Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/5f1bc384-56e0-3814-a3cd-7f5aecd0f4c0.roa
File:                     5f1bc384-56e0-3814-a3cd-7f5aecd0f4c0.roa (raw, json)
Hash identifier:          6gzi3Nmd4GqtE2EmRjeRFBuEdcF00OhZSUDv6BLURRk=
Subject key identifier:   FC:0E:EF:E4:44:68:32:CC:5B:61:9D:2D:F4:EB:19:16:40:64:5A:16
Certificate issuer:       /CN=f13c298e-3179-4f35-9e7d-886ee3f9be0b
Certificate serial:       010D0C9F4328584744A12E16288A7FF64FA5E400
Authority key identifier: 56:56:CF:C5:B4:E3:45:16:37:F9:19:FA:67:97:3D:2E:48:27:E7:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/5f1bc384-56e0-3814-a3cd-7f5aecd0f4c0.roa
Signing time:             Thu 19 Sep 2024 17:19:41 +0000
ROA not before:           Thu 19 Sep 2024 17:19:41 +0000
ROA not after:            Wed 18 Dec 2024 18:19:41 +0000
asID:                     16509
IP address blocks:        2606:7740:2::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/f13c298e-3179-4f35-9e7d-886ee3f9be0b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/f13c298e-3179-4f35-9e7d-886ee3f9be0b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:44:a1:2e:16:28:8a:7f:f6:4f:a5:e4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f13c298e-3179-4f35-9e7d-886ee3f9be0b
        Validity
            Not Before: Sep 19 17:19:41 2024 GMT
            Not After : Dec 18 18:19:41 2024 GMT
        Subject: CN=d201efc6-0357-44f9-b03c-b7648f78825f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:9e:c9:5e:e0:74:26:50:af:55:bf:f7:31:3e:
                    0d:d8:31:03:f8:0f:b6:38:b5:36:c0:61:7f:25:12:
                    07:18:21:7e:25:3d:96:c6:16:10:e2:37:be:2f:ea:
                    7a:c6:f0:40:1f:b2:40:60:55:9c:5f:f5:de:82:06:
                    f7:89:79:cd:b8:4e:ed:b3:3a:f1:52:7c:cc:ea:31:
                    22:5c:09:20:e5:25:13:f8:b5:85:27:c5:e1:35:bc:
                    0a:c9:bb:0b:5c:ff:63:01:b0:32:e9:47:00:00:0d:
                    b0:65:2e:96:e3:25:0c:e7:02:25:3c:88:56:69:97:
                    46:ed:5f:96:e5:c5:4b:3e:7f:05:66:f3:e9:7e:f5:
                    11:a2:4c:01:05:64:57:77:bd:f2:01:f9:a3:bd:88:
                    a6:8d:7c:84:07:95:03:b4:ee:fe:92:9e:59:8d:49:
                    c1:4e:8d:b1:91:5b:b1:54:05:17:a2:d3:7d:44:21:
                    48:33:75:2a:da:57:d0:9e:19:02:e0:12:9e:4e:db:
                    8b:a9:aa:81:86:9b:b1:87:01:2a:9f:3f:e1:df:f9:
                    44:7b:46:6f:25:93:86:54:ed:23:b7:b8:a0:02:41:
                    a7:ee:7d:75:48:79:02:ce:1e:d5:b2:dc:ed:45:c4:
                    52:59:09:53:61:11:a2:6e:c2:d6:de:74:18:08:40:
                    03:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:0E:EF:E4:44:68:32:CC:5B:61:9D:2D:F4:EB:19:16:40:64:5A:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/5f1bc384-56e0-3814-a3cd-7f5aecd0f4c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/f13c298e-3179-4f35-9e7d-886ee3f9be0b.crl

            X509v3 Authority Key Identifier:
                keyid:56:56:CF:C5:B4:E3:45:16:37:F9:19:FA:67:97:3D:2E:48:27:E7:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7740:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:93:11:39:6e:c4:57:db:f4:04:8a:8e:ec:d3:32:50:ac:7b:
         08:45:8d:92:32:bd:e0:2c:b5:13:aa:14:34:4a:53:4d:d1:bf:
         af:ec:3a:7f:ed:21:83:69:19:a3:e5:68:f9:f2:46:9b:6f:74:
         03:e1:6c:9a:b4:62:1d:bc:4c:7b:71:a9:02:22:69:d5:5a:a8:
         d6:aa:a2:bc:c5:08:c9:b2:96:55:30:50:9b:95:33:9b:2d:83:
         27:7d:4d:bd:78:37:a3:2a:0a:36:d4:51:0d:d5:b6:95:15:89:
         92:51:2c:00:b9:4d:40:74:c6:b2:82:e9:06:75:2a:b5:b1:89:
         38:7e:9d:6c:96:56:07:88:2d:42:1b:8d:69:38:33:d3:e7:ce:
         b9:34:71:4b:49:f8:74:40:f4:88:e8:09:f0:f4:1c:13:8d:14:
         d2:4d:19:da:bc:56:f1:da:06:a9:80:9d:db:76:33:9f:73:03:
         8e:c3:77:4d:f9:90:2c:12:76:db:00:9a:99:8c:a2:ef:d9:a7:
         c4:98:5f:61:1e:d1:fe:4f:16:15:41:6c:a9:7b:44:31:aa:f0:
         eb:87:03:ca:72:bb:58:6f:90:82:6f:e7:59:e0:12:73:7b:49:
         00:61:fb:4d:d7:27:b6:65:9b:c6:bb:f5:14:52:e6:d2:e7:a5:
         ab:a8:a5:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:35:09 2024 by rpki-client on console-fra.rpki-client.org