Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/18a7b006-bca2-30b0-b588-6f3437d24a3c.roa
File:                     18a7b006-bca2-30b0-b588-6f3437d24a3c.roa (raw, json)
Hash identifier:          L/BlDDGa+aTNYeWKbhq9vAAJGQHLYwYctta3q1rPqZs=
Subject key identifier:   9F:BF:11:5C:EE:7E:53:8B:10:74:66:37:0A:FD:7C:74:44:D3:57:35
Certificate issuer:       /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial:       010D0C9F43285847600BA20D23D221A247908300
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/18a7b006-bca2-30b0-b588-6f3437d24a3c.roa
Signing time:             Sun 29 Sep 2024 13:00:41 +0000
ROA not before:           Sun 29 Sep 2024 13:00:41 +0000
ROA not after:            Sat 28 Dec 2024 14:00:41 +0000
asID:                     16839
IP address blocks:        2606:3600:130::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:60:0b:a2:0d:23:d2:21:a2:47:90:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
        Validity
            Not Before: Sep 29 13:00:41 2024 GMT
            Not After : Dec 28 14:00:41 2024 GMT
        Subject: CN=0ade1019-938a-4cb7-8d9c-180a3f7ab44b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:af:3d:dc:8a:4a:4a:c9:87:99:e5:c6:88:c9:
                    a6:dc:08:9d:4c:c4:d0:09:28:a3:43:bf:da:f1:0b:
                    66:dc:2c:77:06:ff:b7:4f:90:ca:f3:57:16:5f:74:
                    94:e9:72:5d:1f:b4:d1:d1:19:6c:5b:01:c9:48:51:
                    7e:d0:65:8e:a2:42:39:aa:e2:06:05:37:3d:ce:f9:
                    03:5e:a3:08:c2:d7:b7:8d:b4:be:c0:5c:0c:1f:c8:
                    e0:06:18:f0:60:81:c4:e4:d6:98:9d:52:50:40:f1:
                    8a:c1:70:7f:f2:ae:a6:0f:68:d4:31:98:d0:e7:3c:
                    55:ae:3a:20:1f:e6:7a:c7:2a:3e:b2:0c:c1:3d:e8:
                    d0:76:e5:33:f6:2d:04:27:9a:b3:f1:75:1f:36:0d:
                    e4:a0:72:16:cd:22:f7:e1:33:66:69:2e:43:05:a5:
                    47:e2:3e:ca:e1:57:39:1d:47:01:a2:c4:63:d5:36:
                    c8:aa:01:09:ec:ac:b6:8f:22:f4:53:7a:78:83:65:
                    4b:9d:17:d0:e3:aa:09:b1:92:b3:f4:ae:54:19:21:
                    a8:b5:d1:bf:ed:d4:c4:70:79:d9:df:4b:7a:b2:3f:
                    51:fe:27:c3:dd:47:86:18:2d:a9:e9:b6:0d:47:5b:
                    a3:6d:89:ef:92:c8:97:b1:59:be:d4:3e:b5:d6:d0:
                    94:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:BF:11:5C:EE:7E:53:8B:10:74:66:37:0A:FD:7C:74:44:D3:57:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/18a7b006-bca2-30b0-b588-6f3437d24a3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl

            X509v3 Authority Key Identifier:
                keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3600:130::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:62:74:d2:98:22:9e:da:3b:11:57:f3:44:7a:3a:03:4f:fa:
         37:c3:2b:c9:a1:4a:bd:11:60:0a:53:c6:ca:4d:1b:22:2e:d8:
         39:da:8f:79:e7:4e:ae:7d:c0:8c:c5:64:93:69:5e:f8:ee:4f:
         ec:97:65:62:bd:03:4c:d8:47:0b:2e:80:33:8b:ac:16:42:2f:
         03:d3:f4:cd:87:68:41:fe:ff:44:55:3d:03:7d:96:c7:63:01:
         67:8f:8f:26:a8:aa:6d:a8:50:4d:32:da:8f:07:f1:2f:81:0f:
         8f:6f:e2:d5:bc:29:44:d1:ce:0b:cf:48:d0:e3:9d:ad:5a:db:
         e7:bc:39:02:64:7b:f9:36:14:ba:72:85:b4:f1:bb:7c:80:e3:
         0e:c4:b8:fb:6e:ca:6c:12:5d:7f:4c:17:c6:87:23:1e:b4:1c:
         c9:94:1d:d4:09:fa:12:94:eb:de:28:d3:dd:c1:a4:bb:ec:5d:
         e5:47:5f:53:c1:a0:8d:8a:c1:a8:4e:1b:24:57:73:14:24:9f:
         5a:68:89:32:54:9c:25:b3:c7:f3:88:f8:97:a7:af:88:f7:fe:
         69:b3:d0:aa:33:8c:79:1d:84:f8:2e:c4:bf:21:89:e7:b4:75:
         1f:26:a9:aa:d2:ff:21:b2:09:a5:f0:0d:84:87:0b:7a:27:34:
         2a:93:5f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:37:50 2024 by rpki-client on console-ams.rpki-client.org