Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/efecd37b-b85c-330f-a2a8-5abf025d13d8.roa
File:                     efecd37b-b85c-330f-a2a8-5abf025d13d8.roa (raw, json)
Hash identifier:          1YcoXrKpTxrmVfD8jt/7tc4gzOEn3URf5t80OJYhVjw=
Subject key identifier:   1D:98:E6:16:BF:AF:18:B1:9A:9A:A7:22:DB:BF:0C:81:8C:79:21:AA
Certificate issuer:       /CN=8ce84fb2-c539-46e7-8212-12b9730afeba
Certificate serial:       010D0C9F432858478CB689C018D64800CF5D2230
Authority key identifier: D3:8A:39:65:E1:53:C3:03:64:C1:56:0F:C9:45:83:B6:FA:B1:38:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/efecd37b-b85c-330f-a2a8-5abf025d13d8.roa
Signing time:             Tue 15 Oct 2024 13:00:47 +0000
ROA not before:           Tue 15 Oct 2024 13:00:47 +0000
ROA not after:            Mon 13 Jan 2025 14:00:47 +0000
asID:                     22773
IP address blocks:        2606:8940::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/8ce84fb2-c539-46e7-8212-12b9730afeba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/8ce84fb2-c539-46e7-8212-12b9730afeba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8c:b6:89:c0:18:d6:48:00:cf:5d:22:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ce84fb2-c539-46e7-8212-12b9730afeba
        Validity
            Not Before: Oct 15 13:00:47 2024 GMT
            Not After : Jan 13 14:00:47 2025 GMT
        Subject: CN=0383592f-c12b-41a9-850a-edc123fa9e3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:6b:b9:57:70:e1:8c:09:a7:bf:74:ff:82:73:
                    9f:47:b7:19:47:c7:12:ad:9b:15:cb:ce:fe:3d:f4:
                    a8:47:2b:e2:60:98:41:4b:d5:b7:5e:6a:00:43:3a:
                    18:fb:72:dc:5a:e1:dc:3c:7a:83:2f:b6:7d:24:34:
                    fb:57:fc:18:6d:89:52:2f:47:e5:9b:2e:0e:2f:5b:
                    ba:96:9a:5a:ed:17:4a:b0:b3:fc:5e:e1:1a:b5:7e:
                    d5:26:13:f2:5e:ce:2c:38:c5:b1:35:c3:43:61:51:
                    21:d3:3c:2e:4a:7d:e5:19:1d:60:aa:8e:a5:98:da:
                    31:17:30:ba:cb:1c:5f:5f:32:07:df:0f:97:03:b4:
                    fd:18:4a:a9:c7:93:ae:90:b8:ba:d7:80:93:77:46:
                    c4:fc:b2:a8:e3:30:d0:ca:9c:64:b3:ba:e8:c5:a2:
                    ea:19:03:1e:1d:85:66:07:9d:8b:ae:af:2e:3f:a4:
                    79:40:a5:2a:8f:4f:8c:99:ef:d1:f3:85:21:ee:bc:
                    c8:2f:cc:ff:51:cd:b5:ee:b4:47:d1:f5:2b:95:b2:
                    0c:8f:75:43:19:d8:2a:84:d1:b7:2d:38:b4:87:2a:
                    58:a8:e7:2a:a8:a8:fc:6e:38:c5:e9:2d:ad:e9:65:
                    3c:43:2b:d2:2d:0e:38:c0:04:18:1d:4a:79:3a:bc:
                    6f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:98:E6:16:BF:AF:18:B1:9A:9A:A7:22:DB:BF:0C:81:8C:79:21:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/efecd37b-b85c-330f-a2a8-5abf025d13d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/8ce84fb2-c539-46e7-8212-12b9730afeba.crl

            X509v3 Authority Key Identifier:
                keyid:D3:8A:39:65:E1:53:C3:03:64:C1:56:0F:C9:45:83:B6:FA:B1:38:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:8940::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:b6:52:6d:82:de:22:da:49:03:22:18:4b:7d:de:92:e8:17:
         99:eb:c4:67:41:ea:cc:53:df:44:cf:e8:69:2d:6b:c1:0c:19:
         0f:35:bc:c7:de:fe:23:eb:05:cd:f5:74:08:db:85:12:99:2e:
         6e:1a:a8:ef:db:4d:24:d7:6e:ad:83:33:b4:7b:c0:4c:09:a3:
         4f:19:6b:70:18:9e:1c:84:32:b1:f4:fc:cc:3f:38:58:c8:36:
         83:e4:5f:2d:92:c4:c3:16:0a:58:12:f8:58:4c:7b:c8:c4:4f:
         22:5b:e0:06:8b:a3:bd:ef:1e:44:6e:0e:9b:5a:12:0c:d5:10:
         a9:5a:60:dd:36:04:63:e9:a0:cd:6e:99:da:e9:95:5b:54:8b:
         c1:58:59:b8:e7:9c:91:47:81:a7:6b:72:76:7f:df:6d:61:da:
         7c:75:33:df:3f:f9:21:21:f2:4b:3f:3f:58:4a:ef:1e:3e:47:
         d3:e1:97:7d:d8:1a:0c:e5:b6:26:cd:cd:3a:e4:1a:a4:61:3a:
         84:c6:cd:85:5f:ac:2f:aa:18:5e:c6:cb:21:c6:cf:f5:48:f9:
         b5:73:9e:bd:ef:22:eb:44:0f:15:42:ff:a2:01:b5:2c:71:24:
         95:0f:65:44:15:80:5e:a9:a8:f3:1d:60:7c:94:e2:06:4a:98:
         e8:85:9d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:55:07 2024 by rpki-client on console-ams.rpki-client.org