Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2c40ae1a-9c9b-3d32-86e4-3c859ce53e45.roa
File:                     2c40ae1a-9c9b-3d32-86e4-3c859ce53e45.roa (raw, json)
Hash identifier:          hRw3gvriqHMOm7DDmqVBCqHwYNNrp756fOKeg+TkiYk=
Subject key identifier:   8B:99:D0:55:AE:E1:ED:F6:E4:0F:2D:DC:1E:E2:06:8C:2E:24:86:AE
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584762D645C1957717546E9370C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2c40ae1a-9c9b-3d32-86e4-3c859ce53e45.roa
Signing time:             Mon 30 Sep 2024 13:00:42 +0000
ROA not before:           Mon 30 Sep 2024 13:00:42 +0000
ROA not after:            Sun 29 Dec 2024 14:00:42 +0000
asID:                     22394
IP address blocks:        2001:4888:8046::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:62:d6:45:c1:95:77:17:54:6e:93:70:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 30 13:00:42 2024 GMT
            Not After : Dec 29 14:00:42 2024 GMT
        Subject: CN=169b6ccc-2875-41c6-bb6d-b83cab262a83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c8:52:82:3d:cd:32:a2:0a:4b:eb:cf:0c:1e:
                    2e:91:93:ff:ab:9e:f6:bc:e7:c3:20:ce:b5:0f:ff:
                    65:2c:d4:54:c3:5e:b2:b4:da:c3:00:9b:70:96:40:
                    e3:a5:e9:a0:ba:fb:15:58:35:03:8c:44:60:3b:72:
                    f2:41:fb:ea:ec:5b:92:0e:73:70:bf:ce:9a:b7:16:
                    70:36:37:88:68:d2:68:eb:cf:8f:c8:ea:2b:35:22:
                    e7:3e:7e:61:76:36:99:1e:18:34:6e:90:f3:71:30:
                    77:87:d2:f5:74:4d:f3:b5:bd:d7:3d:d4:ce:d7:b5:
                    21:9e:b7:7e:49:89:de:6b:d4:e9:a5:76:92:40:6b:
                    a5:00:59:ba:ec:0d:8a:a1:b4:93:ed:d2:e9:a8:af:
                    11:3b:4b:42:26:98:2c:41:06:e2:01:96:07:82:3d:
                    ed:37:93:83:15:9c:a4:b4:f8:97:12:db:04:b0:1d:
                    87:80:c8:a4:50:54:f9:72:ff:b6:79:57:6f:b2:a8:
                    12:f7:34:90:48:33:36:f1:93:39:b4:81:e8:3a:cc:
                    21:a5:31:d9:ab:ea:a9:1c:eb:5e:37:80:7a:cb:00:
                    be:7d:0e:b7:6a:81:8f:17:f7:7d:5c:e8:47:6f:95:
                    32:fb:49:5a:1f:e3:9e:2e:19:3b:a2:bb:46:92:c7:
                    f5:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:99:D0:55:AE:E1:ED:F6:E4:0F:2D:DC:1E:E2:06:8C:2E:24:86:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2c40ae1a-9c9b-3d32-86e4-3c859ce53e45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4888:8046::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:dd:06:b1:66:4e:86:21:0d:6f:af:11:d2:13:1c:8a:b3:48:
         e8:c5:e6:ec:1d:ba:47:4f:16:fa:65:3b:62:39:cc:e1:d3:7d:
         a5:e2:e2:9d:b4:81:5f:db:36:49:52:6d:e8:85:c0:71:b0:e6:
         98:da:54:eb:e9:c3:9c:0b:a7:3c:52:05:3c:e0:60:f7:e9:59:
         df:15:65:7c:78:1e:23:e7:bf:6c:70:ef:fd:09:05:9d:71:84:
         5e:5e:54:65:d7:32:81:f2:b3:14:24:10:cf:82:de:ee:85:63:
         08:70:d7:51:ba:28:ed:d8:ba:f4:a4:f9:7e:56:79:0a:16:8f:
         ff:3b:7b:34:09:be:56:63:90:05:82:70:c1:c2:e3:24:b6:00:
         2f:a1:78:21:59:40:b8:42:63:aa:e4:1b:f3:be:9d:2a:e7:6e:
         c2:c8:75:2b:b5:c5:f1:b6:2f:2a:00:2f:05:a2:6d:de:55:f7:
         3c:be:14:85:71:39:26:3a:94:54:61:1e:d6:b5:fe:f0:ad:a1:
         de:08:ec:8f:3c:30:08:b0:01:ba:f1:ec:7e:39:77:60:6b:bf:
         49:5d:46:59:19:86:d5:99:98:af:d5:b0:69:84:d2:da:b9:12:
         f7:1d:be:13:72:69:eb:b6:da:e4:c9:05:41:bf:6d:46:06:04:
         c6:e9:2f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:22 2024 by rpki-client on console-fra.rpki-client.org