Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2ecd23d0-396c-41fa-8f41-cd10a4083dbe/35003c30-30bb-36db-9212-03de41a7d417.roa
File:                     35003c30-30bb-36db-9212-03de41a7d417.roa (raw, json)
Hash identifier:          cMsxdcLdpL059H/D+8yX/QJRmiNTKka3g8PPLwaRRnM=
Subject key identifier:   4A:5D:54:75:F2:7C:3F:98:16:57:57:E7:9B:8A:3D:3C:A7:6F:BA:CC
Certificate issuer:       /CN=2ecd23d0-396c-41fa-8f41-cd10a4083dbe
Certificate serial:       010D0C9F43285847DF27B7871AE20E8FE05B3500
Authority key identifier: 94:96:70:EC:F0:FA:E8:1A:15:46:3A:23:77:AD:AD:9E:46:AF:E1:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2ecd23d0-396c-41fa-8f41-cd10a4083dbe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2ecd23d0-396c-41fa-8f41-cd10a4083dbe/35003c30-30bb-36db-9212-03de41a7d417.roa
Signing time:             Thu 14 Nov 2024 01:45:14 +0000
ROA not before:           Thu 14 Nov 2024 01:45:14 +0000
ROA not after:            Wed 12 Feb 2025 01:45:14 +0000
asID:                     394437
IP address blocks:        2606:200::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2ecd23d0-396c-41fa-8f41-cd10a4083dbe/2ecd23d0-396c-41fa-8f41-cd10a4083dbe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2ecd23d0-396c-41fa-8f41-cd10a4083dbe/2ecd23d0-396c-41fa-8f41-cd10a4083dbe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2ecd23d0-396c-41fa-8f41-cd10a4083dbe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:df:27:b7:87:1a:e2:0e:8f:e0:5b:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ecd23d0-396c-41fa-8f41-cd10a4083dbe
        Validity
            Not Before: Nov 14 01:45:14 2024 GMT
            Not After : Feb 12 01:45:14 2025 GMT
        Subject: CN=1324adaf-f709-4612-aa87-776b1f9ee28d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b2:68:24:86:68:5c:ce:83:7f:14:3d:83:67:
                    34:b5:eb:97:67:7b:98:a0:42:60:0f:32:41:b1:cc:
                    ec:ce:0b:e8:71:51:1e:1f:cb:98:96:23:ac:5d:6b:
                    f9:20:41:fd:1c:61:28:4a:ae:49:57:78:ba:14:2e:
                    e3:48:13:80:27:4c:a9:0b:46:55:2e:73:60:9b:61:
                    6a:2c:11:53:b5:dc:05:ce:fe:7d:de:66:a8:b0:02:
                    54:45:98:fe:63:a6:d7:b8:f4:c1:0a:fa:1c:a7:43:
                    d2:8a:49:b9:68:f9:8f:49:f9:dc:66:a4:9a:db:e5:
                    d4:1e:b3:4b:2e:f6:92:fa:46:89:ea:36:7b:b9:71:
                    af:34:34:04:f3:00:d4:c1:f8:5a:94:6e:cc:ae:ff:
                    bd:5c:9d:84:ea:50:ab:6f:a2:28:c9:78:83:67:ab:
                    5f:44:24:23:94:2c:4f:a9:e0:9e:aa:59:b2:a3:79:
                    3d:67:e8:b0:f6:da:ed:86:91:77:65:22:04:6e:31:
                    a8:af:79:a4:f9:0f:f6:ca:6e:9c:32:4a:04:e5:b4:
                    6c:c8:e7:14:d9:f6:40:66:a2:98:0d:4c:03:ed:db:
                    0b:b0:52:bd:b4:02:c2:d9:50:fc:cc:90:8e:a1:c0:
                    e4:cf:33:18:7c:03:ca:b9:19:27:f4:71:18:3e:a9:
                    5d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:5D:54:75:F2:7C:3F:98:16:57:57:E7:9B:8A:3D:3C:A7:6F:BA:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2ecd23d0-396c-41fa-8f41-cd10a4083dbe/35003c30-30bb-36db-9212-03de41a7d417.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2ecd23d0-396c-41fa-8f41-cd10a4083dbe/2ecd23d0-396c-41fa-8f41-cd10a4083dbe.crl

            X509v3 Authority Key Identifier:
                keyid:94:96:70:EC:F0:FA:E8:1A:15:46:3A:23:77:AD:AD:9E:46:AF:E1:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2ecd23d0-396c-41fa-8f41-cd10a4083dbe.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:200::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:79:2e:30:29:06:0b:38:d0:63:b8:6d:36:c0:10:ff:73:6c:
         16:01:2e:0a:91:d9:be:ac:19:2d:98:6c:63:61:dc:4c:8f:12:
         de:76:89:8f:e4:79:c8:1b:3c:2e:3f:9e:a5:43:3b:50:f3:fb:
         1f:95:c4:3d:6d:ae:7f:aa:da:b9:ab:36:6b:48:08:20:6f:46:
         84:a9:08:db:34:a3:2e:6c:44:b1:ae:ff:6c:08:df:16:a4:ff:
         c0:61:ec:b4:a4:fa:95:95:d6:dc:42:b1:39:ef:bc:8e:c0:e0:
         3a:cb:4b:a3:84:36:a8:62:2f:b9:f3:75:a5:af:6a:b9:8d:a5:
         f4:3b:82:7a:04:69:07:ed:9e:aa:b0:2b:0b:bf:db:7b:a1:f4:
         8f:f6:dc:12:b9:12:78:41:19:b6:78:af:77:01:26:2a:b7:ca:
         14:ab:28:ca:35:b1:30:cc:61:c7:e9:5c:b6:98:37:a7:c9:9a:
         06:5b:04:e1:de:82:4f:49:f1:d4:1e:01:d0:5a:34:0e:07:86:
         00:02:c3:93:c5:5a:30:95:49:c4:bf:1f:3d:a8:2c:b1:ce:71:
         4a:fc:c6:0b:8c:b5:13:3b:15:fc:5d:4d:cf:44:1b:36:55:87:
         37:73:fd:fa:57:9c:4a:7d:55:33:d6:a8:90:c2:cc:6c:57:ef:
         67:07:e9:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:36:36 2024 by rpki-client on console-fra.rpki-client.org