Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/9c5e49fc-a177-3465-bd18-2f3d04e61638.roa
File:                     9c5e49fc-a177-3465-bd18-2f3d04e61638.roa (raw, json)
Hash identifier:          IZWf6cScpsYtoWTyyYRh5MYRHk/zIy/jicE10WtxLTE=
Subject key identifier:   85:E8:46:1E:CE:33:59:56:77:4A:8B:04:15:61:0F:A5:A0:49:CE:D9
Certificate issuer:       /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial:       010D0C9F43285847600BA2809BB3A62C5E79D880
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/9c5e49fc-a177-3465-bd18-2f3d04e61638.roa
Signing time:             Sun 29 Sep 2024 13:00:41 +0000
ROA not before:           Sun 29 Sep 2024 13:00:41 +0000
ROA not after:            Sat 28 Dec 2024 14:00:41 +0000
asID:                     16839
IP address blocks:        2606:3600:5520::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:60:0b:a2:80:9b:b3:a6:2c:5e:79:d8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
        Validity
            Not Before: Sep 29 13:00:41 2024 GMT
            Not After : Dec 28 14:00:41 2024 GMT
        Subject: CN=7617ec09-d114-4fa2-aef4-99e192a50661
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9f:9d:39:fc:7e:6d:0a:18:9f:c4:b2:20:d9:
                    56:85:39:c0:fa:a3:5a:de:7b:d4:57:40:3a:26:2f:
                    44:6d:05:53:3c:b2:e8:d7:00:33:d5:41:d2:1f:f2:
                    04:43:6b:ed:f6:3f:83:47:d0:83:ca:c7:29:56:43:
                    4b:fa:d8:47:76:3f:c9:45:d2:a9:7f:f0:73:fc:9f:
                    31:65:50:4d:31:86:3f:d8:cb:e0:16:65:14:15:95:
                    ee:fc:57:1f:c7:81:7e:b7:a1:04:1c:4d:42:7b:79:
                    27:63:33:2b:83:0a:d9:59:39:3b:83:f2:05:d6:de:
                    85:e9:5f:a0:4e:87:6f:3c:c7:26:13:c7:08:e7:72:
                    97:ee:8a:a6:2d:27:f6:17:81:15:71:0a:98:a5:4c:
                    eb:19:ca:b6:ce:32:0e:20:09:7d:44:89:7a:2d:f9:
                    cb:e2:49:70:0a:3a:3f:de:ad:38:cc:a9:1b:19:ab:
                    45:47:a7:77:d0:8c:06:b4:e6:c4:bb:23:b8:f5:cb:
                    ad:f2:6d:ce:b2:d6:f1:fc:c8:44:05:a6:82:3e:fe:
                    9c:74:8b:de:23:55:ec:d2:fd:89:e4:3c:e0:3f:51:
                    d4:48:da:e9:95:5a:40:b4:cb:d0:d5:bf:96:38:1c:
                    a4:c3:27:1d:c6:ca:14:68:3e:aa:11:21:36:3c:98:
                    9e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:E8:46:1E:CE:33:59:56:77:4A:8B:04:15:61:0F:A5:A0:49:CE:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/9c5e49fc-a177-3465-bd18-2f3d04e61638.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl

            X509v3 Authority Key Identifier:
                keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3600:5520::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:09:29:e7:a1:af:d6:0e:67:b7:f9:eb:92:d6:5c:46:3e:50:
         94:f0:39:9d:61:40:0e:75:f7:2d:aa:29:54:4c:44:b6:8e:bf:
         06:4d:6d:d9:01:50:43:d7:a8:9e:8e:67:18:5c:6c:9b:24:c0:
         1c:10:df:48:66:12:67:70:db:5a:af:80:3e:4f:ef:05:88:2a:
         9e:4e:43:f8:5f:82:63:9d:20:67:c9:64:da:57:a8:07:13:6b:
         d3:de:a4:38:42:0e:51:2f:b2:21:9f:f1:d4:e5:3c:9d:d1:dc:
         a9:89:b4:64:7b:18:40:2f:be:ff:f8:8a:32:3f:e6:a1:d7:25:
         c1:4d:67:c3:07:23:b8:6b:5b:d6:3f:39:0d:41:1b:66:b2:cf:
         e5:dc:a6:d8:4d:fd:77:f4:ad:49:6c:ac:84:42:68:ac:bf:da:
         c6:a1:93:64:9b:ff:8e:24:bd:26:d4:6d:4b:ac:d9:15:01:83:
         76:ed:de:73:1f:0c:9f:43:b4:7a:8d:dc:ee:f5:4b:56:38:a8:
         b0:9d:79:5e:7f:17:27:e8:77:f1:70:92:db:1a:91:13:e7:75:
         ea:b9:6e:4c:3d:3b:b0:92:56:17:35:f9:b7:18:2d:bb:60:25:
         6d:ed:96:f5:0d:f3:f3:ef:31:a4:41:5f:0f:6d:81:d2:d5:c2:
         65:69:93:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:23:06 2024 by rpki-client on console-fra.rpki-client.org