Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/4f3b1d14-8545-3d03-9ee0-abc2049c0162.roa
File:                     4f3b1d14-8545-3d03-9ee0-abc2049c0162.roa (raw, json)
Hash identifier:          zxvCm4nQL7rpC67QhMVw3juIBBHPS/LopkMv4C1sOSw=
Subject key identifier:   FD:A5:1C:4D:3F:CB:F2:37:3C:96:BB:7C:A0:3A:DF:72:48:F7:FC:4F
Certificate issuer:       /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial:       010D0C9F432858478CB69110038A68C60D7D6500
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/4f3b1d14-8545-3d03-9ee0-abc2049c0162.roa
Signing time:             Tue 15 Oct 2024 13:00:47 +0000
ROA not before:           Tue 15 Oct 2024 13:00:47 +0000
ROA not after:            Mon 13 Jan 2025 14:00:47 +0000
asID:                     394285
IP address blocks:        2606:a100:5000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8c:b6:91:10:03:8a:68:c6:0d:7d:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
        Validity
            Not Before: Oct 15 13:00:47 2024 GMT
            Not After : Jan 13 14:00:47 2025 GMT
        Subject: CN=a86d87f5-0462-491a-8a69-14cf025ec61f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:16:87:2e:cd:fb:f4:89:08:23:25:c4:40:c1:
                    05:1a:15:7c:01:0a:18:16:0c:e4:51:41:0c:b0:86:
                    08:1e:39:a8:bb:d5:cc:b0:8d:c9:6c:e5:4b:a7:db:
                    6d:50:a1:4c:49:45:50:23:b7:73:3c:2c:21:ad:f8:
                    da:76:96:b4:6d:b5:12:0f:91:5c:11:ad:c9:ee:81:
                    e6:e9:5b:09:cd:e1:7f:31:5c:36:ca:e6:9d:38:8f:
                    79:2e:59:5f:62:2a:81:95:57:28:4b:6f:0f:20:f3:
                    8d:bf:f4:bb:a6:c1:a9:88:67:9b:b9:b3:b6:c1:05:
                    a9:74:92:11:21:b8:b3:80:7c:9b:5b:a0:fb:bf:18:
                    05:03:b5:4a:70:91:23:5b:28:19:db:90:c0:26:6c:
                    53:c1:c0:d3:4b:f9:67:14:97:7e:05:e0:f1:33:f5:
                    72:e6:89:f2:a0:2a:65:ec:6e:71:44:de:f2:25:9f:
                    81:26:cf:e1:a7:48:a5:96:2e:1a:09:ab:2c:20:7d:
                    65:2b:6b:39:47:39:d9:54:7e:4a:73:cf:48:a0:75:
                    99:73:fe:7f:f7:ea:8c:98:1a:cb:c0:5e:ac:55:99:
                    38:09:69:23:b2:7d:a0:c2:cb:2d:f7:6d:4b:4f:2b:
                    2c:20:66:6c:96:65:7d:e8:e7:d4:99:d9:1d:17:bd:
                    75:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:A5:1C:4D:3F:CB:F2:37:3C:96:BB:7C:A0:3A:DF:72:48:F7:FC:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/4f3b1d14-8545-3d03-9ee0-abc2049c0162.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl

            X509v3 Authority Key Identifier:
                keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:a100:5000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:61:d6:55:32:7c:a8:0e:6e:85:0e:f1:ce:e4:b6:f8:9b:3d:
         9a:79:1f:d4:35:9b:f7:de:07:ce:48:2e:cd:2f:65:51:89:12:
         f5:69:e3:e1:3e:c0:41:58:00:aa:59:45:39:9d:90:b5:05:aa:
         74:3a:3d:86:4f:0f:93:51:f5:62:bd:81:d4:7a:94:01:8d:67:
         b7:99:c2:71:07:77:74:48:79:91:8c:5e:30:15:ea:e8:3c:05:
         20:4e:81:65:f4:41:18:72:64:89:e1:e0:19:bb:f5:48:6b:76:
         8b:8a:f9:90:99:d7:fc:42:e3:7f:e4:ee:54:37:c7:4c:6e:d7:
         a4:ad:d3:eb:8f:4a:ca:0d:df:71:71:cb:91:85:f5:c1:e5:3b:
         01:a6:a9:32:3c:dc:92:ba:0d:39:58:56:cf:ec:46:e8:56:0c:
         8b:df:33:70:88:ff:2d:ac:73:fc:78:40:5c:5e:60:e7:31:17:
         05:ac:60:a6:88:f6:a9:30:92:f8:fb:16:d1:9d:39:03:e6:80:
         81:88:8a:38:2c:61:1e:a1:61:55:ac:84:ff:0a:57:ef:e4:f0:
         6f:30:c0:86:85:f8:ce:39:d2:b2:2a:3f:45:df:6c:89:64:34:
         6b:92:b6:d2:ce:70:f4:23:8e:1e:88:dc:7d:90:e9:98:a8:6f:
         cd:4e:3c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:55:53 2024 by rpki-client on console-ams.rpki-client.org