Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/87a3c9bd-9a46-3bfe-a2d1-1472c9ff7cf5.roa
File:                     87a3c9bd-9a46-3bfe-a2d1-1472c9ff7cf5.roa (raw, json)
Hash identifier:          yomdM8voBZyo6beq0uZJhcirlT4U0EXJobg9CZIMi1s=
Subject key identifier:   28:71:3B:63:98:57:52:64:3D:9F:AB:5B:13:E2:7F:56:83:DA:E9:4C
Certificate issuer:       /CN=6e9c5894-f794-4209-a00d-cf232363d7c6
Certificate serial:       010D0C9F43285846FA25787394DC8B3D70F80F80
Authority key identifier: EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/87a3c9bd-9a46-3bfe-a2d1-1472c9ff7cf5.roa
Signing time:             Sat 24 Aug 2024 01:00:31 +0000
ROA not before:           Sat 24 Aug 2024 01:00:31 +0000
ROA not after:            Fri 22 Nov 2024 02:00:31 +0000
asID:                     16509
IP address blocks:        2605:b040:1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Sep 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:fa:25:78:73:94:dc:8b:3d:70:f8:0f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e9c5894-f794-4209-a00d-cf232363d7c6
        Validity
            Not Before: Aug 24 01:00:31 2024 GMT
            Not After : Nov 22 02:00:31 2024 GMT
        Subject: CN=f1f36eb0-8247-417e-a4f3-2ad7f94fbb5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:eb:a5:4c:07:17:35:d9:c3:8d:4f:5f:13:94:
                    07:86:df:0f:f1:de:3f:e1:1f:b3:be:af:50:5a:52:
                    70:1c:39:9a:ab:11:dc:3f:29:bf:02:2c:8d:26:c3:
                    ef:06:a0:bb:b8:03:b2:76:8b:a4:1c:c0:0e:f5:b7:
                    cc:50:3e:22:75:ff:16:c2:a9:f1:f7:69:b2:40:70:
                    87:c3:e5:f2:2b:d8:18:92:7c:f7:73:9d:47:af:60:
                    7a:45:d1:dc:fa:53:70:ad:16:3a:ac:a7:7b:85:37:
                    e3:f8:a0:94:01:61:57:f5:f0:d5:d2:d2:31:6d:31:
                    66:0f:f1:13:44:32:a4:e7:07:df:75:26:03:ce:7e:
                    bf:70:21:6d:49:07:8d:51:a3:f8:88:ae:55:8d:f4:
                    29:d2:2c:d3:3c:ba:a6:0c:a7:5f:d6:0b:67:06:76:
                    5c:59:74:b0:99:ee:8f:c9:3d:d0:6e:61:74:64:32:
                    d6:58:80:5b:85:a4:d9:b6:73:ec:0e:33:66:ef:25:
                    92:d3:90:1a:ae:73:a7:2a:6d:9a:ad:91:6b:e1:5f:
                    48:9b:63:82:9a:cf:bd:ad:2c:44:8e:61:b2:69:eb:
                    59:43:67:1c:2f:d6:0d:5e:4c:0f:98:be:f3:14:92:
                    7c:91:03:80:56:51:50:82:7e:24:33:f4:42:4b:a5:
                    75:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:71:3B:63:98:57:52:64:3D:9F:AB:5B:13:E2:7F:56:83:DA:E9:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/87a3c9bd-9a46-3bfe-a2d1-1472c9ff7cf5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl

            X509v3 Authority Key Identifier:
                keyid:EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:b040:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:c2:c7:2b:09:ba:c8:62:35:20:b8:ea:ce:d4:2b:c3:50:e0:
         11:af:f3:04:a0:2b:9a:0a:97:6e:1b:c5:fc:90:91:a2:94:d5:
         7e:dc:ed:86:b9:44:f3:de:e5:61:2a:84:4d:5b:8f:c2:15:45:
         a3:22:c9:74:0c:d1:ec:06:3a:9d:f6:27:27:56:e0:48:23:ac:
         2d:b6:36:70:94:ba:17:5a:f9:d3:08:8d:a7:5e:06:ff:71:83:
         ac:52:e7:ee:d2:b9:a1:89:ef:e9:8b:03:aa:a9:47:57:89:18:
         c8:c6:9d:df:fa:3f:98:51:c5:c5:61:e0:ac:79:c8:7b:9d:2d:
         e7:a8:10:1b:58:9a:20:77:35:39:49:8d:f2:29:66:b7:22:ad:
         4d:16:2e:88:3b:d0:db:33:ae:3a:60:2c:44:7f:a1:bd:6d:cd:
         8c:7c:bb:fc:32:d3:4e:0e:6b:96:b6:cc:a7:80:f0:0a:da:b8:
         88:c4:9a:ee:f9:d5:60:6d:86:17:1d:fe:31:d9:e9:75:ff:e7:
         17:e1:c9:b7:a5:d6:48:b3:f1:99:3f:ee:8b:1d:83:e2:c7:77:
         7e:43:27:1e:c8:9d:7d:f5:c7:a9:0e:d2:75:3f:3b:46:b2:0b:
         6a:89:d8:1d:33:f5:64:c6:bf:ac:f5:1f:1b:fb:f0:21:c9:57:
         4d:b3:08:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 20:44:55 2024 by rpki-client on console-fra.rpki-client.org