Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/9b8c6c6a-1b91-3516-90f8-81e2f29ee74a.roa
File:                     9b8c6c6a-1b91-3516-90f8-81e2f29ee74a.roa (raw, json)
Hash identifier:          NevMbPYjwFu0S8dmKexq5b0OXkYivVx5F9TGlMvFKOY=
Subject key identifier:   23:E6:60:3C:38:BD:49:F0:01:10:FA:B8:05:4E:1C:50:95:60:8D:0A
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F43285847D834AC209EF5A0F2DA19DA80
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/9b8c6c6a-1b91-3516-90f8-81e2f29ee74a.roa
Signing time:             Mon 11 Nov 2024 14:00:39 +0000
ROA not before:           Mon 11 Nov 2024 14:00:39 +0000
ROA not after:            Sun 09 Feb 2025 14:00:39 +0000
asID:                     2914
IP address blocks:        2606:b9c0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d8:34:ac:20:9e:f5:a0:f2:da:19:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Nov 11 14:00:39 2024 GMT
            Not After : Feb  9 14:00:39 2025 GMT
        Subject: CN=9ce3796c-11c8-45dd-b0db-0f6fc8e5f651
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:c6:45:c3:9a:e3:e4:67:32:e7:e6:6e:38:c1:
                    af:ef:71:f9:87:1b:d5:fb:e4:de:96:71:b7:50:d2:
                    cb:bb:ab:1f:1e:94:69:44:26:d0:e7:80:a0:48:2c:
                    88:78:fa:69:3e:d9:3d:a4:65:7e:8c:aa:3c:d9:88:
                    90:6a:fc:a1:3c:49:03:52:59:78:29:9c:92:6b:ea:
                    b0:da:e3:a3:0e:2d:6e:d2:c9:b2:a5:02:b1:c7:60:
                    5f:21:aa:08:3c:61:c3:d0:69:7e:1b:b4:b7:7e:4e:
                    c5:19:85:d6:fc:1e:70:1b:0f:cf:0e:fe:3e:58:7f:
                    f2:58:e3:6b:f9:05:e4:78:32:78:d1:d6:78:61:3e:
                    76:9a:08:dd:ea:f8:b5:bf:a3:5f:af:34:1b:a9:49:
                    2d:a9:69:0e:4f:83:88:c5:cd:79:6a:c2:28:bd:44:
                    ba:c1:e3:91:65:a6:74:80:cc:be:1e:ac:2e:ce:49:
                    98:c1:13:06:31:ac:df:7e:9b:d5:27:0c:fd:ec:35:
                    1c:b8:f3:ae:ec:3c:be:ac:e2:d3:f3:6d:1c:67:90:
                    b4:20:7c:98:cc:10:44:ea:86:97:70:51:bc:3a:80:
                    10:83:ae:6d:6e:87:5a:b8:e9:3a:be:45:a2:97:15:
                    00:8e:39:bc:d4:f1:c1:9d:71:94:61:98:e1:9c:2b:
                    96:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:E6:60:3C:38:BD:49:F0:01:10:FA:B8:05:4E:1C:50:95:60:8D:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/9b8c6c6a-1b91-3516-90f8-81e2f29ee74a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:b9c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:a0:c5:d6:d1:15:48:b5:56:15:1e:53:aa:4f:c4:ad:79:9a:
         02:f2:6b:3c:0f:ad:b6:cd:a5:ef:43:79:57:59:b9:8b:c3:f8:
         e7:db:a7:fd:ad:9c:e8:67:63:98:4a:b1:84:4c:88:1f:d0:d3:
         c4:91:d1:b2:44:f9:7a:88:c1:ea:b4:a8:d1:61:ea:6e:e6:c6:
         92:48:e3:ca:65:2d:88:a2:ca:b9:e9:3a:90:45:3d:b4:6c:c8:
         04:ab:d0:f9:0d:b6:24:0d:74:af:85:a6:0f:7b:10:ce:13:11:
         3b:6b:bf:06:d1:65:4d:8a:de:a5:e4:4b:db:d9:8f:7b:89:13:
         c4:92:81:33:79:82:ca:6d:6e:55:29:1b:c2:6f:47:64:fc:56:
         67:81:73:dc:bd:d0:9d:88:5a:b0:27:94:5e:27:22:3c:7e:96:
         b7:bc:fd:07:ac:48:1e:26:ec:1d:ec:fe:33:7a:65:86:af:f4:
         fa:2e:7f:e5:15:ba:86:57:48:4c:f5:1f:1b:a0:b4:4d:ea:10:
         25:d5:ac:8e:cb:87:57:b7:50:52:e9:81:e0:e6:9b:48:57:fd:
         81:65:09:39:35:76:81:bf:a6:bc:bc:4d:0f:d4:6c:81:6a:40:
         52:7f:d3:60:23:31:58:0e:67:eb:11:ac:40:fd:af:41:aa:b1:
         f9:9e:da:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:18 2024 by rpki-client on console-fra.rpki-client.org