Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4956507b-e74a-3e0e-bebd-5b779e55e147.roa
File:                     4956507b-e74a-3e0e-bebd-5b779e55e147.roa (raw, json)
Hash identifier:          dMRaV86Jic5iC2DRHU7zpNMDcGm/BYoNLFIGUJaPbIw=
Subject key identifier:   2C:6F:22:13:68:BE:6C:03:60:E5:94:C0:63:10:ED:01:A5:58:E2:3F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584762D645AFBAE747D06F06C200
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4956507b-e74a-3e0e-bebd-5b779e55e147.roa
Signing time:             Mon 30 Sep 2024 13:00:42 +0000
ROA not before:           Mon 30 Sep 2024 13:00:42 +0000
ROA not after:            Sun 29 Dec 2024 14:00:42 +0000
asID:                     22394
IP address blocks:        2001:4888:8045::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:62:d6:45:af:ba:e7:47:d0:6f:06:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 30 13:00:42 2024 GMT
            Not After : Dec 29 14:00:42 2024 GMT
        Subject: CN=4020a22d-a7dc-4085-aa11-ba6b63707757
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:90:25:db:36:2f:83:7d:fb:88:7e:f3:38:91:
                    be:dd:58:12:70:e7:5f:b6:87:2a:f7:3e:f3:4e:47:
                    8f:12:59:06:d0:78:f6:59:03:1a:39:ee:d5:81:0b:
                    8a:07:7d:98:92:10:ca:07:cf:72:1f:0b:a9:45:81:
                    f8:ad:d0:73:9b:cc:44:4c:6d:7f:3a:e7:c6:de:2b:
                    8e:3c:4d:02:c4:06:4c:e2:4d:cf:dd:f0:e3:2c:be:
                    7a:46:70:8c:de:2e:c6:e2:83:23:50:95:9f:f0:e8:
                    78:84:fa:bf:62:9a:a7:e4:9e:80:6d:2a:16:db:ae:
                    8f:e8:00:a6:3c:c5:61:18:f1:fd:39:15:ef:bd:1d:
                    eb:5b:7c:77:6e:4a:21:c7:ef:fe:38:eb:48:6c:81:
                    0d:38:ff:18:ce:03:c7:3a:04:f2:ba:6d:db:f3:bf:
                    83:68:e1:cb:d2:ec:df:2b:17:08:de:0c:92:54:e5:
                    25:b8:93:4f:da:96:ae:94:c8:52:cf:98:e9:cc:27:
                    2b:ac:e0:4b:d3:38:71:cf:aa:15:b0:64:e0:82:59:
                    92:6b:9c:a8:c1:3c:da:59:1d:61:7f:70:34:6b:e1:
                    fc:e8:19:32:7e:e7:00:be:d1:71:6d:6e:f8:b3:c5:
                    bd:c1:b9:df:7b:12:9f:35:ca:4b:60:86:33:52:70:
                    a0:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:6F:22:13:68:BE:6C:03:60:E5:94:C0:63:10:ED:01:A5:58:E2:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4956507b-e74a-3e0e-bebd-5b779e55e147.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4888:8045::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:84:93:83:8e:e4:72:db:8a:33:e0:4d:57:84:ab:01:e3:eb:
         a5:cd:4a:ea:aa:04:a1:bd:16:05:1d:b1:28:91:b1:65:ce:7e:
         e8:b5:04:8e:88:b1:be:1e:6b:97:57:21:29:9c:7e:1f:57:b1:
         0d:57:6a:44:9d:b4:2d:ee:cc:09:47:0a:e6:c3:92:f4:a7:31:
         0e:17:21:e4:62:dd:76:8b:50:d2:ce:e1:94:46:45:ba:54:fe:
         eb:72:f0:7e:7d:60:c8:3a:55:a4:6b:24:6e:34:b7:b1:a8:bd:
         ed:23:00:fe:d3:c5:d0:e4:0c:a0:f2:ea:12:1d:27:cc:9c:2e:
         5f:67:f0:d1:71:0a:e2:91:02:78:7f:d0:2e:bc:8e:14:4f:03:
         a2:cc:c8:76:79:b3:b2:99:b4:55:ea:63:08:a4:32:cd:76:c8:
         56:03:22:19:67:27:c8:42:0f:d1:21:51:fa:6d:f0:16:ba:e3:
         f9:7b:e2:1d:22:bc:5a:4d:43:7f:1a:a1:28:5a:d0:b1:c5:29:
         58:74:e1:11:31:9d:71:e4:0d:e6:d1:12:a2:33:c4:9e:b6:49:
         dd:0b:25:c9:30:10:d4:e9:3b:d7:34:23:bf:31:85:43:96:f2:
         64:36:81:49:68:a1:10:04:55:d5:22:75:0e:b6:2f:75:cd:6f:
         5a:0e:86:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:24 2024 by rpki-client on console-ams.rpki-client.org