Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/f37e12b1-762c-3d49-8b93-8ba5322717de.roa
File:                     f37e12b1-762c-3d49-8b93-8ba5322717de.roa (raw, json)
Hash identifier:          JMoxvcAAX4IuuBjbw08QKr7ShlwxV9WPlvgovflK1B0=
Subject key identifier:   5E:8C:23:D2:CF:DA:B6:2C:6C:49:BD:7D:35:AD:F3:3C:DE:0D:C2:A0
Certificate issuer:       /CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25
Certificate serial:       010D0C9F43285847B3CC06F7E0B670A7E66603A0
Authority key identifier: C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/f37e12b1-762c-3d49-8b93-8ba5322717de.roa
Signing time:             Tue 29 Oct 2024 13:00:40 +0000
ROA not before:           Tue 29 Oct 2024 13:00:40 +0000
ROA not after:            Mon 27 Jan 2025 14:00:40 +0000
asID:                     395123
IP address blocks:        2606:db40::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b3:cc:06:f7:e0:b6:70:a7:e6:66:03:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25
        Validity
            Not Before: Oct 29 13:00:40 2024 GMT
            Not After : Jan 27 14:00:40 2025 GMT
        Subject: CN=7ecd9042-069e-4215-9cb8-f4cc3a0afa40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:77:0d:ae:92:97:c4:91:d3:25:44:99:40:d9:
                    b1:b3:ed:da:23:4b:b6:50:57:1c:88:f1:c2:9d:72:
                    0c:5c:ec:bf:3d:1f:8b:d0:da:01:8c:3b:74:b7:df:
                    67:f0:0c:f6:ab:73:ff:4b:c5:af:4b:43:a5:ce:9a:
                    c7:c4:22:a6:e0:ec:20:0a:8a:45:c9:e3:3d:d5:f7:
                    40:09:db:be:f2:2a:1e:7b:28:d1:4d:66:82:88:93:
                    94:bf:43:5f:4f:21:38:2a:85:a0:86:76:2b:93:17:
                    89:61:23:6f:6a:17:c2:45:62:14:31:db:4d:1b:7c:
                    a3:0c:9e:5d:b4:f7:2a:e5:ef:08:84:4e:e3:30:4d:
                    e7:65:ac:b4:ca:ab:a8:42:79:f8:0d:17:38:e7:76:
                    83:0d:68:21:da:d4:37:d9:1d:ee:86:c9:5b:f2:32:
                    23:9c:7a:48:67:21:ab:7c:1a:e0:a4:54:9b:44:ba:
                    e1:30:44:be:05:6e:21:ab:db:a7:82:08:0a:0e:ab:
                    0b:64:47:22:22:18:f9:36:f7:bc:48:d4:8f:f9:77:
                    f8:c5:1e:a7:8d:9f:da:f2:16:9b:c1:14:8d:81:7b:
                    29:f0:2f:5c:59:5f:23:de:4e:2d:12:cc:90:e1:25:
                    78:6c:38:28:12:5e:9f:3f:f8:17:f3:0a:8b:41:bd:
                    1d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:8C:23:D2:CF:DA:B6:2C:6C:49:BD:7D:35:AD:F3:3C:DE:0D:C2:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/f37e12b1-762c-3d49-8b93-8ba5322717de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.crl

            X509v3 Authority Key Identifier:
                keyid:C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:db40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:8f:52:dc:9b:15:91:00:ec:62:d0:56:41:13:34:5d:d8:f4:
         9c:b0:aa:63:a3:9d:9d:39:03:65:13:6e:4d:f9:a7:ed:4c:45:
         41:13:48:41:7c:62:cb:7c:75:b1:6c:16:c9:c1:b2:c2:86:19:
         0c:95:8a:11:b5:b0:df:54:01:1c:9c:62:54:da:e1:9d:2c:e3:
         64:90:ef:0b:cb:2b:b6:8b:74:e7:56:eb:c8:6a:02:5d:d2:45:
         df:9c:5b:46:4a:d8:91:65:77:42:4f:c9:97:6f:6a:6c:b1:2c:
         99:b3:4b:70:78:fd:c6:7c:ad:ce:4c:8d:82:ba:b6:46:f0:be:
         c4:89:06:fc:a1:f9:ee:d9:81:2a:a9:bd:f7:ec:24:d7:c9:3d:
         51:97:c0:19:dd:af:6a:9a:41:87:ae:f8:ad:2e:95:18:21:09:
         4e:3e:55:88:e2:bd:1e:9f:b3:1c:b4:e6:1d:19:e7:61:14:fd:
         0e:0b:a3:2e:93:f0:2a:d2:b9:e0:5d:b3:39:34:61:d7:79:00:
         75:dd:6c:f9:6d:75:2a:53:d7:49:08:76:ad:00:b2:c3:f2:25:
         76:92:81:01:41:73:d3:6f:a8:0e:3c:7e:d7:b7:ea:69:55:17:
         ac:aa:7c:e6:a5:df:e2:74:b2:ba:06:4f:ad:aa:68:c7:1a:4c:
         b3:8a:88:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:42:56 2024 by rpki-client on console-ams.rpki-client.org