Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f/a06d614f-16f7-331e-8592-956602a28aba.roa
File:                     a06d614f-16f7-331e-8592-956602a28aba.roa (raw, json)
Hash identifier:          GofKwMrIhqMYYqcbXLkc/aTgbkmqwKz7AY1aZY5YZd0=
Subject key identifier:   18:2E:4D:00:B3:C3:41:1B:4E:4B:79:31:6E:FC:9B:7F:2E:3A:C4:C6
Certificate issuer:       /CN=ec23d019-d079-49df-94b6-ad79d138e90f
Certificate serial:       010D0C9F432858478E1BBE1C43BDA21290B35700
Authority key identifier: 7B:45:19:0A:67:71:07:CE:9A:BC:4B:A6:4F:63:DD:81:75:A4:BA:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f/a06d614f-16f7-331e-8592-956602a28aba.roa
Signing time:             Wed 16 Oct 2024 01:00:31 +0000
ROA not before:           Wed 16 Oct 2024 01:00:31 +0000
ROA not after:            Tue 14 Jan 2025 02:00:31 +0000
asID:                     399196
IP address blocks:        2606:7540:f000::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f/ec23d019-d079-49df-94b6-ad79d138e90f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f/ec23d019-d079-49df-94b6-ad79d138e90f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8e:1b:be:1c:43:bd:a2:12:90:b3:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec23d019-d079-49df-94b6-ad79d138e90f
        Validity
            Not Before: Oct 16 01:00:31 2024 GMT
            Not After : Jan 14 02:00:31 2025 GMT
        Subject: CN=64293595-7a6e-4765-a0cb-3d4f1c57833d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:8c:d4:7e:80:74:37:21:1f:b3:ef:bc:9a:f4:
                    05:4a:1f:d4:98:b5:24:c4:d0:ad:8b:1e:0b:d9:e2:
                    98:0d:bb:30:54:eb:e5:cb:91:30:4c:5e:04:4c:65:
                    b8:be:31:5d:64:e4:47:c6:01:da:17:8c:4e:8a:d4:
                    02:fe:fe:52:f5:8d:15:63:44:d1:39:a4:d7:43:8a:
                    be:45:0f:72:48:f7:6a:c6:00:d2:88:ea:16:4d:d7:
                    db:f3:c2:84:e5:30:c7:7c:66:ce:79:5d:30:28:61:
                    7d:fa:f1:2f:60:95:1b:00:6c:a6:28:f2:d4:1e:45:
                    5e:34:16:2d:4c:17:29:f2:b4:b0:af:4b:93:fc:27:
                    f1:82:25:4c:1f:87:6c:a1:2b:b7:28:ef:ef:a1:d2:
                    b4:20:b7:25:8c:b1:17:f4:08:3b:f9:bd:44:f6:8b:
                    ae:bb:83:29:98:88:6e:49:f0:c0:15:25:3e:fc:fc:
                    f5:ad:5c:24:98:d5:d4:c2:fd:56:19:d8:f3:b2:31:
                    f5:eb:0f:b8:94:c3:29:14:fe:88:37:b0:1b:cc:33:
                    81:89:48:dc:bd:66:c0:55:a2:a5:9f:97:f0:0a:b6:
                    88:19:7a:0e:9e:7b:89:78:dd:03:8e:1d:7a:02:00:
                    10:79:43:63:6f:75:f1:b8:c3:50:9b:33:66:82:f5:
                    22:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:2E:4D:00:B3:C3:41:1B:4E:4B:79:31:6E:FC:9B:7F:2E:3A:C4:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f/a06d614f-16f7-331e-8592-956602a28aba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f/ec23d019-d079-49df-94b6-ad79d138e90f.crl

            X509v3 Authority Key Identifier:
                keyid:7B:45:19:0A:67:71:07:CE:9A:BC:4B:A6:4F:63:DD:81:75:A4:BA:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7540:f000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:84:d0:e4:18:1f:69:af:4a:de:63:01:90:a3:99:0d:2c:0c:
         45:f1:d4:74:82:7c:9f:42:30:92:60:95:03:6e:63:39:1f:33:
         9b:fc:6a:a1:83:81:67:a9:01:98:01:8d:68:1c:a0:09:3d:f7:
         6a:81:8c:a3:3d:ce:fc:fb:6f:75:9b:4c:44:35:7a:cd:3d:22:
         b1:1c:6b:b0:16:5e:1b:6d:92:29:5f:26:29:b6:c4:1d:71:7a:
         0a:81:03:bf:4a:ec:35:22:8d:ee:f3:cb:6f:8f:f5:a8:d2:24:
         c3:c4:66:30:3c:2f:2c:f2:e0:cb:94:e6:24:d2:08:8c:16:af:
         2c:6e:ef:84:ed:0a:f7:f5:a3:54:87:01:60:cd:2d:4e:d1:fa:
         84:a6:8b:a7:77:04:15:17:b8:ac:f9:53:0e:ce:f0:31:99:04:
         41:ff:aa:f4:fa:35:ee:a8:8d:44:e9:eb:9a:35:03:f2:f9:ba:
         ba:0b:bc:d7:ce:13:e1:33:87:d9:2c:a3:02:38:16:be:a9:26:
         43:5a:3e:6e:cc:7b:73:2b:72:6f:f5:34:14:23:3f:e4:8a:d9:
         c3:73:86:69:c8:ee:95:71:1f:29:3c:02:2d:ec:93:c8:8b:55:
         f9:40:b0:80:91:64:75:2f:81:e8:92:e3:2a:46:3a:d8:3e:a1:
         f4:82:c8:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:24:31 2024 by rpki-client on console-fra.rpki-client.org