Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/4831edfb-807a-37a6-97cc-8e9fac3a04d9.roa
File:                     4831edfb-807a-37a6-97cc-8e9fac3a04d9.roa (raw, json)
Hash identifier:          axXvA+0ju+HpRMtky93M/gLkpwzQhpwt12lQkiYCq8g=
Subject key identifier:   CB:F5:76:D5:B7:3F:73:A6:68:BC:E5:99:2E:27:06:E0:53:9E:B3:29
Certificate issuer:       /CN=5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593
Certificate serial:       010D0C9F43285847DBB96CE4B795CBE0A92AD5C0
Authority key identifier: 26:40:8A:FD:16:DB:87:11:C6:D9:C6:70:65:4A:9E:DC:F2:BB:93:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/4831edfb-807a-37a6-97cc-8e9fac3a04d9.roa
Signing time:             Tue 12 Nov 2024 20:15:35 +0000
ROA not before:           Tue 12 Nov 2024 20:15:35 +0000
ROA not after:            Mon 10 Feb 2025 20:15:35 +0000
asID:                     18771
IP address blocks:        2606:3300::/32 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:db:b9:6c:e4:b7:95:cb:e0:a9:2a:d5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593
        Validity
            Not Before: Nov 12 20:15:35 2024 GMT
            Not After : Feb 10 20:15:35 2025 GMT
        Subject: CN=6779a9ea-c597-4146-a909-10d136062e8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:23:63:89:c4:e8:28:f3:c2:c9:a8:9b:93:b2:
                    64:0a:53:51:d0:60:e3:68:e4:f6:81:52:59:93:48:
                    0d:14:16:28:cc:0b:df:3b:3d:1e:78:bf:de:8a:d5:
                    13:8a:4f:05:5f:5c:5d:d2:49:48:47:46:9a:a9:1c:
                    5f:e1:47:9a:67:5c:ab:7e:25:30:5c:15:f8:2b:a1:
                    e7:9a:2a:ae:69:64:a8:a4:d8:8f:10:e9:ad:de:00:
                    d5:bc:13:4f:d7:25:df:7b:ce:33:79:97:60:e0:27:
                    3a:72:7f:6e:ff:43:24:9e:16:cd:17:b4:3d:c6:e5:
                    e1:e8:dd:0c:21:bf:b0:d1:10:40:cc:86:13:e1:cc:
                    f7:7f:c8:cb:d6:76:d1:5c:e1:67:73:3c:5c:a0:a0:
                    18:16:a3:90:a1:1e:dd:57:9b:1a:1d:70:15:a6:3b:
                    3b:a4:61:54:39:e5:59:db:17:0c:e2:01:35:76:5c:
                    2f:0e:13:54:70:12:bb:34:f2:64:2b:5b:d4:59:d5:
                    2d:3b:6a:36:16:69:4c:84:f7:74:d1:26:9c:b4:a9:
                    43:11:2c:fb:49:7b:08:ac:da:96:46:82:cb:1c:fb:
                    02:38:8f:e7:48:e8:08:0c:28:7c:00:66:2b:c3:f4:
                    8a:87:b9:ce:90:a5:c3:33:f4:3c:48:6f:78:62:a2:
                    86:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:F5:76:D5:B7:3F:73:A6:68:BC:E5:99:2E:27:06:E0:53:9E:B3:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/4831edfb-807a-37a6-97cc-8e9fac3a04d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.crl

            X509v3 Authority Key Identifier:
                keyid:26:40:8A:FD:16:DB:87:11:C6:D9:C6:70:65:4A:9E:DC:F2:BB:93:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3300::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:31:01:b8:72:66:65:ac:7e:8d:fe:2b:99:24:92:a0:db:47:
         d6:bd:f0:f5:47:71:b7:70:1d:60:f4:78:c7:bf:80:4f:2c:fd:
         33:f2:98:12:30:9e:1a:01:fb:c8:56:0e:9f:60:69:37:93:21:
         3a:b8:b2:c7:8f:e9:8d:15:7e:6d:e5:f2:6f:58:6b:c1:af:30:
         2a:2d:5f:3e:26:ad:a4:ec:29:a9:44:f0:cb:2b:32:0f:82:93:
         3d:9b:2f:a4:47:43:c3:7f:c9:5c:c8:7b:a1:fd:cb:4f:88:7a:
         8e:f4:36:1c:a3:ba:b2:41:06:bd:2d:aa:ce:36:9e:a7:3c:79:
         3a:3b:7d:05:ed:5b:30:fd:56:17:94:5e:ce:f1:ee:c8:b4:9d:
         11:97:21:57:c6:23:bb:48:ed:da:0b:5d:0e:97:f3:dd:3c:ba:
         8c:f8:7e:b6:fc:53:13:f6:6a:c7:53:5b:e8:ff:c4:83:36:f4:
         40:4a:b7:2b:43:ba:11:3e:fa:6d:ce:f6:c4:0b:0f:9b:c5:7d:
         3d:08:78:e9:1c:ed:64:91:cf:3a:b0:e2:0b:84:7b:51:29:61:
         1c:d3:e8:db:ab:37:3f:7e:9b:68:a3:63:84:86:ca:50:6e:6b:
         b7:61:3b:21:b4:4c:de:da:0e:e5:5e:78:1c:ff:16:9d:9e:70:
         f9:b7:94:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:22 2024 by rpki-client on console-ams.rpki-client.org