Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/ebe79a59-4947-3591-abf8-3a90402caae2.roa
File:                     ebe79a59-4947-3591-abf8-3a90402caae2.roa (raw, json)
Hash identifier:          4yh1gJEIvyXLcAe66cSj/8758tI/aicDx8wp/YJen+Y=
Subject key identifier:   D5:1E:98:4E:26:A9:46:83:AC:C6:07:BE:2B:4C:BE:F7:57:8E:CF:E8
Certificate issuer:       /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial:       010D0C9F432858478CB690FEAA8A6E2BFD572580
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/ebe79a59-4947-3591-abf8-3a90402caae2.roa
Signing time:             Tue 15 Oct 2024 13:00:47 +0000
ROA not before:           Tue 15 Oct 2024 13:00:47 +0000
ROA not after:            Mon 13 Jan 2025 14:00:47 +0000
asID:                     394285
IP address blocks:        2606:a100:4000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8c:b6:90:fe:aa:8a:6e:2b:fd:57:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
        Validity
            Not Before: Oct 15 13:00:47 2024 GMT
            Not After : Jan 13 14:00:47 2025 GMT
        Subject: CN=39023701-729b-4097-aec0-66a677fa484c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4d:16:1e:34:34:e6:e5:a3:fd:ce:70:7b:78:
                    52:a6:25:e7:ea:a1:1a:14:df:06:54:07:4f:17:cb:
                    b1:01:59:56:51:21:0e:43:e8:e8:dc:1c:b7:d3:54:
                    3f:34:56:18:46:89:5e:94:c1:7a:66:ac:51:11:b6:
                    9b:30:c3:49:96:f0:2b:7e:01:a2:bd:92:05:57:08:
                    63:96:e4:c8:07:bd:57:48:20:7c:d2:83:dc:51:f2:
                    8e:02:84:56:44:33:74:24:e6:25:08:72:25:4a:c0:
                    f1:5f:96:19:7d:93:05:8d:c8:56:8e:94:8e:4f:74:
                    e0:e4:35:4d:40:27:9d:94:b7:49:60:eb:64:bd:54:
                    f6:4a:dc:07:de:70:18:b0:48:00:f4:f3:69:d4:74:
                    73:6c:c2:b4:11:66:96:a2:f5:4d:bb:0a:36:3c:b7:
                    35:42:a3:b7:f2:02:df:d2:15:17:74:f5:89:ac:2c:
                    2f:a8:a2:18:e8:39:93:c4:c4:e8:ed:28:cf:ba:c4:
                    77:e3:1f:ba:78:11:f2:5d:6d:cf:e7:98:c8:38:47:
                    91:6c:87:e5:53:58:17:71:94:35:5c:e2:2a:37:73:
                    63:c5:ec:73:d1:c3:68:c5:06:42:4c:2d:8c:ad:b6:
                    61:67:df:2f:6b:1d:67:b1:51:57:a7:8d:01:87:b4:
                    6b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:1E:98:4E:26:A9:46:83:AC:C6:07:BE:2B:4C:BE:F7:57:8E:CF:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/ebe79a59-4947-3591-abf8-3a90402caae2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl

            X509v3 Authority Key Identifier:
                keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:a100:4000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:8d:c4:10:c5:5a:42:b3:94:fc:5d:db:e6:6f:ce:ff:16:20:
         66:04:45:8b:7c:49:54:4d:a4:93:e3:20:9f:3f:c1:ce:94:95:
         00:20:d8:f6:67:7e:82:a9:6b:97:19:61:a6:9b:42:43:11:9c:
         e2:b8:73:a3:1a:97:f0:4b:46:46:b4:7f:c3:3a:f3:9d:83:11:
         e2:22:85:a0:75:a3:44:cb:68:d9:6a:4d:6b:95:bc:b6:71:0f:
         f4:e2:9f:c9:15:cc:8d:7d:00:d7:8b:8b:43:4d:72:3d:98:b0:
         57:68:2a:3d:22:3c:4d:79:1c:0c:67:cf:1c:30:0d:35:21:80:
         5b:59:7f:5e:1a:2d:0e:aa:01:1c:8a:75:04:f1:66:55:88:d9:
         05:09:63:2e:7f:af:2e:4f:c8:5d:e9:88:fb:59:43:72:5f:df:
         f3:3b:95:75:bc:fd:0a:76:aa:cc:b3:8d:68:00:80:7b:b4:90:
         71:be:34:b9:8f:fa:35:a9:5d:d4:35:78:2e:3e:c2:a7:7d:45:
         55:2f:05:e9:50:ce:dd:c7:b6:7a:a6:27:86:b2:96:a8:32:5f:
         14:c2:45:c8:7e:30:d6:4e:2e:c4:d3:15:fa:bd:53:6e:0b:22:
         27:97:3c:6a:d0:94:11:a5:c5:86:c0:7f:e7:ca:1c:49:23:ee:
         02:e4:63:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:24:40 2024 by rpki-client on console-fra.rpki-client.org