Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/6148efd0-fc22-33c8-b06c-0daabdbb8419.roa
File:                     6148efd0-fc22-33c8-b06c-0daabdbb8419.roa (raw, json)
Hash identifier:          3nkZ3CLU0KPPw88k67Ph4wuK2KvknDxkmk5HJ7PJ5M8=
Subject key identifier:   E4:63:DA:B9:D7:20:EC:40:44:20:C0:A5:E3:FD:D3:08:AF:83:D3:32
Certificate issuer:       /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial:       010D0C9F432858478CB6918DBFD4E2337C8A87E0
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/6148efd0-fc22-33c8-b06c-0daabdbb8419.roa
Signing time:             Tue 15 Oct 2024 13:00:47 +0000
ROA not before:           Tue 15 Oct 2024 13:00:47 +0000
ROA not after:            Mon 13 Jan 2025 14:00:47 +0000
asID:                     394285
IP address blocks:        2606:a100:d000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8c:b6:91:8d:bf:d4:e2:33:7c:8a:87:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
        Validity
            Not Before: Oct 15 13:00:47 2024 GMT
            Not After : Jan 13 14:00:47 2025 GMT
        Subject: CN=a13d036c-1037-4bf9-8f77-d1b35dc4f4ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:94:3b:cc:96:ee:9e:6a:f4:19:f2:0d:19:cf:
                    db:d8:fe:62:ed:51:92:98:ab:f5:00:24:ae:87:e2:
                    84:d4:56:10:0e:18:7a:97:4c:bc:e7:37:a2:e4:32:
                    1f:dc:f1:41:76:0f:59:5c:6c:82:84:82:3c:82:5d:
                    4e:3c:b9:f0:56:a9:e6:ff:46:c6:c3:67:4c:70:38:
                    b7:8c:5a:e6:e4:b6:48:97:b4:2c:1d:a6:59:77:fe:
                    a1:05:36:e2:07:2e:5f:b7:b5:75:68:0b:bc:d3:cf:
                    83:ab:7d:c4:b1:7f:66:bd:ae:e8:24:8c:99:ff:63:
                    78:59:ac:7f:51:17:03:1d:1f:c3:aa:90:a0:28:f1:
                    63:f2:5e:55:d4:81:6c:49:a7:f7:4d:1d:d5:36:93:
                    68:92:4c:d0:f6:e4:11:af:0f:32:7c:2b:a8:4c:3d:
                    66:f9:01:e0:43:a9:47:39:e7:e0:4f:72:db:0d:0b:
                    ee:6f:86:bf:bf:31:09:db:2a:ae:30:62:cb:38:f7:
                    75:50:e3:ea:b7:0a:a3:e0:fa:6d:31:f1:4f:df:b2:
                    34:4c:85:a7:6c:63:0a:eb:77:c7:98:d2:e0:e6:2b:
                    52:92:7e:fa:56:19:f5:dd:3c:bc:21:bd:2e:d9:fb:
                    1a:a4:a9:fa:86:da:05:d6:89:37:b7:09:c9:4c:91:
                    64:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:63:DA:B9:D7:20:EC:40:44:20:C0:A5:E3:FD:D3:08:AF:83:D3:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/6148efd0-fc22-33c8-b06c-0daabdbb8419.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl

            X509v3 Authority Key Identifier:
                keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:a100:d000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:7d:31:48:1f:59:f8:69:64:01:be:f2:b7:67:70:9d:bb:53:
         c2:44:5e:ac:6f:ee:c0:f2:35:7b:2f:c2:46:df:57:47:b9:90:
         d2:07:0f:9d:87:86:81:78:d3:b5:71:85:92:2a:58:e1:44:3e:
         c3:21:c4:58:4a:9d:50:af:de:63:fa:a1:b9:cf:2a:9b:bf:57:
         c5:35:8e:6b:ea:99:55:d5:6a:4e:c8:10:80:a6:bd:17:f0:ad:
         5a:81:5c:ce:f7:9e:e7:04:4c:d9:a8:52:07:c6:e9:a0:d7:48:
         9a:5e:9d:ab:d6:bc:49:fd:21:9c:df:54:2d:24:02:94:67:50:
         5f:68:7d:26:35:57:1c:f9:fe:6c:e7:66:eb:64:c1:00:aa:6d:
         3c:04:0d:f3:b2:a3:ed:db:5e:4f:fa:d1:74:eb:4f:1d:e0:58:
         dd:41:07:30:fc:64:fe:59:7a:d4:80:a1:10:c0:08:d2:fa:d4:
         93:a4:63:cf:cc:a1:e9:11:7a:d9:24:89:ff:4c:f5:46:b1:d7:
         3f:37:2e:3c:f5:01:0b:74:74:43:58:4d:ca:ca:cb:5c:df:ba:
         a9:3a:27:4a:a4:fe:16:2b:89:13:30:7c:43:64:c8:6a:81:f9:
         b7:46:68:37:b1:a3:3c:a4:81:90:1e:5d:7a:fe:9c:f5:04:03:
         99:cb:58:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:24:40 2024 by rpki-client on console-fra.rpki-client.org