Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/f94b45ba-8be5-39ed-ba91-9c53a26afc44.roa
File:                     f94b45ba-8be5-39ed-ba91-9c53a26afc44.roa (raw, json)
Hash identifier:          aUgdo0obd8L8bzJ3zXewi6fEuz1JX3PC4eX+3Ryll3o=
Subject key identifier:   0C:CC:CF:70:96:56:BA:97:63:88:56:24:9D:C3:65:71:84:EC:78:06
Certificate issuer:       /CN=e601b694-6242-4b1c-a841-d0a7214cd9c7
Certificate serial:       010D0C9F4328584742BB50CC2CBA105707168400
Authority key identifier: 96:7A:A6:3B:2E:D3:AA:65:44:0B:7E:8B:F5:4B:BA:F1:ED:95:50:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/f94b45ba-8be5-39ed-ba91-9c53a26afc44.roa
Signing time:             Thu 19 Sep 2024 01:00:31 +0000
ROA not before:           Thu 19 Sep 2024 01:00:31 +0000
ROA not after:            Wed 18 Dec 2024 02:00:31 +0000
asID:                     46846
IP address blocks:        2607:f368:804::/47 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/e601b694-6242-4b1c-a841-d0a7214cd9c7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/e601b694-6242-4b1c-a841-d0a7214cd9c7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:42:bb:50:cc:2c:ba:10:57:07:16:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e601b694-6242-4b1c-a841-d0a7214cd9c7
        Validity
            Not Before: Sep 19 01:00:31 2024 GMT
            Not After : Dec 18 02:00:31 2024 GMT
        Subject: CN=104e9ede-8632-40d8-b0b3-ac752edf9960
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:27:d1:fa:55:a8:f9:bf:89:35:6d:18:4a:ca:
                    11:5f:94:4d:af:ae:4c:3f:2f:3c:ca:42:08:55:45:
                    20:81:e9:48:ca:dc:96:a5:73:2e:b5:7d:31:b2:d1:
                    ec:90:05:e2:7e:27:31:f2:5d:10:8f:9a:c8:8f:8d:
                    9f:60:b3:10:42:75:14:bf:82:8e:7d:0d:86:b2:30:
                    eb:34:55:34:fa:d6:d7:56:db:a3:7a:2a:38:75:8d:
                    c3:b8:c3:9c:a1:4d:0b:7f:d1:fb:0a:5c:3e:25:f4:
                    1f:9f:63:b8:50:69:59:1f:09:a1:db:2d:cd:ef:9f:
                    1c:bc:73:5f:b6:de:2e:c0:3e:51:fd:c5:cd:9e:d3:
                    55:34:9e:6f:64:71:a7:2b:f5:0d:50:6b:f8:2e:c9:
                    dd:6b:f2:2b:db:a4:dd:d4:43:c5:25:84:05:04:2b:
                    10:d9:18:ff:75:b1:06:0d:43:05:d7:b7:b2:d6:c5:
                    e6:f2:b2:59:ba:b9:7a:85:31:37:d8:5b:ef:7c:08:
                    47:b1:c9:49:e0:f3:35:9f:b4:5c:7f:8b:1a:db:6d:
                    e0:45:21:87:03:bf:5d:a0:33:24:e8:0a:f9:3c:c3:
                    5d:c0:65:c1:68:4a:a8:2b:f4:3e:5b:a8:3c:56:86:
                    0a:b8:51:83:76:e0:f7:cd:5f:f8:d0:02:3a:0e:6c:
                    a6:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:CC:CF:70:96:56:BA:97:63:88:56:24:9D:C3:65:71:84:EC:78:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/f94b45ba-8be5-39ed-ba91-9c53a26afc44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/e601b694-6242-4b1c-a841-d0a7214cd9c7.crl

            X509v3 Authority Key Identifier:
                keyid:96:7A:A6:3B:2E:D3:AA:65:44:0B:7E:8B:F5:4B:BA:F1:ED:95:50:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f368:804::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:be:9c:75:7c:84:d1:b8:50:a3:c9:f2:49:a3:42:cf:3b:12:
         70:73:a5:91:e5:80:0b:80:13:b3:02:0d:19:a5:b1:65:ba:c8:
         dd:79:54:6c:08:22:21:77:86:c4:bb:3a:47:56:8d:80:4e:ed:
         20:88:88:9a:3f:61:e0:2f:91:51:b5:b6:ee:20:52:31:5c:3a:
         78:70:ca:c9:32:77:fb:b3:57:52:80:97:74:4c:d5:5f:19:b1:
         23:72:3d:90:97:10:53:e7:4b:91:6e:70:20:86:8c:f6:99:dc:
         1a:fd:51:6e:b6:d8:3b:02:49:42:09:1d:ea:56:4e:31:d7:95:
         e5:0d:76:46:fc:c5:a9:eb:6c:0a:67:83:6d:c2:d1:c9:d6:a3:
         6a:db:11:8b:8c:ef:15:db:66:cc:52:b8:b9:06:30:a4:c8:54:
         1e:50:bf:6e:dc:9a:83:aa:ef:8b:4d:04:26:84:b7:f1:4c:5b:
         d5:54:96:3f:1c:d0:93:73:b2:d4:42:50:1c:e2:3d:22:b0:da:
         1c:59:30:02:34:57:83:37:3c:f1:5a:f6:a9:56:f0:62:28:06:
         4c:68:0a:77:28:63:26:03:e4:f5:e5:ca:8f:e7:d0:58:0b:16:
         09:95:f7:fd:65:c2:72:15:e3:f8:28:a8:40:a2:9c:e3:a5:ee:
         d0:f1:45:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 20:19:12 2024 by rpki-client on console-fra.rpki-client.org