Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06758d63-ebc2-49b2-b82c-063e47fb7a0f/a0755f26-e416-37e6-985e-75ad1864948a.roa
File:                     a0755f26-e416-37e6-985e-75ad1864948a.roa (raw, json)
Hash identifier:          tRGkPJE2YfxHGIgdjDtJasuWmqRNdegrLU3zPJNZCxA=
Subject key identifier:   89:A7:D1:F3:F1:A6:C0:34:27:8E:C5:02:26:26:00:20:18:2D:6C:A1
Certificate issuer:       /CN=06758d63-ebc2-49b2-b82c-063e47fb7a0f
Certificate serial:       010D0C9F432858474C80BE634D4682C3EFAE4200
Authority key identifier: 11:FE:D6:68:34:3C:F9:A3:DE:8F:AD:F3:20:09:E6:2A:66:47:4E:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06758d63-ebc2-49b2-b82c-063e47fb7a0f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06758d63-ebc2-49b2-b82c-063e47fb7a0f/a0755f26-e416-37e6-985e-75ad1864948a.roa
Signing time:             Sun 22 Sep 2024 13:00:40 +0000
ROA not before:           Sun 22 Sep 2024 13:00:40 +0000
ROA not after:            Sat 21 Dec 2024 14:00:40 +0000
asID:                     36263
IP address blocks:        2606:5cc0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06758d63-ebc2-49b2-b82c-063e47fb7a0f/06758d63-ebc2-49b2-b82c-063e47fb7a0f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06758d63-ebc2-49b2-b82c-063e47fb7a0f/06758d63-ebc2-49b2-b82c-063e47fb7a0f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06758d63-ebc2-49b2-b82c-063e47fb7a0f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4c:80:be:63:4d:46:82:c3:ef:ae:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06758d63-ebc2-49b2-b82c-063e47fb7a0f
        Validity
            Not Before: Sep 22 13:00:40 2024 GMT
            Not After : Dec 21 14:00:40 2024 GMT
        Subject: CN=bed7eb98-e623-4a66-bb74-31528788f385
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b9:5f:65:88:f6:06:88:94:52:de:24:08:a5:
                    bd:db:c4:5c:63:59:50:ed:69:a2:59:df:80:b6:3c:
                    31:56:1f:9d:af:b8:33:1f:9c:70:5e:82:4e:0b:ec:
                    8f:43:db:b3:2d:b3:91:ac:b0:e0:d5:9f:a7:a8:8b:
                    39:bf:e0:e3:7d:49:fa:e2:fb:45:ec:45:eb:1e:0a:
                    c0:5f:15:6c:95:5d:00:9f:1d:0a:e5:0a:d2:0b:09:
                    77:71:6d:2e:50:c5:fe:e3:04:96:60:6a:22:8c:e4:
                    ad:13:7d:c1:94:0b:c7:f7:37:0d:f0:01:ba:36:a1:
                    74:17:4b:c6:20:04:6c:a9:7f:39:4d:05:49:d7:1e:
                    2f:52:a6:a9:8a:fb:2c:90:f5:19:7d:b9:98:52:d4:
                    21:32:26:4c:e7:97:af:1b:33:e3:62:bd:33:45:74:
                    ad:f1:f1:29:b6:c4:36:af:5e:b8:95:4f:26:6f:9e:
                    12:fd:34:48:3f:fa:6a:72:0f:af:f4:54:5d:a5:7c:
                    71:9e:2e:cd:70:d4:0a:f6:63:b4:a5:aa:df:96:c0:
                    ab:5e:7f:ce:52:c2:bc:59:19:92:58:3a:9d:a9:d3:
                    fd:07:9d:f2:10:a8:be:f3:7d:c6:f4:c6:20:02:79:
                    36:0f:40:eb:ef:65:bb:30:b0:c6:54:8e:69:fa:e7:
                    80:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:A7:D1:F3:F1:A6:C0:34:27:8E:C5:02:26:26:00:20:18:2D:6C:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06758d63-ebc2-49b2-b82c-063e47fb7a0f/a0755f26-e416-37e6-985e-75ad1864948a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06758d63-ebc2-49b2-b82c-063e47fb7a0f/06758d63-ebc2-49b2-b82c-063e47fb7a0f.crl

            X509v3 Authority Key Identifier:
                keyid:11:FE:D6:68:34:3C:F9:A3:DE:8F:AD:F3:20:09:E6:2A:66:47:4E:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06758d63-ebc2-49b2-b82c-063e47fb7a0f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:5cc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:9d:e0:21:8d:d0:93:fc:10:cc:5f:d5:6c:a0:30:7d:27:43:
         df:90:60:23:85:4f:d1:b9:bf:97:13:b8:3d:83:57:81:cf:d7:
         c0:b6:00:8e:e5:85:a0:49:6e:e3:d6:4e:a8:06:55:a1:c7:7a:
         84:d6:de:9e:62:fe:d7:51:20:58:33:81:ea:41:44:9a:71:be:
         fd:fc:11:7a:5c:5b:e7:c1:d7:7e:d1:3f:f1:81:57:21:a1:83:
         a6:08:d4:6e:ab:5d:67:bb:e4:cc:28:4e:d3:72:4e:2d:80:f4:
         db:d5:e3:b6:2d:b4:2c:12:80:dd:9c:66:18:c1:cc:c9:ea:4a:
         96:22:7b:e5:7f:8c:b2:03:d1:1c:b7:5c:a2:69:32:bd:cc:fa:
         00:71:3a:c7:fb:33:9f:08:fc:05:09:45:37:9d:c8:c6:ad:94:
         39:3a:92:fc:23:f7:d8:2e:66:54:1a:3c:76:7d:7a:96:4b:7d:
         25:ed:af:44:bf:57:b4:a4:4e:e1:d7:ef:3d:a0:fc:e8:c2:7c:
         2b:b2:da:ad:ca:6f:11:0d:21:c9:d1:2d:02:34:0e:fd:93:58:
         2c:df:4a:bc:33:2c:75:d6:4d:db:61:8a:25:1f:4a:8e:a0:c8:
         de:b1:28:2a:27:b8:ea:f7:1e:79:f6:af:8d:0f:22:fa:1e:1e:
         04:86:64:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:35:18 2024 by rpki-client on console-ams.rpki-client.org