Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42b6e093-f636-4e25-936b-6fc6232f50c5/f6ca69fc-afe5-3eea-8a7a-15f18ae6e21a.roa
File:                     f6ca69fc-afe5-3eea-8a7a-15f18ae6e21a.roa (raw, json)
Hash identifier:          kDel8DkuDYRro5HrjtzOjLDxW3j9TU7bKzNF2Rd5yXs=
Subject key identifier:   63:D4:2E:69:4C:D9:08:57:80:54:D8:AD:21:3A:97:F2:05:00:B0:83
Certificate issuer:       /CN=42b6e093-f636-4e25-936b-6fc6232f50c5
Certificate serial:       010D0C9F43285847845672D07DE5A3937E73CA80
Authority key identifier: DF:25:1D:13:0F:4C:E6:2B:9C:69:A3:4E:C0:E6:AA:14:9E:58:1E:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42b6e093-f636-4e25-936b-6fc6232f50c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42b6e093-f636-4e25-936b-6fc6232f50c5/f6ca69fc-afe5-3eea-8a7a-15f18ae6e21a.roa
Signing time:             Sat 12 Oct 2024 13:00:42 +0000
ROA not before:           Sat 12 Oct 2024 13:00:42 +0000
ROA not after:            Fri 10 Jan 2025 14:00:42 +0000
asID:                     955
IP address blocks:        2606:82c0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42b6e093-f636-4e25-936b-6fc6232f50c5/42b6e093-f636-4e25-936b-6fc6232f50c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42b6e093-f636-4e25-936b-6fc6232f50c5/42b6e093-f636-4e25-936b-6fc6232f50c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42b6e093-f636-4e25-936b-6fc6232f50c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:84:56:72:d0:7d:e5:a3:93:7e:73:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42b6e093-f636-4e25-936b-6fc6232f50c5
        Validity
            Not Before: Oct 12 13:00:42 2024 GMT
            Not After : Jan 10 14:00:42 2025 GMT
        Subject: CN=d9e86ca6-9e95-40cb-a88a-730afefa54b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b7:85:1c:9b:72:47:a5:6d:5e:20:b8:ec:f8:
                    a5:1e:99:4e:d8:cb:33:b7:45:c0:df:16:97:54:d8:
                    1c:cc:d7:0f:e4:d4:0b:3d:2d:66:0f:c6:8d:51:78:
                    dd:51:1e:16:0a:35:15:0e:00:92:b1:80:3a:06:8b:
                    c0:c8:6e:18:64:7f:97:39:b1:ce:98:2d:12:f0:39:
                    f4:a6:bf:2b:fa:4c:14:56:82:af:a2:3a:f5:57:62:
                    f0:5c:2c:75:4f:9c:a2:d1:d8:44:01:28:69:05:cc:
                    d4:e9:91:29:4d:ca:ec:20:a3:14:1c:7d:d7:58:ee:
                    33:ff:0a:4c:c5:6e:df:fa:8e:65:74:4f:87:e4:0c:
                    d9:f3:17:d7:5f:a1:e3:29:39:dd:6f:0d:57:9a:fb:
                    a6:be:d0:2d:b4:0b:60:1b:ae:40:c2:94:16:3b:7e:
                    db:18:06:c4:90:db:3e:21:93:3c:64:cd:b5:5e:bf:
                    2d:bd:37:98:7b:6e:95:5a:ca:7e:35:b4:a2:78:61:
                    00:50:c0:89:3b:de:e7:5d:37:d5:f8:92:87:4c:b8:
                    ed:43:7c:f2:7d:9e:82:3c:bc:d9:26:a7:00:6e:3c:
                    1e:f9:4c:db:15:31:45:97:74:63:0f:bc:09:85:64:
                    7a:b9:85:88:39:c6:4c:32:4c:a2:e1:d2:ed:57:67:
                    27:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:D4:2E:69:4C:D9:08:57:80:54:D8:AD:21:3A:97:F2:05:00:B0:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42b6e093-f636-4e25-936b-6fc6232f50c5/f6ca69fc-afe5-3eea-8a7a-15f18ae6e21a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42b6e093-f636-4e25-936b-6fc6232f50c5/42b6e093-f636-4e25-936b-6fc6232f50c5.crl

            X509v3 Authority Key Identifier:
                keyid:DF:25:1D:13:0F:4C:E6:2B:9C:69:A3:4E:C0:E6:AA:14:9E:58:1E:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42b6e093-f636-4e25-936b-6fc6232f50c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:82c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:77:27:95:f8:5d:ba:fe:b8:8e:37:2c:33:8f:ff:dd:f6:c2:
         45:86:52:88:1d:fd:fb:30:f5:2b:17:95:f8:f1:a5:d5:cc:48:
         b6:22:71:0a:c2:0c:b8:5c:44:fd:66:4e:d8:93:44:ff:67:fa:
         38:f5:10:8d:3c:3b:45:0c:fb:91:77:6f:52:13:8e:31:2a:11:
         99:ba:78:a5:2f:2b:8b:8a:08:8c:4d:18:0f:76:dd:a4:c9:29:
         8a:b7:6f:12:dc:a9:bd:e6:fa:52:36:42:ad:99:ec:53:d1:f0:
         d3:20:e9:34:e1:ee:c0:03:3d:7c:24:ae:55:1c:56:7e:d2:c6:
         6c:bd:27:36:6a:a6:6f:d1:2d:76:7a:59:c4:14:2e:7b:9d:e8:
         60:e9:2b:f4:51:a7:5e:47:4a:d6:78:9e:80:70:03:76:55:31:
         02:1e:e5:18:c7:35:29:d5:06:0a:82:d8:e5:9d:e3:9c:06:3d:
         5b:92:3b:86:c1:3f:8b:f1:ce:06:e1:2b:db:76:b4:ff:08:e1:
         89:c4:ea:58:02:81:bc:cc:b0:fe:90:b1:83:09:01:75:6d:c2:
         5e:fc:56:5b:66:b8:1c:b0:de:cc:a7:00:d2:67:32:66:69:ac:
         91:b9:30:69:57:13:f1:a9:37:86:34:2c:0e:a9:20:61:19:19:
         d4:88:8c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:21:54 2024 by rpki-client on console-ams.rpki-client.org