Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3c26fccf-2d01-3546-a678-afd3c9cd6519.roa
File:                     3c26fccf-2d01-3546-a678-afd3c9cd6519.roa (raw, json)
Hash identifier:          hMD5NBHLJKlywzixXlftiVVda1tgoXFvHr/pdh3hAFE=
Subject key identifier:   90:B5:C3:B5:BA:2C:03:38:15:F1:90:8A:2E:85:3F:3E:37:3E:2C:DF
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F432858473B54F16C9BCBAD1FE6A07A00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3c26fccf-2d01-3546-a678-afd3c9cd6519.roa
Signing time:             Sun 15 Sep 2024 12:00:00 +0000
ROA not before:           Sun 15 Sep 2024 12:00:00 +0000
ROA not after:            Fri 19 Dec 2025 05:00:00 +0000
asID:                     13335
IP address blocks:        2606:4700:40::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3b:54:f1:6c:9b:cb:ad:1f:e6:a0:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Sep 15 12:00:00 2024 GMT
            Not After : Dec 19 05:00:00 2025 GMT
        Subject: CN=b1fc43b7-d103-43d2-9a2b-fc6f645825fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5d:ea:59:e0:46:52:79:a4:15:d3:7b:1d:66:
                    25:1a:f5:08:cd:0a:51:ef:a6:e3:60:21:cf:07:f8:
                    92:c7:85:23:d9:56:97:e7:1f:af:37:b1:e8:38:87:
                    95:e6:79:fe:2d:e8:4e:87:13:dc:ba:d1:9f:be:56:
                    c1:8c:64:68:4f:96:c2:9e:1a:50:73:32:eb:3a:ec:
                    fe:ca:70:7c:87:92:e7:87:39:f3:e7:5b:84:07:74:
                    7d:e5:0f:38:b9:17:2f:03:57:e2:27:47:11:37:c8:
                    69:77:7f:c8:ec:3b:05:09:59:00:af:b2:6d:d3:2a:
                    68:59:92:d8:d1:ec:64:5a:8c:06:cd:30:78:36:5a:
                    a8:01:26:2d:c1:0b:0f:f2:89:93:9f:9c:74:7c:e2:
                    f8:14:5e:57:c0:94:a3:f5:cf:af:cd:c1:1b:02:4c:
                    6b:ae:56:2b:7f:21:55:85:51:40:90:87:7a:2b:59:
                    b5:1d:e6:15:6f:2a:9c:28:fa:83:00:f7:f0:34:14:
                    3e:83:97:6d:4a:8b:8a:18:d2:ea:12:94:40:86:1a:
                    e0:53:fc:be:57:30:b0:d8:bf:ab:29:be:aa:f9:12:
                    33:62:cf:22:0a:89:e9:09:63:6d:cb:0a:5c:61:6d:
                    ab:fb:8d:21:85:32:48:2f:48:37:f9:4d:1c:6f:23:
                    cc:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:B5:C3:B5:BA:2C:03:38:15:F1:90:8A:2E:85:3F:3E:37:3E:2C:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3c26fccf-2d01-3546-a678-afd3c9cd6519.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4700:40::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:ed:fd:f9:ce:c2:b9:61:1b:99:7b:29:c8:a1:81:6d:54:35:
         63:f3:1a:e8:fe:20:03:4a:1b:29:52:12:8c:0d:33:9a:1d:bb:
         46:98:d7:4e:72:c2:61:91:ba:2d:d8:fd:19:0e:78:a1:18:8f:
         84:31:48:19:72:3c:af:10:a1:8e:34:8d:2b:74:a3:b7:37:42:
         50:86:fc:d5:66:ff:60:87:f5:4b:14:5e:88:20:9f:4f:c4:fa:
         b0:5c:f4:c1:d3:54:7d:99:80:91:f0:84:81:1b:e5:98:9e:e0:
         88:6a:fe:83:ce:7f:f1:98:db:b3:75:4f:f2:3d:43:7a:20:c2:
         16:12:00:d8:24:39:30:55:1c:47:ad:e3:52:3a:cb:0d:83:ae:
         18:6d:77:67:2b:09:51:2f:29:91:4b:2a:60:dc:dd:1f:38:d9:
         dd:ba:24:72:99:4d:77:9f:1a:0f:c7:89:98:71:87:f9:63:b9:
         bf:73:28:ae:33:6e:43:79:f4:cb:b3:07:04:c5:42:c0:7d:4f:
         f1:b0:7d:41:cb:ea:32:2f:37:99:ab:f2:27:d7:7e:45:df:2e:
         c2:1c:e7:85:1d:26:cc:e5:83:f2:da:72:fc:4f:d5:8b:d5:0f:
         7a:9e:3f:f2:ea:3f:ee:53:a3:9b:44:9a:28:f1:ad:a3:fc:ee:
         70:4a:dd:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:20:36 2024 by rpki-client on console-fra.rpki-client.org