Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/b03d981a-03b9-3f4c-9a11-5afe6a4e15d9.roa
File:                     b03d981a-03b9-3f4c-9a11-5afe6a4e15d9.roa (raw, json)
Hash identifier:          G5l7GQgp6ODgwBy3IKneQoWFXMYL4SEtKyGgTFPC2c8=
Subject key identifier:   2E:9C:C5:E3:EF:92:86:59:B6:3C:2B:C4:49:54:54:E2:D9:F4:9A:73
Certificate issuer:       /CN=5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593
Certificate serial:       010D0C9F43285847DBB86D188A7C5D9C94657400
Authority key identifier: 26:40:8A:FD:16:DB:87:11:C6:D9:C6:70:65:4A:9E:DC:F2:BB:93:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/b03d981a-03b9-3f4c-9a11-5afe6a4e15d9.roa
Signing time:             Tue 12 Nov 2024 20:13:34 +0000
ROA not before:           Tue 12 Nov 2024 20:13:34 +0000
ROA not after:            Mon 10 Feb 2025 20:13:34 +0000
asID:                     396422
IP address blocks:        2604:81c0::/32 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:db:b8:6d:18:8a:7c:5d:9c:94:65:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593
        Validity
            Not Before: Nov 12 20:13:34 2024 GMT
            Not After : Feb 10 20:13:34 2025 GMT
        Subject: CN=3db9c514-c5f7-4068-9ef4-5436b36db66d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:7f:b4:0c:f7:99:31:a7:e6:49:b2:0a:fe:64:
                    dd:67:46:f3:b0:29:1c:89:ce:f3:36:2f:00:fd:e6:
                    55:f8:8b:db:f4:a5:b6:71:94:0a:31:ea:5a:1c:b3:
                    22:26:c8:ac:ae:93:e2:85:b8:83:65:2b:95:c8:05:
                    ae:26:41:dc:64:45:ee:84:b1:03:fb:de:b7:b2:9e:
                    56:fb:8d:cd:14:a5:a0:f5:ba:07:3c:2b:ef:45:86:
                    ed:07:c1:0d:0e:47:68:59:d8:d2:05:f1:02:5f:34:
                    5e:2e:4b:48:15:a0:27:ce:9f:9e:33:16:8a:34:cb:
                    14:68:65:cf:35:3b:38:5a:cf:4f:91:37:c9:02:6f:
                    46:13:ce:80:c6:a6:0b:b8:77:bd:15:cc:a0:cd:86:
                    53:e0:70:50:dc:67:a5:08:91:ba:d7:7d:40:80:79:
                    3d:2c:79:40:f9:1f:20:39:74:c3:c1:5e:81:a3:0c:
                    c5:61:0c:9b:81:40:6a:ae:90:cc:b9:dd:44:72:af:
                    9e:23:2c:85:9a:d5:6b:1d:80:43:02:b4:18:86:d8:
                    d2:8f:25:c9:db:b0:3d:0d:ac:78:0d:76:26:47:6a:
                    f8:63:f9:dc:54:b9:e8:31:70:3f:fc:6f:d6:bf:75:
                    67:f1:b1:6d:08:e1:e9:62:9b:6b:5e:f8:d8:31:b6:
                    ef:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:9C:C5:E3:EF:92:86:59:B6:3C:2B:C4:49:54:54:E2:D9:F4:9A:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/b03d981a-03b9-3f4c-9a11-5afe6a4e15d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.crl

            X509v3 Authority Key Identifier:
                keyid:26:40:8A:FD:16:DB:87:11:C6:D9:C6:70:65:4A:9E:DC:F2:BB:93:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:81c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:3a:d4:4d:64:30:6c:6d:10:26:65:50:71:57:a8:7f:4a:0c:
         b3:91:9b:53:d6:e8:5e:33:db:5d:7b:e6:39:4a:7c:16:b3:12:
         cf:09:c7:71:73:ad:6f:bc:f9:88:da:8c:59:e2:06:29:11:86:
         0f:c2:8e:a0:89:47:f1:19:63:ae:88:aa:06:3c:fe:8e:80:04:
         ad:75:5c:59:6c:eb:88:18:37:0e:fe:28:30:3a:25:b1:23:dd:
         3e:0b:3b:79:d0:93:72:34:1f:be:b7:33:a1:52:d4:ba:38:70:
         4a:ea:ea:4b:42:3b:42:d4:fb:f8:a8:13:0c:f5:37:eb:33:72:
         d6:a9:7b:35:25:a0:47:3f:4c:8b:3b:ac:f0:9e:12:5d:26:00:
         4a:60:fc:af:27:3a:ff:20:c8:9f:b7:c3:73:1b:0f:ff:5d:70:
         c6:1d:6a:e1:45:b9:c9:39:e6:11:96:e5:77:86:19:61:9f:5d:
         ad:88:aa:3c:5c:cf:ce:fa:af:12:a0:d0:3d:ad:1f:56:5e:84:
         a6:aa:fb:19:52:8a:f5:46:c1:d7:fb:61:70:5b:93:30:84:86:
         f4:fb:71:2b:e6:48:f8:34:23:67:91:25:70:13:50:71:f0:36:
         f3:ef:72:d7:cf:6f:0e:df:9a:5a:2c:2b:d0:f3:4c:80:09:ad:
         5a:3f:47:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:08:22 2024 by rpki-client on console-ams.rpki-client.org