Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/6b1a5c88-96bd-339e-9ff6-f4cebdd61ab3.roa
File:                     6b1a5c88-96bd-339e-9ff6-f4cebdd61ab3.roa (raw, json)
Hash identifier:          dq1W9bxAzTHlR5ciss7i6lmDu0MN2VJ0KPE0NsDsZu0=
Subject key identifier:   26:3C:F6:F4:03:7C:86:28:E6:F9:40:01:76:7D:4D:F9:8C:60:41:8F
Certificate issuer:       /CN=d498318a-7059-42be-9b60-234aedba5e34
Certificate serial:       010D0C9F43285847A5D6AE10818136C5E909F6C0
Authority key identifier: 1B:58:B3:AC:48:09:D4:84:9D:3A:66:E0:5F:08:9C:D2:10:C1:11:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/6b1a5c88-96bd-339e-9ff6-f4cebdd61ab3.roa
Signing time:             Thu 24 Oct 2024 13:00:42 +0000
ROA not before:           Thu 24 Oct 2024 13:00:42 +0000
ROA not after:            Wed 22 Jan 2025 14:00:42 +0000
asID:                     16787
IP address blocks:        2605:1c00:1ff0::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/d498318a-7059-42be-9b60-234aedba5e34.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/d498318a-7059-42be-9b60-234aedba5e34.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a5:d6:ae:10:81:81:36:c5:e9:09:f6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d498318a-7059-42be-9b60-234aedba5e34
        Validity
            Not Before: Oct 24 13:00:42 2024 GMT
            Not After : Jan 22 14:00:42 2025 GMT
        Subject: CN=0e9ef2c3-0484-4fd2-a0d6-45e0963df5fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:1d:ed:2c:a4:40:8e:42:86:90:5f:9c:48:5f:
                    a2:fe:fb:2e:4a:47:b3:3e:20:fa:33:07:e2:c1:cc:
                    d5:21:0c:95:13:d6:4a:da:b8:68:cf:b6:3a:bb:e6:
                    c4:4c:a0:1e:25:b4:43:0e:b4:7e:c1:3f:27:c6:7a:
                    2f:3b:12:18:5f:88:24:a6:46:03:6c:16:9a:73:56:
                    62:02:2c:39:65:29:45:49:57:0c:57:f3:29:a2:1e:
                    a3:fb:14:95:22:ab:f6:cc:8b:35:18:a5:dd:37:10:
                    fc:59:51:52:e4:7a:a8:d5:00:ae:cc:a1:d9:2b:2d:
                    6b:bb:be:3c:71:38:eb:cd:5f:c2:0b:b6:19:ae:51:
                    35:26:ab:ee:cf:ea:c2:87:58:2a:1a:f9:a6:03:ac:
                    11:61:bd:6e:87:09:b0:e1:14:9b:e2:57:90:ea:5f:
                    76:e7:f0:48:38:ab:00:e1:d1:db:fd:6f:8a:9d:95:
                    c8:cf:60:20:e0:27:56:93:90:7d:6a:26:4b:6c:1d:
                    79:73:2e:bc:0d:b4:ed:3c:c6:4c:db:ba:76:72:e3:
                    cf:92:0b:98:c4:ea:71:3a:ff:50:d4:97:2e:23:8b:
                    58:8b:09:8f:fb:52:27:08:32:89:0e:df:0c:00:95:
                    82:d8:87:30:65:46:1a:6d:b2:6b:5c:4c:b8:04:1a:
                    69:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:3C:F6:F4:03:7C:86:28:E6:F9:40:01:76:7D:4D:F9:8C:60:41:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/6b1a5c88-96bd-339e-9ff6-f4cebdd61ab3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/d498318a-7059-42be-9b60-234aedba5e34.crl

            X509v3 Authority Key Identifier:
                keyid:1B:58:B3:AC:48:09:D4:84:9D:3A:66:E0:5F:08:9C:D2:10:C1:11:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:1c00:1ff0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:f5:a1:53:7c:1b:e1:ae:42:fb:61:1c:9f:b6:b9:64:f9:aa:
         65:a6:59:0c:19:93:41:73:6f:1c:3a:a3:72:7d:cb:c1:50:d7:
         af:30:0b:93:5c:54:cf:72:5b:10:e2:1c:2c:3c:7a:cd:44:8e:
         ae:2b:60:dd:3d:3c:2d:c1:38:09:ea:33:06:89:63:46:29:8b:
         d4:03:1e:77:44:91:9e:4e:99:b7:81:4f:e5:78:31:42:c1:42:
         fe:29:da:00:62:a7:3a:cb:a0:3b:27:ed:58:a6:c5:cc:c5:42:
         aa:3c:98:8d:d6:94:55:43:7e:e1:59:46:35:31:d5:c1:98:ce:
         37:d9:35:76:ab:65:43:d4:48:8e:fc:37:86:11:92:43:ac:04:
         92:42:f9:dc:47:4d:cb:7b:6e:7d:ad:04:ee:9f:3c:ad:71:e8:
         89:b8:8a:27:77:db:6e:03:84:91:23:42:5a:65:46:f5:10:5f:
         61:10:a8:73:c0:f0:3b:2e:98:0a:4c:15:7c:48:67:7b:3b:6a:
         8c:fe:1d:56:36:f1:a8:a7:09:c9:b9:99:67:13:30:43:75:f9:
         5a:82:c0:7d:40:fc:65:5f:42:6f:22:84:56:c2:11:96:a8:8c:
         be:d6:ae:39:d6:2e:90:e0:77:29:fd:88:5e:c6:db:38:ea:71:
         b1:09:00:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:24:27 2024 by rpki-client on console-fra.rpki-client.org