Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/333d93ef-e11b-349c-937e-ce8d305dac98.roa
File:                     333d93ef-e11b-349c-937e-ce8d305dac98.roa (raw, json)
Hash identifier:          Ik1rIYssByN+PoP6gcIA4dmejwjrWRLna/mNSJCLyKQ=
Subject key identifier:   6F:82:4D:26:2F:54:5E:67:6E:28:AF:64:9C:3F:9F:DF:86:11:53:7B
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285846F7AC4BAF3E586B4FACF22200
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/333d93ef-e11b-349c-937e-ce8d305dac98.roa
Signing time:             Thu 22 Aug 2024 12:00:00 +0000
ROA not before:           Thu 22 Aug 2024 12:00:00 +0000
ROA not after:            Fri 19 Dec 2025 05:00:00 +0000
asID:                     13335
IP address blocks:        2606:4700:40::/48 maxlen: 48
                          2606:4700:41::/48 maxlen: 48
                          2606:4700:42::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:f7:ac:4b:af:3e:58:6b:4f:ac:f2:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 22 12:00:00 2024 GMT
            Not After : Dec 19 05:00:00 2025 GMT
        Subject: CN=db0ef277-16c5-413f-af94-8edaf101b3fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b5:ab:6e:e3:78:53:4e:d6:67:9a:ad:a1:76:
                    87:c7:cb:70:bc:87:c8:c5:51:7c:fa:6b:4d:aa:68:
                    af:b3:5f:db:73:e8:51:16:d4:9d:32:23:38:7f:ff:
                    f7:cf:78:5a:12:eb:2f:62:21:a6:b5:72:58:7f:4e:
                    97:c3:d1:c7:f6:a5:85:07:aa:41:49:69:ba:0b:49:
                    11:d4:f9:77:75:16:c8:fc:ae:f0:15:ba:45:91:b0:
                    f7:4f:53:56:d1:f1:96:d7:c7:bb:a5:ab:f4:0b:69:
                    61:d9:f3:d7:0e:b2:74:04:41:34:a7:7b:94:29:1b:
                    7f:97:10:0c:ff:88:3e:2e:53:20:14:5d:ea:51:3e:
                    76:57:59:31:6c:61:71:66:12:44:5c:54:06:be:33:
                    3d:54:f1:b6:b1:a7:cb:bb:fb:54:4b:e0:bb:96:87:
                    04:2a:92:a0:40:c7:19:4e:84:e7:a1:3d:57:2b:07:
                    ee:e9:67:58:cd:bd:98:2e:90:00:79:da:da:94:d7:
                    fc:91:03:46:d3:fa:12:22:bc:b7:b5:3a:54:d2:84:
                    63:c9:68:60:89:fa:ba:81:f6:cc:7a:cd:5a:e9:17:
                    08:c4:8e:2d:47:1b:49:10:67:6e:5e:86:fd:70:86:
                    55:79:75:d7:7a:20:6c:82:74:86:25:01:6f:52:2b:
                    1b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:82:4D:26:2F:54:5E:67:6E:28:AF:64:9C:3F:9F:DF:86:11:53:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/333d93ef-e11b-349c-937e-ce8d305dac98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4700:40::-2606:4700:42:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:00:a2:9e:c3:68:43:e5:a3:43:26:62:21:ac:0d:0d:1f:9c:
         75:fb:3e:27:c0:2d:61:d9:0a:56:60:0a:9d:8d:9e:37:7b:04:
         c6:21:a4:e9:95:26:d6:df:02:b4:79:14:bb:4d:1d:9a:2c:a4:
         43:e4:61:66:d6:24:42:40:27:2a:d6:74:58:83:cd:aa:ee:9d:
         a9:20:5e:27:db:27:fa:2b:f8:bb:90:fc:13:39:7d:1b:68:9c:
         65:4d:a9:46:83:18:85:61:fc:86:95:87:e7:35:d0:e7:40:9f:
         70:5a:8b:9b:28:66:ff:22:0c:c3:bd:78:46:d6:d3:bc:5d:72:
         04:6d:f3:c0:b8:e2:92:c5:36:6f:28:5f:97:63:e1:a3:32:66:
         7b:1e:66:f2:ef:a8:c7:32:d5:43:42:13:1c:e0:7f:e6:0b:c9:
         6f:3f:fd:ef:2f:b8:a7:b8:1e:db:7a:db:5e:97:c5:2c:43:10:
         85:58:22:e6:ff:09:20:81:8e:d1:68:c2:c9:50:31:7b:35:c9:
         d1:eb:46:79:71:eb:02:60:67:05:93:02:61:5d:c4:73:bf:f1:
         6d:12:0d:35:a1:60:09:9e:28:f3:39:a1:84:ac:8f:86:6a:44:
         fd:33:a7:58:8f:e7:d5:49:97:c5:f6:72:3b:f7:30:27:ec:cd:
         17:c0:f8:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:01:02 2024 by rpki-client on console-ams.rpki-client.org