Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/f19b701f-4b64-3c06-9d45-c1e353da2929.roa
File:                     f19b701f-4b64-3c06-9d45-c1e353da2929.roa (raw, json)
Hash identifier:          tLBeEKD6NCdZXWhKVKlD+WnIBNJk3qHoD95V3ZLjn3Q=
Subject key identifier:   25:DC:4C:5F:F7:87:1F:7B:E3:F2:AB:50:22:54:D5:24:A8:69:7C:0A
Certificate issuer:       /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial:       010D0C9F43285847600BA23176C38EEF403B8980
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/f19b701f-4b64-3c06-9d45-c1e353da2929.roa
Signing time:             Sun 29 Sep 2024 13:00:41 +0000
ROA not before:           Sun 29 Sep 2024 13:00:41 +0000
ROA not after:            Sat 28 Dec 2024 14:00:41 +0000
asID:                     16839
IP address blocks:        2606:3600:180::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:60:0b:a2:31:76:c3:8e:ef:40:3b:89:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
        Validity
            Not Before: Sep 29 13:00:41 2024 GMT
            Not After : Dec 28 14:00:41 2024 GMT
        Subject: CN=6f861833-7a36-4b98-ad29-2cf728d3793d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:1c:8c:51:c3:a1:a9:cf:ca:bd:3c:8a:02:c9:
                    5c:6c:06:05:f9:42:c9:6b:a8:a4:25:80:c9:25:3c:
                    80:25:00:e4:11:01:5f:9b:76:39:ce:ee:5d:e5:ba:
                    f1:a9:b7:37:3d:6c:a5:c7:14:de:6c:28:2e:7e:d1:
                    4f:de:99:64:5a:a2:84:ca:f4:f4:a4:a2:e2:95:df:
                    a7:6a:e6:65:f5:ee:76:44:c4:ae:d2:c8:e4:b1:86:
                    84:09:a3:ee:87:1b:77:d9:de:87:7a:cc:e3:4f:62:
                    fa:ce:f0:fa:3f:74:f3:11:26:35:da:d5:c1:b8:51:
                    8e:21:7d:84:80:fc:cd:c1:cf:97:0e:30:d3:bf:04:
                    80:ed:46:07:b1:14:91:22:2d:af:94:06:c3:1a:c7:
                    1b:e7:ea:e8:11:5f:60:e9:c5:b3:68:83:22:9d:3a:
                    0c:cf:81:96:5e:60:1d:4c:37:c7:35:7e:a4:f9:02:
                    aa:06:23:65:ff:1d:c6:f0:d0:40:d4:f5:89:df:23:
                    52:3d:d8:bb:49:f5:a0:e4:3d:8e:5e:6e:d9:37:7c:
                    3b:2a:5c:f3:fe:a8:82:89:60:53:fe:cf:8b:01:73:
                    4d:91:8e:f2:3b:ad:db:92:2f:ea:cc:e2:7e:2c:56:
                    9f:36:44:c5:ff:91:1a:3b:97:2c:2b:0c:ca:22:7c:
                    5c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:DC:4C:5F:F7:87:1F:7B:E3:F2:AB:50:22:54:D5:24:A8:69:7C:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/f19b701f-4b64-3c06-9d45-c1e353da2929.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl

            X509v3 Authority Key Identifier:
                keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3600:180::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:da:9d:95:81:f9:28:fc:69:53:d7:14:fe:b2:ba:8a:3d:a0:
         ec:cc:20:31:54:7f:0d:71:51:ef:6a:c1:04:68:70:0d:7f:f7:
         32:b5:e1:8a:30:34:02:f1:f1:23:b3:d3:59:84:5c:ad:8b:fc:
         16:e9:06:9f:8a:36:38:f8:5e:ea:dc:6b:1e:a3:0f:e2:2b:79:
         ce:35:d0:dc:0a:b0:02:12:51:f2:91:c5:0d:9c:dc:dd:f5:98:
         34:14:42:42:61:1e:ec:26:72:f1:81:db:e5:e8:9a:bc:3c:fb:
         9e:71:e1:15:e3:10:69:d3:f8:50:df:34:15:27:66:5d:f0:cc:
         76:64:df:88:3c:4e:c4:db:0b:fc:d6:5f:ed:68:d7:25:ef:2b:
         51:0a:d1:84:a7:57:fa:b1:63:15:ba:4f:4a:07:fc:8b:01:cc:
         e4:a9:31:76:3b:c8:46:1e:74:51:01:03:1e:8b:d2:67:a7:f7:
         3a:2f:85:c5:e6:c0:c2:20:6a:66:18:9b:9b:f0:56:1e:59:8d:
         49:81:b6:9a:ad:1b:ee:0c:dc:04:3a:b7:78:3f:2e:a9:77:d9:
         03:97:1a:24:2f:eb:fd:a2:f6:17:5f:63:6d:97:ab:f4:20:d2:
         44:77:5c:e6:50:40:c2:4d:db:ba:1d:d9:63:d6:fb:34:68:60:
         7f:79:c7:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:23:07 2024 by rpki-client on console-fra.rpki-client.org