Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5/ca5f6813-066e-3e44-86a2-84ddf46b4431.roa
File:                     ca5f6813-066e-3e44-86a2-84ddf46b4431.roa (raw, json)
Hash identifier:          3aI438DxMAVlWXfWlAm14dQGOUxcZWiEwkNgDFQFgmM=
Subject key identifier:   B1:A5:50:E8:A9:5E:63:83:DD:77:FA:99:CB:D6:A5:45:D7:65:5A:A2
Certificate issuer:       /CN=5553566f-cbda-48fe-ba4a-9ce4cb36a6c5
Certificate serial:       010D0C9F4328584773965CCB6E0CAF7DD628F780
Authority key identifier: 72:9E:02:D1:42:AA:4B:6A:97:7E:8C:D8:BB:26:FE:0F:5F:41:94:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5/ca5f6813-066e-3e44-86a2-84ddf46b4431.roa
Signing time:             Sun 06 Oct 2024 13:00:41 +0000
ROA not before:           Sun 06 Oct 2024 13:00:41 +0000
ROA not after:            Sat 04 Jan 2025 14:00:41 +0000
asID:                     6649
IP address blocks:        2606:5240:2445::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:73:96:5c:cb:6e:0c:af:7d:d6:28:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5553566f-cbda-48fe-ba4a-9ce4cb36a6c5
        Validity
            Not Before: Oct  6 13:00:41 2024 GMT
            Not After : Jan  4 14:00:41 2025 GMT
        Subject: CN=5b7cd169-f6a8-425c-940e-69c834278e6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ab:67:f7:c1:7c:f1:fa:62:7b:68:f6:f3:d4:
                    ea:c3:ea:0a:e2:2d:fb:18:5a:85:f5:a2:31:a6:ab:
                    5f:a4:96:6b:ce:2c:08:4c:47:8d:e8:07:dd:d2:86:
                    ee:97:c4:fc:96:d7:5d:0e:b2:9b:9a:55:91:00:d6:
                    d6:b7:9e:fb:b5:4a:a0:6c:68:52:13:a3:32:ea:f4:
                    1c:70:f4:ba:e4:3e:c3:6c:75:9f:3f:39:6e:72:bf:
                    75:c8:1d:42:35:0e:10:fd:84:dd:2d:da:1f:39:57:
                    66:8e:8b:a1:c9:c5:dd:9b:3e:78:7f:f4:e9:f3:a6:
                    2b:98:a4:1b:f2:fb:62:88:e0:c8:8c:af:c4:58:56:
                    0c:f4:6d:0a:85:3f:89:11:b5:b5:ec:c7:cd:82:8c:
                    8f:23:89:f4:46:0a:06:d9:8e:f2:81:b9:64:d6:07:
                    ac:13:93:93:18:96:40:7d:85:1a:2e:61:4e:01:99:
                    78:85:94:a0:27:cf:42:2b:72:55:17:8d:79:60:3a:
                    73:64:8e:da:43:53:9c:69:7e:1c:bd:cc:1c:cf:5f:
                    e0:f9:90:4e:99:f7:a2:86:93:09:79:de:cf:69:45:
                    7e:40:1c:1d:f6:9c:14:d3:06:47:d2:96:86:6e:c4:
                    70:86:0f:58:c0:dd:b3:a9:c0:ff:2c:f4:46:47:09:
                    0a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:A5:50:E8:A9:5E:63:83:DD:77:FA:99:CB:D6:A5:45:D7:65:5A:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5/ca5f6813-066e-3e44-86a2-84ddf46b4431.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5.crl

            X509v3 Authority Key Identifier:
                keyid:72:9E:02:D1:42:AA:4B:6A:97:7E:8C:D8:BB:26:FE:0F:5F:41:94:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:5240:2445::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:3f:d5:a3:b9:1b:83:dc:ed:91:df:46:c9:97:80:16:97:28:
         d3:6c:c4:63:75:ce:7a:d8:24:3a:9f:1e:43:06:78:30:16:96:
         31:c0:d2:a8:be:fc:c6:13:76:6b:bb:22:4d:47:46:6b:f4:9f:
         e6:dd:e3:54:cc:93:31:de:49:7a:11:9b:ce:b9:6c:a0:25:fd:
         52:6f:29:ff:ac:da:51:4c:dc:04:52:86:b2:c8:57:07:95:c0:
         84:b7:83:e8:0f:b0:20:e2:70:19:9d:f3:50:31:9f:09:4b:02:
         45:8c:55:a3:25:46:81:04:59:11:a3:89:a3:84:aa:90:d3:13:
         49:1a:2e:bd:6b:87:76:bc:dc:c7:f7:7f:be:3c:ab:4d:c8:73:
         22:25:fb:d9:48:68:81:67:e5:b0:ef:1a:a2:a0:cc:d9:c7:5d:
         27:b0:6b:c0:7f:da:17:54:88:c0:35:f8:3a:49:11:14:c5:2c:
         45:31:2d:a9:cd:22:6a:da:03:38:9b:9f:5c:ad:64:6b:91:ed:
         a6:cd:af:4d:2b:8f:ea:6d:3a:e4:58:ae:e4:b9:79:b6:8e:d3:
         00:a6:b9:08:76:19:ba:30:52:0c:5e:0b:73:13:b6:e2:46:7c:
         2f:75:43:cb:74:a9:9f:5e:8a:18:82:79:a7:d1:d8:f0:1d:e6:
         97:ec:8b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:37:12 2024 by rpki-client on console-fra.rpki-client.org