Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/035f33ac-38bc-3011-8e40-3914196bba37.roa
File:                     035f33ac-38bc-3011-8e40-3914196bba37.roa (raw, json)
Hash identifier:          bi0ZqCoKIm9pPr5HAnZ544AQtx9e1r76skl2xP8ATxg=
Subject key identifier:   3D:B7:E5:9C:08:F1:9F:1A:E0:CD:73:04:E3:33:B2:2B:1A:3A:31:28
Certificate issuer:       /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial:       010D0C9F432858478CB691AED6BB59A8D396C300
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/035f33ac-38bc-3011-8e40-3914196bba37.roa
Signing time:             Tue 15 Oct 2024 13:00:47 +0000
ROA not before:           Tue 15 Oct 2024 13:00:47 +0000
ROA not after:            Mon 13 Jan 2025 14:00:47 +0000
asID:                     394285
IP address blocks:        2606:a100:f000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8c:b6:91:ae:d6:bb:59:a8:d3:96:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
        Validity
            Not Before: Oct 15 13:00:47 2024 GMT
            Not After : Jan 13 14:00:47 2025 GMT
        Subject: CN=b8e2c346-a390-43e8-8599-a5347fbd00d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:50:f1:bb:81:c4:c8:ae:87:95:c6:2f:66:0a:
                    cb:ae:90:6b:db:f2:c8:ac:8e:3d:0e:82:01:ba:0f:
                    e5:70:4c:6e:b5:4c:70:b6:f8:fe:24:35:44:7b:01:
                    fe:96:34:13:21:f6:9b:f5:0c:d0:f6:b1:1b:91:f0:
                    a8:44:10:2f:94:ab:1b:77:27:ec:bb:b8:68:4e:2c:
                    77:c6:98:af:2b:5f:e9:e9:d1:b7:f1:7f:4f:f9:23:
                    95:fd:62:5e:f2:a6:e7:3c:8f:4f:fe:f2:48:99:92:
                    8f:74:9c:44:02:d1:8b:29:c7:65:6d:12:76:39:27:
                    02:38:6f:d0:d4:55:eb:cc:07:51:3f:82:c4:cb:1e:
                    00:ec:74:94:99:d8:e6:9f:db:dd:66:8a:82:63:41:
                    5e:85:61:eb:d0:02:5a:5e:23:63:61:6b:27:24:3b:
                    e4:ed:29:f5:e9:12:bc:a9:8b:08:e6:5e:6a:22:31:
                    06:30:93:a1:c3:fd:55:fb:e9:0f:c2:2c:53:ab:04:
                    a3:d4:9a:39:3b:9b:bd:49:c1:76:f0:b0:a4:af:97:
                    fd:bd:c1:ef:e2:b4:9f:76:70:8d:0d:e1:10:9a:8f:
                    4b:52:26:eb:17:fe:a2:19:ab:3a:7a:34:74:9a:4d:
                    5d:80:24:16:64:d9:69:38:7a:ed:7f:b7:2d:20:28:
                    f6:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:B7:E5:9C:08:F1:9F:1A:E0:CD:73:04:E3:33:B2:2B:1A:3A:31:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/035f33ac-38bc-3011-8e40-3914196bba37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl

            X509v3 Authority Key Identifier:
                keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:a100:f000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:f7:b5:57:64:45:de:c1:48:0d:d5:e2:79:40:1e:30:72:ac:
         1e:39:17:a8:6e:a0:0d:c3:77:d4:2e:c2:88:8e:22:f7:4b:a4:
         75:43:94:cc:a1:50:a7:98:27:90:bd:67:5f:43:17:76:18:38:
         2c:d0:30:d2:d2:e8:23:07:59:e3:44:9b:a3:36:3d:80:5d:e7:
         a4:15:fe:70:db:70:33:52:08:48:5d:91:f5:a1:82:56:9b:f8:
         6f:87:29:b8:11:f7:88:bc:e0:e3:fc:4f:15:fd:99:b3:31:2c:
         af:03:aa:d3:83:ee:56:61:b3:34:d6:27:6c:57:b1:f9:70:d5:
         84:9e:cb:cd:77:bd:d9:ad:fe:a0:7b:e1:e0:e1:5c:c9:12:80:
         70:e6:e8:79:d6:49:3e:76:70:ef:61:e6:c6:d2:02:4a:67:a1:
         00:16:e8:34:86:d0:bf:1a:e1:99:46:9d:5d:70:85:ea:c2:55:
         35:0b:a9:c4:e0:d4:fa:05:c5:87:04:9e:84:be:63:b1:4d:9b:
         ec:14:6f:5b:ba:3c:72:9a:cf:e2:4a:6f:86:bd:41:94:69:8f:
         fa:bc:ca:29:65:72:04:f8:80:05:98:c7:8a:10:14:58:45:fe:
         a3:23:f9:21:76:66:ea:90:2c:e4:7c:20:4f:79:30:a7:46:15:
         2c:f0:9e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:24:40 2024 by rpki-client on console-fra.rpki-client.org