ac:6d:3e:
                    a3:97:a1:da:79:16:b7:45:40:72:77:50:5d:4e:57:
                    30:f9:c3:e7:e7:17:e3:f3:5d:a7:42:18:47:02:92:
                    ee:55:39:ad:8c:49:ed:8a:41:3c:12:5f:15:7f:83:
                    a4:bc:93:23:c5:58:66:6f:26:a6:31:40:07:3d:70:
                    33:46:17:35:35:ec:db:c0:2b:ba:ce:98:a9:ec:e8:
                    9d:34:c9:e5:02:e1:ac:ca:97:ab:9c:3c:00:3a:7a:
                    9b:4f:34:fd:14:27:a0:27:51:a7:5b:cb:ef:58:1b:
                    48:95:19:14:41:a4:93:f5:97:4c:bc:81:72:f0:22:
                    e8:ad:44:fb:ab:c0:49:d2:85:70:cd:ec:d7:6c:9c:
                    8d:12:e2:e5:08:6d:c7:69:94:c3:fe:fb:3a:db:b3:
                    79:d2:91:8a:41:2c:ee:5d:63:7d:12:c4:b9:56:f6:
                    03:1f:53:6f:97:7c:f1:fc:1c:49:e5:ea:a3:29:7e:
                    f5:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:6E:1D:74:E7:62:1F:D4:93:12:B2:DB:6A:DE:2A:6D:4D:0F:A5:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/4a1ff14c-7101-31fa-aa4d-382662461a81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:11a:c000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:5c:5b:67:7e:e0:06:c7:83:fe:e4:52:a7:87:45:b2:f2:67:
         e5:d4:aa:a1:43:22:93:ad:ed:38:65:d8:4a:c8:37:30:30:1d:
         fb:45:9b:08:07:39:95:5b:6d:2f:77:2e:d0:a7:3d:02:3a:97:
         b0:64:b2:a6:33:77:bd:a2:70:dd:de:f9:2f:f9:ba:5c:11:67:
         e3:bc:cf:f8:9d:5c:1d:f0:54:90:4d:fa:0c:37:d3:59:53:a8:
         33:2a:27:d6:f1:d7:75:2f:a7:11:61:b3:f4:47:bf:1f:ef:39:
         bb:1d:0a:79:24:12:41:1c:05:03:03:a1:4e:41:01:76:df:24:
         bd:b9:27:f3:3b:e2:d7:3c:ec:79:1c:ad:f3:b2:08:16:9e:98:
         76:44:3a:5d:4e:69:75:aa:ab:61:f0:48:0f:00:f5:c5:43:1b:
         2f:3a:35:43:40:76:d3:51:44:60:43:bc:0d:d5:d8:5d:ea:db:
         2f:e8:39:f6:15:0f:45:8d:68:ae:d0:cf:89:27:33:58:6c:f9:
         50:49:64:42:96:3a:37:6a:75:67:90:d6:f2:1c:99:8c:f4:95:
         94:ba:78:de:1e:43:c7:1f:c4:43:2f:70:05:92:bf:fb:bd:23:
         a6:cb:a6:dd:30:6f:fb:ca:a3:63:53:97:8f:bd:d4:1f:e2:dc:
         e3:9d:b7:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:24:32 2024 by rpki-client on console-fra.rpki-client.org