Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/2649b7f5-5a43-34f6-b9a6-a430a10c17cd.roa
File:                     2649b7f5-5a43-34f6-b9a6-a430a10c17cd.roa (raw, json)
Hash identifier:          CjaJZ3D2tojZG2D6npvEFGMmucxRn8b2WrjmrTQ4mGY=
Subject key identifier:   B9:22:AA:57:34:59:36:06:C8:50:7D:BB:CF:6E:03:27:31:96:87:5A
Certificate issuer:       /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial:       010D0C9F432858478CB6912DC8D2CCD7CB9D9A50
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/2649b7f5-5a43-34f6-b9a6-a430a10c17cd.roa
Signing time:             Tue 15 Oct 2024 13:00:47 +0000
ROA not before:           Tue 15 Oct 2024 13:00:47 +0000
ROA not after:            Mon 13 Jan 2025 14:00:47 +0000
asID:                     394285
IP address blocks:        2606:a100:7000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8c:b6:91:2d:c8:d2:cc:d7:cb:9d:9a:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
        Validity
            Not Before: Oct 15 13:00:47 2024 GMT
            Not After : Jan 13 14:00:47 2025 GMT
        Subject: CN=9340c849-83b6-4e6e-a23a-cb63827b9f63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:10:49:c6:aa:94:33:69:75:ad:35:01:b4:de:
                    1f:2c:04:2f:aa:3d:95:90:b6:b7:e0:7d:8d:ca:c6:
                    3a:53:92:a7:00:35:43:2c:91:a6:a5:9c:c9:6c:0c:
                    ec:52:29:42:21:82:82:8d:53:36:ba:2c:8e:f9:d7:
                    70:f8:63:db:da:73:7c:11:8a:34:ab:5d:b3:bc:b5:
                    57:09:38:ac:13:8f:7b:d7:f6:c1:e1:1b:93:2a:9d:
                    38:62:5b:a3:ac:8c:30:60:9d:47:ee:21:ce:aa:a2:
                    a4:98:9c:d0:42:6d:ba:45:d8:b9:d6:e0:18:50:22:
                    d0:b1:92:9a:a6:bd:09:74:d9:98:79:6e:89:12:9d:
                    ca:29:bf:ff:ea:0b:a5:41:78:18:74:28:e7:c7:9e:
                    79:4c:5b:18:b9:df:bb:69:c9:45:a6:17:ec:a4:f6:
                    91:b6:cd:f8:71:91:3f:6d:b1:aa:fc:55:75:41:37:
                    f7:1d:d3:4b:dc:93:03:e5:2f:a9:48:9d:5c:de:e3:
                    3e:30:63:d4:0d:e4:4a:2c:6b:f5:98:a3:93:3b:5e:
                    30:4d:7f:96:5c:ce:bf:ea:16:d5:a0:1a:d2:2c:b5:
                    76:e3:67:44:f1:07:d1:fd:77:0d:a9:e2:47:9a:f9:
                    f5:9c:f9:75:5a:02:ad:48:f0:08:1c:4c:12:b5:37:
                    57:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:22:AA:57:34:59:36:06:C8:50:7D:BB:CF:6E:03:27:31:96:87:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/2649b7f5-5a43-34f6-b9a6-a430a10c17cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl

            X509v3 Authority Key Identifier:
                keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:a100:7000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:0c:2e:06:91:66:ed:9e:00:0f:56:77:5b:13:ad:c8:6d:e0:
         09:e8:3b:e8:a0:21:a3:10:d4:1a:0a:d8:e6:46:8b:3e:78:d2:
         28:5f:d8:7e:7c:1c:fd:64:d0:0e:96:d2:2e:e9:52:ce:07:09:
         0e:cf:97:94:6c:d0:c0:9b:e1:de:6a:98:45:b8:ff:1a:e7:be:
         53:28:f3:56:aa:45:ca:d6:02:3e:46:dc:76:c9:ae:f3:cd:ba:
         7f:43:49:85:0b:5a:b1:71:54:0f:d6:95:99:f8:5e:94:54:72:
         9d:96:f8:3d:5b:ea:d7:37:a1:51:1a:84:c5:58:96:c5:f9:b5:
         e8:ab:b7:b8:33:b6:85:b9:cf:bd:c8:ac:5c:d7:24:b5:fe:99:
         6f:c5:d6:3a:65:26:7c:f3:a4:4e:e0:cc:6c:9d:64:f8:eb:e8:
         fd:28:67:b9:05:98:b3:c5:6d:77:08:ac:22:37:a4:5a:dc:f8:
         ce:0c:e0:4d:1b:09:f6:5a:57:ce:bc:21:b3:b1:81:ac:07:ce:
         39:25:f4:2d:c9:45:a0:d2:e0:80:94:ca:33:b0:51:d3:e6:06:
         7f:01:e1:80:18:9c:a9:70:3a:50:15:98:7c:60:0d:3a:14:91:
         ae:ff:ca:e8:68:71:b2:76:93:ed:70:37:a2:8a:eb:26:70:e8:
         08:c7:5a:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:24:40 2024 by rpki-client on console-fra.rpki-client.org