Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/75fe4f8b-c4ba-3401-a256-cab4e53ee5b0.roa
File:                     75fe4f8b-c4ba-3401-a256-cab4e53ee5b0.roa (raw, json)
Hash identifier:          1F1/SmTBn/CQiL9kKULVgYNoLl1ocBkmm+Mc7Th/mE0=
Subject key identifier:   00:A4:CC:71:B0:0B:33:34:11:9A:81:3C:94:49:2E:17:33:40:E1:58
Certificate issuer:       /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial:       010D0C9F43285847600BA1FBC7D525A0CCD4F0C0
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/75fe4f8b-c4ba-3401-a256-cab4e53ee5b0.roa
Signing time:             Sun 29 Sep 2024 13:00:41 +0000
ROA not before:           Sun 29 Sep 2024 13:00:41 +0000
ROA not after:            Sat 28 Dec 2024 14:00:41 +0000
asID:                     16839
IP address blocks:        2606:3600:120::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:60:0b:a1:fb:c7:d5:25:a0:cc:d4:f0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
        Validity
            Not Before: Sep 29 13:00:41 2024 GMT
            Not After : Dec 28 14:00:41 2024 GMT
        Subject: CN=2080dd8d-e545-4dfa-96c5-79d4fb6d867f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:e5:f6:6b:a0:b0:6a:98:10:51:95:51:12:6f:
                    49:ee:3d:49:14:ce:90:1c:cf:55:2e:97:bd:39:66:
                    21:63:e1:1e:cc:10:e2:a8:6d:8d:41:9e:22:40:f8:
                    87:e2:2f:ff:c6:55:10:34:5b:b3:de:11:a3:2d:22:
                    51:21:68:88:39:4e:5a:6e:1a:0b:1b:8c:80:ad:fd:
                    4b:a0:f2:d1:72:fd:4c:22:2e:d5:a4:66:38:09:fc:
                    cf:26:f7:13:90:ae:2b:49:8b:b0:6c:8b:30:22:f4:
                    0e:43:fd:20:c6:b9:6d:14:4f:97:a3:15:34:3b:f3:
                    9b:54:ab:d9:c5:e4:4c:83:c8:a1:48:4a:76:d5:18:
                    08:f7:a0:ca:f6:a3:03:92:4f:2e:5d:20:1e:78:c0:
                    d5:9f:fc:b3:7c:0f:3a:34:94:a7:c2:85:c3:f5:53:
                    ba:03:c5:6e:19:7f:08:21:1d:4a:73:0b:43:7d:1e:
                    cc:07:ff:13:7c:db:21:06:18:da:57:88:a3:1c:9f:
                    bc:c0:36:a5:da:51:3c:f1:be:90:61:79:ad:c6:d9:
                    41:8d:70:91:25:ce:2d:a2:56:2f:b0:8b:cd:e1:02:
                    2a:5c:a4:3c:c6:7f:5b:65:f8:1e:dd:b9:c2:9a:14:
                    ec:cf:81:de:cb:5a:f3:6f:6f:59:e7:b6:72:6b:66:
                    cb:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:A4:CC:71:B0:0B:33:34:11:9A:81:3C:94:49:2E:17:33:40:E1:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/75fe4f8b-c4ba-3401-a256-cab4e53ee5b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl

            X509v3 Authority Key Identifier:
                keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3600:120::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:b4:c7:0e:34:b1:ed:3a:86:7b:68:a8:b9:67:1a:0e:72:75:
         0a:48:2b:6b:42:a9:8d:8f:71:07:6f:23:5c:ef:38:92:58:12:
         3b:e4:13:1b:55:ca:ea:e0:98:9e:b3:37:6d:cc:d2:04:c1:31:
         46:64:5d:c5:7b:b9:9b:60:81:65:92:2f:36:57:36:34:9c:51:
         45:38:fc:29:5e:b6:0d:16:f2:98:81:14:67:4c:a5:e8:c5:89:
         62:29:9d:ed:c3:7b:b6:0e:30:93:da:1d:1f:4f:a0:42:3f:28:
         75:28:ec:59:86:5c:d0:c5:ff:07:ff:45:7f:52:98:85:99:a8:
         7b:0b:5e:1e:f2:13:cc:d2:e3:23:0f:c4:6a:be:c2:40:93:aa:
         af:23:10:a5:9b:5c:9b:ac:cb:5f:f9:50:ce:06:bc:03:cc:9b:
         1e:fa:30:69:84:db:62:20:b6:26:16:c7:11:02:5e:b0:64:c7:
         6f:d0:5b:4f:b1:5b:67:61:e8:6b:e3:c9:b1:8b:7b:bd:e3:49:
         4a:cc:b4:80:da:fa:39:fc:87:8b:4e:44:e3:8d:f8:06:2c:8f:
         2a:f4:05:85:55:31:8c:3e:ab:9d:8a:e2:0d:14:d8:6c:1d:c6:
         85:65:60:22:27:72:a0:7d:ae:6b:77:4f:b0:6b:8f:e5:fc:52:
         ff:c4:05:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:23:06 2024 by rpki-client on console-fra.rpki-client.org