Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/70af50cc-33f5-3282-8776-d1c54551e539.roa
File:                     70af50cc-33f5-3282-8776-d1c54551e539.roa (raw, json)
Hash identifier:          yI3EQVucU8lGOrqXxfgR3k1vYgMckZRBn7UCV+M2jyI=
Subject key identifier:   8A:28:5B:D7:0B:85:52:F0:2C:0C:97:3D:F4:52:10:CA:F6:45:7E:2C
Certificate issuer:       /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial:       010D0C9F432858478CB691A0C06CE1B9AA127380
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/70af50cc-33f5-3282-8776-d1c54551e539.roa
Signing time:             Tue 15 Oct 2024 13:00:47 +0000
ROA not before:           Tue 15 Oct 2024 13:00:47 +0000
ROA not after:            Mon 13 Jan 2025 14:00:47 +0000
asID:                     394285
IP address blocks:        2606:a100:e000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8c:b6:91:a0:c0:6c:e1:b9:aa:12:73:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
        Validity
            Not Before: Oct 15 13:00:47 2024 GMT
            Not After : Jan 13 14:00:47 2025 GMT
        Subject: CN=91913b6b-58e7-4f6d-a674-dd3e4cec4ed8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:4c:1f:0d:c2:e7:d2:1a:cb:27:16:86:b2:2d:
                    b7:86:6d:33:1e:3d:37:c8:b4:ec:fc:92:5f:d3:e2:
                    a9:f1:81:be:29:7f:39:1d:10:dd:53:a9:db:00:d9:
                    39:c4:bd:74:82:32:3e:15:b0:70:18:ec:13:81:a1:
                    70:ca:06:27:4d:4f:8d:ee:04:b4:d7:65:33:3d:6b:
                    8d:12:51:44:4a:d2:e7:a8:1e:41:d2:ee:1c:78:39:
                    44:db:df:69:5e:5c:2b:dc:45:41:e5:13:71:9b:66:
                    fe:6b:2e:78:99:4d:ce:47:7b:bc:6c:cd:dc:9f:f7:
                    a8:f8:29:72:3f:35:b3:fb:8c:b1:01:2a:9e:77:2c:
                    28:0d:05:fe:71:b8:4e:38:b8:d9:33:6e:7b:09:5f:
                    04:a9:45:27:4a:ef:a2:a0:2b:35:b1:00:4f:8b:b0:
                    0b:b3:5a:be:43:f9:8e:53:7a:05:21:bd:d2:97:8f:
                    ee:7e:a4:b4:2a:02:24:70:79:aa:08:2b:ff:34:c4:
                    bd:08:5f:89:c3:c8:c5:ab:5d:6a:99:89:69:88:1e:
                    83:78:f4:ec:82:a6:49:bf:3e:74:5c:d6:87:ef:52:
                    7e:0f:db:9c:f2:8f:56:db:a3:3b:ba:ab:98:44:6e:
                    1d:26:6b:a6:69:4c:9b:08:57:c7:0d:4a:76:a8:30:
                    3d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:28:5B:D7:0B:85:52:F0:2C:0C:97:3D:F4:52:10:CA:F6:45:7E:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/70af50cc-33f5-3282-8776-d1c54551e539.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl

            X509v3 Authority Key Identifier:
                keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:a100:e000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:39:ed:58:e8:ab:26:b6:7d:66:a8:82:a3:ca:58:20:29:5d:
         b5:3b:74:a3:b0:42:e0:a2:a9:e4:6f:1d:09:a0:98:79:34:89:
         ee:34:c1:0b:80:90:12:c8:40:fc:1c:6b:d2:a2:4d:9b:7c:af:
         19:f6:79:b5:f3:ec:01:67:92:2c:27:ae:89:ec:f9:06:53:dd:
         48:0a:12:b2:93:20:42:bb:b7:9a:a6:0e:6c:5a:0f:11:f1:14:
         3b:7c:2e:51:a7:08:0b:9e:0a:ca:2c:59:bf:ed:87:2e:70:41:
         3d:53:ef:d0:50:58:ae:dd:62:45:9b:7b:6e:c7:40:ca:c1:c7:
         d2:25:55:e4:0f:f0:07:69:6d:06:88:7e:c6:57:c1:39:63:8b:
         3a:a1:a7:f1:a4:2e:29:1d:78:1c:29:01:c5:23:4f:49:08:b5:
         94:0f:75:32:fd:5d:2e:62:2d:70:7c:c5:2d:3c:c2:53:00:89:
         30:57:f5:fc:ed:6f:96:6f:34:b2:65:3b:6d:34:26:67:e7:3e:
         65:25:89:f3:15:05:34:fc:49:db:36:fe:23:06:56:d1:34:d0:
         42:7a:2a:27:72:e2:d4:91:92:0a:f5:0c:31:fa:ae:2c:b1:73:
         f9:14:4e:e7:a9:e4:29:92:68:07:12:7f:f8:de:ce:43:6d:19:
         a2:1c:1f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:16:24 2024 by rpki-client on console-fra.rpki-client.org