Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/879f8f15-9dc9-4663-aff8-bf62864b859c/2b41fdec-a039-3dcd-ae4f-a1cbbea76664.roa
File:                     2b41fdec-a039-3dcd-ae4f-a1cbbea76664.roa (raw, json)
Hash identifier:          wv9wF262R0yjODJMtKdk/Xg0k/9Wm8Qn9uyCisHs3Qk=
Subject key identifier:   ED:09:7D:38:F0:7F:71:76:8A:BF:2B:86:B8:03:57:2C:41:85:C4:DF
Certificate issuer:       /CN=879f8f15-9dc9-4663-aff8-bf62864b859c
Certificate serial:       010D0C9F43285847E35F745D862A77B81B24DA00
Authority key identifier: 86:B2:CD:FC:31:BA:34:57:EA:64:CB:E1:DE:50:AF:13:98:CF:C9:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/879f8f15-9dc9-4663-aff8-bf62864b859c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/879f8f15-9dc9-4663-aff8-bf62864b859c/2b41fdec-a039-3dcd-ae4f-a1cbbea76664.roa
Signing time:             Fri 15 Nov 2024 14:00:39 +0000
ROA not before:           Fri 15 Nov 2024 14:00:39 +0000
ROA not after:            Thu 13 Feb 2025 14:00:39 +0000
asID:                     398296
IP address blocks:        2606:8280::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/879f8f15-9dc9-4663-aff8-bf62864b859c/879f8f15-9dc9-4663-aff8-bf62864b859c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/879f8f15-9dc9-4663-aff8-bf62864b859c/879f8f15-9dc9-4663-aff8-bf62864b859c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/879f8f15-9dc9-4663-aff8-bf62864b859c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e3:5f:74:5d:86:2a:77:b8:1b:24:da:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=879f8f15-9dc9-4663-aff8-bf62864b859c
        Validity
            Not Before: Nov 15 14:00:39 2024 GMT
            Not After : Feb 13 14:00:39 2025 GMT
        Subject: CN=c12572a8-44a9-4de9-86f7-7b89c5c4c950
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:27:d9:71:b1:a1:1c:40:7c:65:cd:e4:ce:db:
                    c2:0b:63:b6:58:b3:7e:ca:68:b8:ff:5c:61:b8:49:
                    b2:89:94:75:80:e4:20:68:a9:cf:39:bc:90:42:ff:
                    a2:4e:e7:9a:0b:28:50:45:31:51:5c:54:35:96:e4:
                    b7:05:3c:9a:47:2d:50:44:fc:35:c7:9f:58:a7:35:
                    52:cb:82:c0:50:8f:51:6e:df:ba:02:bd:ac:4b:f9:
                    1c:ff:a4:01:1f:b5:3a:be:d7:51:79:82:29:82:6e:
                    d4:9d:9d:a2:a9:d6:2b:47:a3:d1:53:2c:f1:10:51:
                    6e:39:11:28:98:24:48:15:74:a0:86:84:0a:4e:ea:
                    8a:25:0d:20:41:63:92:d0:93:bb:95:2a:0a:ef:00:
                    d2:4c:75:7c:03:99:aa:a5:36:89:92:73:be:42:78:
                    d0:9d:7a:0e:a8:7b:b7:5e:19:86:a3:ef:80:a7:ef:
                    b6:2d:07:8e:52:aa:f0:0a:5e:d4:60:8e:2b:0b:7b:
                    69:34:91:ef:f8:a3:77:6a:cb:71:e1:8b:2a:40:7f:
                    66:f7:2c:97:d9:be:c8:72:d4:83:04:fb:1a:56:b4:
                    e6:14:07:a0:0f:30:f4:e0:fc:26:56:da:f9:22:0f:
                    83:68:b2:a6:b9:d0:ba:48:ac:bd:89:0a:d2:1d:41:
                    7b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:09:7D:38:F0:7F:71:76:8A:BF:2B:86:B8:03:57:2C:41:85:C4:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/879f8f15-9dc9-4663-aff8-bf62864b859c/2b41fdec-a039-3dcd-ae4f-a1cbbea76664.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/879f8f15-9dc9-4663-aff8-bf62864b859c/879f8f15-9dc9-4663-aff8-bf62864b859c.crl

            X509v3 Authority Key Identifier:
                keyid:86:B2:CD:FC:31:BA:34:57:EA:64:CB:E1:DE:50:AF:13:98:CF:C9:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/879f8f15-9dc9-4663-aff8-bf62864b859c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:8280::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:ee:dd:f8:58:2b:2c:98:b5:83:c3:8b:ab:3f:4c:2b:1c:7e:
         31:09:54:75:dc:e9:6f:f7:97:f0:df:c6:7e:c6:94:65:bc:30:
         76:13:3a:35:36:9a:e6:9e:e7:c7:50:55:c5:e2:42:12:b4:84:
         c0:a1:23:e3:cf:03:a0:e0:17:bc:fa:69:ef:9c:fb:d6:5e:b8:
         5c:fc:ae:c7:70:b2:f0:fa:1b:09:5e:5e:69:5e:89:9f:b3:fb:
         21:21:49:d3:94:91:cf:f0:63:3d:9b:ff:00:6c:46:ba:ba:db:
         ae:0e:34:0f:b8:30:bb:f2:3c:c8:42:e6:d1:b6:36:82:93:86:
         3d:2e:0a:86:97:3b:cc:4f:7b:a5:00:6c:73:94:ac:b7:dd:b3:
         02:f9:fb:8d:78:fb:0e:12:bb:30:2a:e5:6f:20:10:89:27:2c:
         35:05:d1:03:32:09:bf:7d:fd:28:3f:76:83:6f:5f:dc:13:ba:
         f4:5d:4e:92:3c:02:e2:86:0c:5d:1d:e5:c4:f9:eb:65:36:56:
         9c:7e:c0:84:f9:2a:2e:82:5d:43:05:f5:8e:3d:cb:92:cf:70:
         65:cf:ce:6f:24:60:94:11:0a:21:6c:ea:97:f9:f1:8c:8b:a3:
         9a:d2:35:4f:5b:b3:d1:b7:23:ab:79:78:25:a3:ba:b9:ce:cf:
         70:a1:01:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:09 2024 by rpki-client on console-ams.rpki-client.org