Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/726ba7a0-a26c-3c58-83b2-b46a31a0894e.roa
File:                     726ba7a0-a26c-3c58-83b2-b46a31a0894e.roa (raw, json)
Hash identifier:          juBB8yAp7la+gJilK77/rH9LwCHDNZhDyI+wb5oAQ9E=
Subject key identifier:   6E:FA:C1:98:8B:09:CB:35:65:83:20:49:82:2C:3E:5F:F1:5E:C7:0C
Certificate issuer:       /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial:       010D0C9F432858478CB690ED52D79BC5C0EF7800
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/726ba7a0-a26c-3c58-83b2-b46a31a0894e.roa
Signing time:             Tue 15 Oct 2024 13:00:47 +0000
ROA not before:           Tue 15 Oct 2024 13:00:47 +0000
ROA not after:            Mon 13 Jan 2025 14:00:47 +0000
asID:                     394285
IP address blocks:        2606:a100:3000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8c:b6:90:ed:52:d7:9b:c5:c0:ef:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
        Validity
            Not Before: Oct 15 13:00:47 2024 GMT
            Not After : Jan 13 14:00:47 2025 GMT
        Subject: CN=586f03c3-976e-4c29-bb2a-54ea72e84a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d0:f7:c8:17:df:74:a3:33:e8:5b:f7:42:f1:
                    db:a2:05:f8:99:2c:e3:94:92:60:0e:5d:85:9f:1a:
                    af:00:c3:50:08:96:f6:6a:e3:4f:89:5b:2d:91:15:
                    0f:aa:79:83:29:db:fe:54:3e:a0:f3:b7:65:dc:f8:
                    fa:c2:f9:da:5c:90:30:b1:71:a0:22:48:f6:b2:0c:
                    8d:29:f7:e3:61:f2:19:20:c9:e4:d0:5c:d3:a3:1f:
                    e5:e4:e5:c6:92:f2:ab:d1:4a:ae:94:b3:ef:7f:a3:
                    3e:48:af:bf:89:f7:34:04:35:95:10:1e:0d:8f:fe:
                    28:2f:d4:97:2c:f4:61:47:5b:6a:0e:00:cf:ab:66:
                    21:36:61:40:e9:c2:a5:76:4a:9b:39:9b:c4:4d:24:
                    14:cb:1f:4c:42:c3:63:73:04:7d:d6:e6:39:77:a8:
                    26:ca:21:d1:19:f1:c2:99:c6:38:66:96:1c:b6:04:
                    00:fd:1d:09:de:01:df:62:1e:87:56:88:8d:0a:c9:
                    52:c3:f7:74:63:b4:ed:9b:1a:cb:50:ce:bd:c8:f1:
                    95:05:7e:e3:84:4a:e6:79:88:5f:99:52:e6:15:3b:
                    03:4f:4b:d6:3f:a6:32:ef:d5:43:4b:1d:ee:41:fd:
                    9d:b0:8f:1a:dd:e3:27:e4:bb:65:48:89:65:2a:c3:
                    40:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:FA:C1:98:8B:09:CB:35:65:83:20:49:82:2C:3E:5F:F1:5E:C7:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/726ba7a0-a26c-3c58-83b2-b46a31a0894e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl

            X509v3 Authority Key Identifier:
                keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:a100:3000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:09:66:30:e1:e3:c9:8d:4a:e4:24:bc:d1:ab:56:98:7c:1c:
         76:9a:f0:e8:ec:56:9c:a4:75:1d:f7:06:8a:22:0e:7f:91:ac:
         24:79:c9:3c:5b:c6:1a:41:6c:44:11:bd:a7:6e:46:cc:03:91:
         9f:08:b1:f9:e3:56:31:1d:63:3a:85:2f:80:61:a2:7a:6b:3e:
         7f:2e:eb:72:2f:13:1b:31:b7:3d:92:10:39:c6:f7:d8:ad:39:
         40:fd:20:8c:48:2a:25:c7:d2:ea:1f:39:76:90:ec:6e:a7:52:
         59:5e:7d:4f:55:0d:53:b4:01:d1:a5:74:42:74:12:1f:bf:a0:
         36:f5:b7:11:91:3c:56:f9:a7:d4:73:6a:5a:76:66:d7:8c:d8:
         23:5d:20:3a:6b:8c:85:c3:4c:f9:70:48:18:ac:54:bd:a6:4c:
         31:d9:c5:34:fc:74:86:c1:78:01:74:a0:76:e0:21:b8:71:6f:
         d7:7d:db:53:79:ab:92:e9:c4:6b:06:de:e6:e0:bb:b6:52:63:
         e7:cf:9d:17:cd:4d:88:5e:15:65:1a:74:d9:6e:a7:81:fe:64:
         9a:db:3d:c6:ea:db:ce:2b:fd:23:ea:5f:0c:2b:13:db:9e:42:
         df:73:da:07:c0:76:3c:14:4c:e0:fb:88:59:87:d3:e7:9d:52:
         7f:e3:aa:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:55:53 2024 by rpki-client on console-ams.rpki-client.org