Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/4a69515d-ca0e-3e28-9967-1a8f0babe5f1.roa
File:                     4a69515d-ca0e-3e28-9967-1a8f0babe5f1.roa (raw, json)
Hash identifier:          JqvUT3zizBuY9ZJPHSP2rbHJDs7rYvjrOJizbc1vLAA=
Subject key identifier:   06:8F:45:16:DF:88:6E:B0:38:22:78:EE:F6:24:66:E7:06:BA:63:97
Certificate issuer:       /CN=5d9aaf11-1c74-496e-99c6-6152cb292b86
Certificate serial:       010D0C9F432858478A4EE74E660B6D4B202B5180
Authority key identifier: BD:FD:6A:A4:49:4C:E0:97:EA:5A:15:44:E2:94:69:A1:B9:1F:04:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/4a69515d-ca0e-3e28-9967-1a8f0babe5f1.roa
Signing time:             Mon 14 Oct 2024 16:20:29 +0000
ROA not before:           Mon 14 Oct 2024 16:20:29 +0000
ROA not after:            Sun 12 Jan 2025 17:20:29 +0000
asID:                     211014
IP address blocks:        2604:f440:11::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8a:4e:e7:4e:66:0b:6d:4b:20:2b:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9aaf11-1c74-496e-99c6-6152cb292b86
        Validity
            Not Before: Oct 14 16:20:29 2024 GMT
            Not After : Jan 12 17:20:29 2025 GMT
        Subject: CN=457e0acd-be6a-4072-abf0-4eeaf68a7d71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:1a:3a:44:84:a2:96:58:2f:54:62:41:bd:70:
                    f3:53:8d:b5:3b:1a:c5:52:40:bd:b1:46:14:19:2e:
                    71:5a:2c:61:f3:f2:ff:89:e8:cd:f8:a8:7f:18:64:
                    a6:e3:77:ab:91:7d:99:68:e1:56:df:71:6d:af:c2:
                    cd:7c:bf:57:18:fa:26:f0:4b:29:c0:4a:28:47:c5:
                    7b:39:7b:d5:d5:7f:a2:2b:af:7d:04:94:8f:b7:5e:
                    6c:bd:40:09:0e:db:0e:5c:92:0b:4d:6f:c2:5d:a6:
                    14:b7:0e:44:4c:f0:15:ed:c3:a0:d0:3d:cd:8b:30:
                    29:19:9d:33:86:60:e9:a9:3e:3c:ed:15:df:1a:25:
                    c7:d6:67:3c:6b:91:9e:5c:af:50:ac:24:51:72:ba:
                    92:5a:59:6e:2a:a4:52:8e:96:74:be:df:fe:6c:e2:
                    10:aa:4a:ee:3d:e0:9e:26:b4:74:6e:09:05:af:e1:
                    95:2e:bc:06:0e:a2:53:ed:57:2e:f7:0a:8f:0e:ba:
                    81:10:7e:d2:76:f4:a6:07:74:69:cb:81:23:79:dc:
                    38:90:46:e6:00:6c:a5:6e:fd:d6:78:44:0b:cf:27:
                    53:17:c8:45:55:1b:78:7e:98:9a:82:de:fb:c2:7f:
                    3f:06:fe:e4:fc:f0:da:a1:db:a1:56:eb:7b:ee:f7:
                    57:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:8F:45:16:DF:88:6E:B0:38:22:78:EE:F6:24:66:E7:06:BA:63:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/4a69515d-ca0e-3e28-9967-1a8f0babe5f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.crl

            X509v3 Authority Key Identifier:
                keyid:BD:FD:6A:A4:49:4C:E0:97:EA:5A:15:44:E2:94:69:A1:B9:1F:04:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:f440:11::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:88:0a:a9:0a:fe:b2:7a:1b:3b:5e:a9:45:81:7c:84:fe:2d:
         d1:57:1d:73:b9:85:c2:af:2b:9c:27:34:7b:ca:d1:4a:a7:c4:
         91:c2:f3:66:52:f8:5e:25:2f:61:5c:df:ae:17:0e:33:4f:d5:
         5e:c6:a3:ce:94:81:3d:dd:2c:6e:6a:67:0f:d1:9d:dd:f5:3a:
         81:7f:2b:4e:1b:3c:38:36:f9:18:3f:cf:cd:f2:e8:2c:5a:b9:
         f0:f3:a3:dd:f0:94:40:4e:5f:97:dd:0a:fb:44:92:21:dd:16:
         6e:e0:d1:9c:78:83:91:1d:54:cd:c2:ac:b8:2a:ed:50:9a:c1:
         22:78:9e:b9:4c:bc:b5:17:df:ac:cf:05:db:df:86:45:52:7d:
         65:e2:57:7d:1d:b9:d0:2e:32:7c:6d:4f:ce:41:d0:76:6d:8e:
         26:0e:8d:f5:ec:94:c6:b1:a7:09:dc:95:89:96:dc:ad:db:f4:
         74:f0:23:ac:16:ad:36:65:f8:44:51:81:42:a6:72:bb:a9:24:
         9b:8c:9c:2c:17:e7:e5:26:25:92:8a:f6:b9:51:a0:e6:97:dd:
         63:72:da:76:ae:bd:73:73:b0:97:24:da:bd:a9:19:d0:cf:76:
         9e:da:5e:f7:7b:06:1f:cc:a8:31:3c:e8:0b:a4:b2:69:c1:da:
         4c:f5:4c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:37:12 2024 by rpki-client on console-fra.rpki-client.org