Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4c2775af-33af-3124-b5d4-2a57727ace54.roa
File:                     4c2775af-33af-3124-b5d4-2a57727ace54.roa (raw, json)
Hash identifier:          D120wbx8EgbsWN+xqoCK+1jFVs5SQS4UgtuiRnjFkoE=
Subject key identifier:   D0:48:ED:F1:67:77:92:DB:8F:12:85:EF:58:FE:61:54:5B:89:FE:BA
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584762D64529C8721FEB076919A0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4c2775af-33af-3124-b5d4-2a57727ace54.roa
Signing time:             Mon 30 Sep 2024 13:00:42 +0000
ROA not before:           Mon 30 Sep 2024 13:00:42 +0000
ROA not after:            Sun 29 Dec 2024 14:00:42 +0000
asID:                     22394
IP address blocks:        2001:4888:8035::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:62:d6:45:29:c8:72:1f:eb:07:69:19:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 30 13:00:42 2024 GMT
            Not After : Dec 29 14:00:42 2024 GMT
        Subject: CN=0b23a15d-fbe8-4ce2-a6e6-f702ae4da1b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:7c:74:9c:1e:c0:f9:ad:71:26:15:8a:c6:46:
                    a2:1e:1d:a0:0c:1b:1a:37:c8:fd:2d:12:c7:bd:82:
                    61:97:95:2a:b8:78:81:27:3d:3e:36:19:79:0b:ca:
                    ea:98:62:7d:b4:ad:14:cf:8f:37:2a:a9:eb:93:fb:
                    00:0d:e8:7d:68:df:79:2f:12:d9:dc:dd:d4:57:d8:
                    f0:68:8e:1d:43:10:d5:bf:d0:b7:43:08:0c:87:52:
                    25:d1:d4:ba:c9:07:b4:57:c3:84:aa:aa:69:23:a5:
                    ad:1d:8b:1a:26:1f:40:a9:2b:f8:8a:1e:6f:7e:22:
                    1b:b1:d1:fa:9f:e4:61:ad:50:61:ff:7f:5e:1e:b6:
                    da:53:46:ee:76:38:ec:23:07:b7:4c:35:0c:d5:6a:
                    dc:bd:48:aa:0f:84:b5:29:ef:6f:f9:8b:39:27:6e:
                    04:21:60:ad:0b:67:cf:e7:8f:ff:a9:3f:18:87:d8:
                    d0:29:8a:54:fb:a2:0f:c5:d3:af:da:3a:f0:25:88:
                    23:61:43:7e:67:dd:92:13:6b:14:12:8f:c1:50:47:
                    e7:bc:46:33:8d:6f:eb:b7:4a:7b:da:7c:da:7d:74:
                    42:7b:0e:58:11:90:b3:73:e9:f5:e7:0c:cf:0f:b7:
                    79:8e:2e:43:69:ea:99:42:40:ec:a5:65:f4:ea:27:
                    08:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:48:ED:F1:67:77:92:DB:8F:12:85:EF:58:FE:61:54:5B:89:FE:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4c2775af-33af-3124-b5d4-2a57727ace54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4888:8035::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:8b:94:ea:74:29:27:5b:ae:c2:0b:79:8c:e8:20:8d:f7:d2:
         5a:ef:fb:e9:67:ac:a8:40:82:d7:3b:d2:df:be:42:dc:e9:2f:
         d5:18:b9:12:08:d5:a1:99:ca:82:9c:ce:e1:8b:0d:f2:e4:7b:
         70:d5:26:33:d7:16:9b:e9:f2:68:81:1a:d2:e6:a8:a6:e7:3b:
         c3:ef:c0:8f:d3:5d:99:e9:b4:1a:a5:c1:73:cb:07:89:39:af:
         ac:dc:de:6a:ec:3f:e7:20:9b:3f:53:77:d4:ac:fb:f1:ac:f6:
         38:7d:e7:7f:17:22:30:ad:ce:05:f5:91:94:a9:cd:14:98:57:
         3f:8b:d2:2e:d7:41:4e:61:52:ac:e5:7d:45:43:27:be:c9:46:
         1a:ea:e2:06:d1:47:1d:de:9b:f7:8b:6c:89:c9:dd:d0:04:72:
         79:b5:d9:24:68:be:e7:5b:75:b9:27:1f:92:a6:98:70:22:26:
         ac:59:19:82:6d:ba:de:73:e9:2f:37:a0:7e:59:18:58:5b:10:
         8e:df:80:a3:65:4a:f2:7f:73:67:c9:e0:57:bf:d8:78:d9:c3:
         ae:97:ed:10:f4:c8:b6:2c:82:a9:93:ba:45:51:4e:e7:27:ba:
         ac:68:4a:24:61:6c:80:9e:7c:f5:0b:eb:68:8f:c7:dc:a6:dd:
         b5:be:7c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:29 2024 by rpki-client on console-fra.rpki-client.org