Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/3b0d4d50-1cb7-3c73-b058-64185717f9ce.roa
File:                     3b0d4d50-1cb7-3c73-b058-64185717f9ce.roa (raw, json)
Hash identifier:          y1qTJiAEnJm4H5xzHFs78N7ubjSy6Y+h0tlJGXwbRy8=
Subject key identifier:   5E:9D:D4:C7:FE:91:1D:27:F1:41:8B:0E:C2:05:64:11:B5:92:CE:14
Certificate issuer:       /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial:       010D0C9F43285847CA3F7FFB0D215E82DC1F1740
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/3b0d4d50-1cb7-3c73-b058-64185717f9ce.roa
Signing time:             Wed 06 Nov 2024 14:00:41 +0000
ROA not before:           Wed 06 Nov 2024 14:00:41 +0000
ROA not after:            Tue 04 Feb 2025 14:00:41 +0000
asID:                     397182
IP address blocks:        2606:c7c0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ca:3f:7f:fb:0d:21:5e:82:dc:1f:17:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
        Validity
            Not Before: Nov  6 14:00:41 2024 GMT
            Not After : Feb  4 14:00:41 2025 GMT
        Subject: CN=4de990a4-beb8-4c40-8f4d-25030e6b18b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:87:5e:8d:d3:93:9f:86:65:64:81:22:6f:6f:
                    76:d4:e7:76:20:37:47:6a:42:9b:ea:f8:a6:e2:a0:
                    81:f0:fb:42:a8:d6:0b:7f:b0:47:4b:11:5e:ff:07:
                    90:d4:72:3c:39:a3:23:a6:87:a5:db:ab:a2:16:5b:
                    7f:97:ac:b3:de:ea:fa:62:7d:d9:32:06:fb:c5:5c:
                    ea:f2:c5:bd:45:81:3b:df:2b:43:a2:ee:44:fb:e6:
                    70:3c:8e:7b:03:ae:12:0e:43:8f:42:9c:23:89:81:
                    af:e8:a6:e7:5e:6e:ce:a5:14:8e:79:2f:1b:2c:9b:
                    25:0a:02:aa:1b:aa:7c:a3:4e:6e:81:3b:c8:55:08:
                    ed:12:72:ee:02:5c:b1:5f:39:53:7d:bd:9b:0d:90:
                    54:c9:dc:17:4c:88:32:a3:d7:ed:a8:a2:cb:aa:82:
                    55:c3:6e:5b:8f:49:34:45:55:0b:b9:64:82:91:84:
                    c4:ae:58:c1:4e:e4:25:a9:6a:10:c3:0d:ce:75:29:
                    12:51:b1:01:b1:bb:d2:db:d2:7f:f3:7f:48:38:d4:
                    5a:70:71:73:f9:bc:a4:28:5a:3e:52:20:b9:c1:62:
                    f1:a7:20:2c:23:89:06:7d:3d:61:f9:2f:4a:ae:06:
                    a7:48:1b:af:57:b8:79:de:bf:70:b0:00:25:87:e1:
                    0c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:9D:D4:C7:FE:91:1D:27:F1:41:8B:0E:C2:05:64:11:B5:92:CE:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/3b0d4d50-1cb7-3c73-b058-64185717f9ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl

            X509v3 Authority Key Identifier:
                keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:c7c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:59:cf:a2:ff:53:2d:12:f1:81:c6:8a:7f:6b:ff:36:34:68:
         74:16:54:70:fe:57:11:55:04:00:b4:45:a8:0f:73:08:50:ce:
         2b:d1:be:02:ba:fb:16:fc:79:a6:23:66:4b:73:67:97:8c:c1:
         f7:59:86:4f:94:a8:ea:db:b8:54:ac:69:8b:66:d2:77:5e:e5:
         a9:dc:7f:f1:8f:27:89:82:dc:c3:57:d2:69:d0:ca:a9:8a:92:
         da:af:ed:a0:d2:b9:b2:e5:ff:53:ca:ef:02:2e:b4:eb:4a:25:
         88:49:94:c4:7a:4f:5f:6a:ff:6c:88:b8:34:a0:d1:06:05:03:
         04:05:43:3e:dc:c5:7c:87:a1:6b:3e:3c:08:21:e2:66:06:54:
         2d:32:02:c7:3e:0b:c7:73:8e:41:41:f6:32:55:3e:d0:da:e2:
         e3:9c:2b:b0:cf:2c:2d:0d:af:ca:53:bf:c4:9c:e2:7e:d2:3a:
         9c:c4:5a:c7:e7:43:b0:ae:28:bc:55:58:dc:55:77:43:d0:81:
         52:7e:80:55:45:75:5c:57:96:f2:5f:73:61:f2:3d:03:53:f5:
         8e:42:3a:9c:f1:21:87:bf:ce:41:3f:25:40:29:8b:13:79:0a:
         68:27:5b:d7:1b:11:7e:fd:75:a6:7b:ea:3c:fa:f1:46:68:7f:
         35:39:4d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:23:06 2024 by rpki-client on console-fra.rpki-client.org