Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/7463cdb5-e306-3d42-9b16-fafcf27f63d2.roa
File:                     7463cdb5-e306-3d42-9b16-fafcf27f63d2.roa (raw, json)
Hash identifier:          dIHKA/g0v08blwX6wMTzn6dLC2p9pR9V0MfEJu2rOyc=
Subject key identifier:   C7:3B:EF:DC:B1:DC:36:24:F0:24:C6:2D:09:DF:18:CA:3D:50:CB:E8
Certificate issuer:       /CN=0c3cf342-4337-44bf-ac45-d0772ad75854
Certificate serial:       010D0C9F43285847AE36C4567685A94965384390
Authority key identifier: 33:E5:6D:7B:B8:6A:FB:59:72:2D:35:F7:95:9D:2A:87:95:1F:95:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/7463cdb5-e306-3d42-9b16-fafcf27f63d2.roa
Signing time:             Sun 27 Oct 2024 13:00:41 +0000
ROA not before:           Sun 27 Oct 2024 13:00:41 +0000
ROA not after:            Sat 25 Jan 2025 14:00:41 +0000
asID:                     49791
IP address blocks:        2606:2040::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/0c3cf342-4337-44bf-ac45-d0772ad75854.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/0c3cf342-4337-44bf-ac45-d0772ad75854.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ae:36:c4:56:76:85:a9:49:65:38:43:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c3cf342-4337-44bf-ac45-d0772ad75854
        Validity
            Not Before: Oct 27 13:00:41 2024 GMT
            Not After : Jan 25 14:00:41 2025 GMT
        Subject: CN=edec85cb-70c9-4c79-bbf4-a76806ebc25a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:37:07:73:e2:a4:a4:58:52:7b:60:a7:92:9b:
                    73:2d:35:10:ea:c3:df:57:a1:04:47:39:af:66:1e:
                    73:4e:cd:49:f2:fe:51:7c:01:c4:0d:6d:8a:05:22:
                    e0:62:d3:88:77:0b:6c:84:18:90:e8:c6:d9:6e:ca:
                    34:4d:81:f7:f2:f8:c1:1e:ab:27:5e:de:74:72:bf:
                    0e:53:23:b4:5a:c6:6b:8e:37:0e:69:88:77:f0:fa:
                    cb:7c:c3:da:79:e1:82:96:a6:13:cb:7d:6c:64:3d:
                    ae:52:a2:e6:52:e3:bf:2a:0c:6e:a1:17:a8:52:af:
                    b4:d5:06:28:b4:c3:b5:ea:2e:b8:2d:8b:c0:59:40:
                    ba:cf:2e:10:85:76:95:3a:51:f7:2f:26:fd:1e:49:
                    34:3d:9e:c2:ae:e0:2a:23:9a:6f:f5:b7:b8:a1:ed:
                    62:de:f0:d1:a5:0f:89:4e:64:70:34:70:73:8a:cc:
                    dc:b6:8a:76:fc:d0:7f:f7:b3:3c:c1:59:cb:01:f1:
                    e8:f5:81:a7:26:be:43:34:0b:f0:fc:9e:e6:b4:08:
                    30:70:8f:18:93:c0:c9:35:20:26:d7:4d:da:99:95:
                    02:8f:39:16:2c:b6:07:0b:c0:64:68:7e:0a:39:d1:
                    99:eb:2e:bf:ed:53:e5:3a:be:ba:09:d8:a8:52:d4:
                    2a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:3B:EF:DC:B1:DC:36:24:F0:24:C6:2D:09:DF:18:CA:3D:50:CB:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/7463cdb5-e306-3d42-9b16-fafcf27f63d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/0c3cf342-4337-44bf-ac45-d0772ad75854.crl

            X509v3 Authority Key Identifier:
                keyid:33:E5:6D:7B:B8:6A:FB:59:72:2D:35:F7:95:9D:2A:87:95:1F:95:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:2040::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:b7:8e:0d:12:59:78:1d:c6:73:aa:4d:18:69:d6:a7:03:08:
         61:ee:af:30:f9:fd:d9:27:ab:62:01:46:aa:4e:95:d0:28:7a:
         b9:e8:b0:d8:c2:48:a3:f0:b4:38:d0:41:46:18:58:1c:6f:7f:
         a2:f1:a6:88:e5:3a:1a:ba:4f:8e:25:e7:d3:dc:e1:00:99:98:
         24:1f:6e:76:b3:21:91:2c:2e:c1:25:e6:e0:74:c9:a4:33:c3:
         ac:ef:a8:b7:22:0c:51:2c:91:a7:5c:4f:78:99:be:bb:c1:0a:
         a2:98:41:e2:16:9f:98:aa:db:69:ac:69:6e:9a:1d:56:52:29:
         19:a6:94:96:e9:6d:73:08:dc:3d:c0:31:18:8e:2a:b1:28:70:
         20:a1:db:3e:67:47:31:ac:2c:78:38:d8:df:ef:34:2d:f2:06:
         b2:39:a0:34:db:0d:2d:47:67:6a:f5:a4:42:84:27:11:52:7c:
         93:8e:32:db:15:a3:4e:b5:ed:93:57:78:6f:06:30:de:9e:1d:
         a8:11:1b:46:5f:ff:05:bf:b5:1f:89:26:28:31:3c:eb:66:21:
         bc:f5:3a:0a:c3:c0:7d:18:33:ad:a9:68:13:c1:78:70:56:90:
         d1:db:b0:ae:99:ab:35:d0:37:13:31:9e:da:a3:d0:02:b5:ba:
         27:bb:29:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:35:20 2024 by rpki-client on console-ams.rpki-client.org