Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/49158061-73a5-3e35-8fc0-77a11062d181.roa
File:                     49158061-73a5-3e35-8fc0-77a11062d181.roa (raw, json)
Hash identifier:          T2lhtR0ZP6FLRd61KeUynHgVPYQm9hJcZtD79HydyTI=
Subject key identifier:   B7:D2:9E:A2:88:E6:7D:07:72:09:D2:54:53:FF:A8:F0:1B:71:3E:C9
Certificate issuer:       /CN=6e9c5894-f794-4209-a00d-cf232363d7c6
Certificate serial:       010D0C9F43285847F1F4861ECBE828CD584FF140
Authority key identifier: EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/49158061-73a5-3e35-8fc0-77a11062d181.roa
Signing time:             Wed 20 Nov 2024 19:22:27 +0000
ROA not before:           Wed 20 Nov 2024 19:22:27 +0000
ROA not after:            Tue 18 Feb 2025 19:22:27 +0000
asID:                     14618
IP address blocks:        2605:b040:7::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f1:f4:86:1e:cb:e8:28:cd:58:4f:f1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e9c5894-f794-4209-a00d-cf232363d7c6
        Validity
            Not Before: Nov 20 19:22:27 2024 GMT
            Not After : Feb 18 19:22:27 2025 GMT
        Subject: CN=71b5cc8b-be18-4a65-9de3-2e65727bd341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e6:72:66:56:76:e1:d9:7b:ca:f7:ec:67:3e:
                    7a:cb:b8:42:77:62:59:d9:ee:19:d9:49:89:b2:0e:
                    6c:40:60:15:68:72:b3:d5:0d:13:b6:98:89:29:8d:
                    82:15:a2:2b:30:21:59:79:62:de:e7:88:56:17:80:
                    34:5e:6a:02:a4:e8:c4:5b:1a:d7:a5:cd:39:9e:3a:
                    ee:56:08:81:48:fe:18:5c:48:50:5b:be:85:47:94:
                    35:08:56:fd:6d:e2:60:ad:6f:30:74:5b:ca:bc:e6:
                    c8:01:1b:10:bf:38:da:f9:dc:ca:69:4f:16:ff:a0:
                    b4:d9:5f:85:ed:84:64:97:b2:fe:7e:2d:35:ed:97:
                    92:71:65:0e:e9:0a:e8:ba:0a:7b:8b:37:4b:1b:65:
                    1f:47:5f:6b:9c:26:81:8a:5a:9d:bc:74:8d:9b:1c:
                    23:c3:e4:a1:00:73:48:08:80:3e:c4:64:c1:79:5e:
                    ae:07:31:f5:4b:96:f6:ba:77:d4:eb:a3:e7:cc:9f:
                    f1:db:0b:76:88:e1:21:d9:bf:4d:d6:cd:a8:44:50:
                    24:e8:05:a2:ba:99:67:7a:03:aa:d3:28:a4:05:d8:
                    8c:79:ab:22:0f:ff:6f:17:51:c6:d1:75:bb:99:d1:
                    c0:75:17:96:38:02:ec:59:53:84:1d:27:56:20:a3:
                    67:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:D2:9E:A2:88:E6:7D:07:72:09:D2:54:53:FF:A8:F0:1B:71:3E:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/49158061-73a5-3e35-8fc0-77a11062d181.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl

            X509v3 Authority Key Identifier:
                keyid:EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:b040:7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:aa:1d:0f:e0:5e:1a:63:6d:45:c1:d1:71:a2:6e:af:c6:9c:
         c9:eb:a3:73:13:3e:3c:97:1d:a6:99:46:6f:68:e9:f9:66:80:
         aa:04:ae:38:aa:c6:a3:f7:1e:91:a0:8d:6c:18:c7:3d:9e:37:
         ba:f3:a1:a5:5e:27:a3:07:4a:0f:44:76:49:c8:8a:a1:02:af:
         e6:2e:3c:ef:25:99:6e:2c:b7:f7:e8:53:ce:fd:54:35:4d:e1:
         ad:d7:da:08:1e:cc:70:09:aa:26:67:1c:aa:87:62:04:d3:de:
         ec:b4:dd:f6:ef:1e:86:cf:26:55:5a:fb:67:3e:82:d7:4d:34:
         f1:cc:41:83:8a:d3:d1:cd:0e:12:7d:c9:27:95:a8:81:14:1e:
         58:5e:26:42:0e:fc:16:90:06:20:12:42:c0:c5:c3:d0:b0:4e:
         dd:df:ee:fa:d2:95:65:69:88:3c:64:fb:6c:64:b5:fc:48:3d:
         fa:dd:c9:0f:95:78:27:b4:a8:8e:b4:d0:4b:cb:af:64:b8:7c:
         a8:a3:c8:d1:41:7f:0c:34:39:44:a4:ee:d6:ff:29:64:b0:d3:
         fd:b2:ae:09:bb:c0:9c:39:b8:8a:f9:5e:df:50:ea:77:08:18:
         65:de:79:4c:d9:5d:20:0a:34:e5:c3:cf:8f:13:bf:3a:b9:b5:
         a7:54:e7:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 20:58:39 2024 by rpki-client on console-fra.rpki-client.org