Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/845f1553-f08d-39f9-a899-cec424893769.roa
File:                     845f1553-f08d-39f9-a899-cec424893769.roa (raw, json)
Hash identifier:          oSCpsZfGOFFRtj5MEkpgVisn01/LyEUImnfO5JBhEVI=
Subject key identifier:   85:8C:68:2A:A7:8A:71:35:4E:33:EA:81:C9:40:1E:AC:D6:90:E1:A4
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F4328584749B604722E898C36AF559168
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/845f1553-f08d-39f9-a899-cec424893769.roa
Signing time:             Sat 21 Sep 2024 13:00:41 +0000
ROA not before:           Sat 21 Sep 2024 13:00:41 +0000
ROA not after:            Fri 20 Dec 2024 14:00:41 +0000
asID:                     62651
IP address blocks:        2606:b300:8600::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:49:b6:04:72:2e:89:8c:36:af:55:91:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Sep 21 13:00:41 2024 GMT
            Not After : Dec 20 14:00:41 2024 GMT
        Subject: CN=69fa178f-f754-4f3b-a34c-1777d71b7be8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:3e:21:21:1e:6f:4b:13:0f:0f:3d:e1:1f:ed:
                    3b:d3:2d:59:d9:65:61:7d:0d:c3:bf:65:ad:c9:29:
                    37:8e:c9:38:da:1a:e7:9b:01:fb:51:a9:7c:c0:23:
                    e7:d1:0a:36:0a:2a:14:fc:f7:22:0a:a8:a4:4e:d2:
                    67:d8:db:01:05:77:78:b9:e1:99:53:2b:bb:18:db:
                    18:0f:64:14:62:38:a7:9b:ba:2c:88:09:97:b5:8b:
                    94:73:18:8c:c0:7a:e7:9d:7d:33:ee:51:ff:37:03:
                    37:af:4d:5f:1a:68:04:8d:47:b3:aa:6f:e2:a1:df:
                    c1:79:0c:5c:ee:0e:3a:c0:0b:bc:83:f1:46:72:5c:
                    61:45:34:cd:52:e1:b2:62:29:8f:9f:28:8e:69:64:
                    13:9c:ce:5f:66:3a:f4:8a:34:ce:26:3c:6d:c8:f6:
                    f9:b6:22:0e:95:5f:3a:27:b4:20:d1:20:ff:3a:8d:
                    72:f3:fa:64:2b:f9:66:92:2a:bc:6b:0d:f9:11:66:
                    e8:87:15:12:a1:13:23:ca:c5:75:a6:bc:be:5c:32:
                    fb:2d:b0:7c:4b:3f:bf:0d:cf:56:a0:b9:c2:d0:e5:
                    59:1f:f3:8d:01:d0:e0:ec:79:16:c5:a6:d9:df:cc:
                    e0:41:9c:0a:e9:2f:07:75:40:42:30:9e:04:47:8d:
                    0b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:8C:68:2A:A7:8A:71:35:4E:33:EA:81:C9:40:1E:AC:D6:90:E1:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/845f1553-f08d-39f9-a899-cec424893769.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:b300:8600::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:7c:c1:11:1f:0c:b4:96:a3:75:8a:e1:90:ef:63:08:f6:2a:
         3a:00:43:37:2a:18:92:19:55:d9:43:dd:ef:1c:f5:cf:4a:20:
         2a:7f:c2:44:e5:fe:0b:9b:64:72:38:4b:60:f1:a7:38:f0:09:
         6b:85:5a:99:0b:ff:4e:b4:12:13:c4:1d:ad:21:53:08:86:1d:
         48:01:de:b0:92:f3:56:33:d9:87:f1:5e:9d:b6:12:33:31:8a:
         28:d2:d7:1b:db:6d:26:23:15:48:8d:ed:06:04:35:38:a6:50:
         93:82:b2:45:b3:5b:f4:a2:0a:ef:9b:77:9e:21:31:bc:33:e4:
         e8:ee:d6:8e:fd:f8:7c:34:ce:8d:46:f7:32:bb:5f:8b:7a:e8:
         f5:76:3c:d9:e9:df:c4:7c:8b:d0:ba:c7:7f:b2:0f:5c:9e:e1:
         bc:45:ae:85:af:ef:13:4b:bd:af:dd:dd:2e:e9:46:b3:0c:cb:
         3e:61:66:8d:5b:e7:bd:61:1d:5a:a6:e8:b3:63:48:7d:c6:03:
         77:7e:0e:bb:23:30:1a:9e:e7:04:22:00:ea:ea:8f:38:99:4e:
         74:56:d5:0c:13:3f:4a:82:88:33:3d:53:6e:a8:4a:00:91:91:
         9a:16:99:4c:ee:40:8e:55:b8:5c:7b:60:f3:03:b1:3c:49:cf:
         2e:de:35:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:10:50 2024 by rpki-client on console-ams.rpki-client.org