Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d2de7271-9c81-455b-9780-55895b635592/caa19e29-1ee5-3550-9449-8cefa6f09bfb.roa
File:                     caa19e29-1ee5-3550-9449-8cefa6f09bfb.roa (raw, json)
Hash identifier:          9gB9vxTYc+x2EbkOtoHlzUFTj1Kncr8/d5MYI8pAREU=
Subject key identifier:   73:DC:6C:0E:5B:84:ED:13:A8:84:81:2C:9E:06:F8:58:DD:C5:F5:05
Certificate issuer:       /CN=d2de7271-9c81-455b-9780-55895b635592
Certificate serial:       010D0C9F43285847370618CE8C9DE39B4B13BDA0
Authority key identifier: B6:52:57:17:4F:47:66:18:F6:EE:34:7E:44:53:C8:68:EE:5C:43:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d2de7271-9c81-455b-9780-55895b635592.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d2de7271-9c81-455b-9780-55895b635592/caa19e29-1ee5-3550-9449-8cefa6f09bfb.roa
Signing time:             Sat 14 Sep 2024 20:21:42 +0000
ROA not before:           Sat 14 Sep 2024 20:21:42 +0000
ROA not after:            Fri 13 Dec 2024 21:21:42 +0000
asID:                     26042
IP address blocks:        2606:c0:1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d2de7271-9c81-455b-9780-55895b635592/d2de7271-9c81-455b-9780-55895b635592.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d2de7271-9c81-455b-9780-55895b635592/d2de7271-9c81-455b-9780-55895b635592.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d2de7271-9c81-455b-9780-55895b635592.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:37:06:18:ce:8c:9d:e3:9b:4b:13:bd:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2de7271-9c81-455b-9780-55895b635592
        Validity
            Not Before: Sep 14 20:21:42 2024 GMT
            Not After : Dec 13 21:21:42 2024 GMT
        Subject: CN=9ed35cb6-b2d3-401b-a57e-6ec6ff8dd656
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:41:0c:f2:1e:11:48:74:bd:65:9a:83:df:c4:
                    17:c4:e8:2d:73:7c:b1:10:83:3e:82:ba:97:7c:a5:
                    6b:98:2f:7c:33:8f:93:0c:3d:3b:38:be:53:d1:33:
                    4b:57:fe:9d:77:0b:1e:5c:7a:e2:d6:83:57:f2:86:
                    1c:56:31:a4:f5:70:2d:58:c1:8f:c4:c5:1f:16:fe:
                    2f:71:52:4b:f6:c3:cb:2f:08:1b:20:af:15:52:9b:
                    5b:96:40:03:04:ef:0e:06:61:8e:8c:d6:d9:1c:1a:
                    72:8e:2d:c9:e1:3f:07:cd:81:a9:26:7d:c9:23:ff:
                    0c:5c:37:fb:b7:d6:3f:ae:30:a7:73:cf:61:15:c2:
                    fb:ce:fe:02:f5:0d:e6:b3:dd:a3:be:3e:d0:c3:10:
                    41:4d:75:44:2d:f6:11:fd:a4:b5:95:63:1f:d1:fc:
                    02:c4:94:66:19:d0:6f:ff:35:59:d5:8b:52:5c:73:
                    08:88:cc:2c:db:33:3d:d9:e5:1e:41:18:a9:03:25:
                    51:94:81:3d:96:ae:a5:64:6d:1f:55:5e:b3:af:be:
                    77:27:25:5f:e0:8e:bc:f1:d5:22:20:df:ca:78:13:
                    94:59:a7:eb:d5:0f:07:f4:c0:3f:7c:45:d3:c9:55:
                    b5:17:c2:d7:0c:bc:b6:1b:6a:30:48:3b:6c:42:6d:
                    22:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:DC:6C:0E:5B:84:ED:13:A8:84:81:2C:9E:06:F8:58:DD:C5:F5:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d2de7271-9c81-455b-9780-55895b635592/caa19e29-1ee5-3550-9449-8cefa6f09bfb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d2de7271-9c81-455b-9780-55895b635592/d2de7271-9c81-455b-9780-55895b635592.crl

            X509v3 Authority Key Identifier:
                keyid:B6:52:57:17:4F:47:66:18:F6:EE:34:7E:44:53:C8:68:EE:5C:43:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d2de7271-9c81-455b-9780-55895b635592.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:c0:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:72:ce:ec:93:04:09:55:1f:03:d4:4f:28:3c:e6:d1:b6:92:
         57:71:18:f2:49:f7:1c:c5:4f:b0:11:41:c1:c3:9a:57:f6:bb:
         72:77:88:be:35:33:d8:26:13:61:51:b0:af:29:aa:49:2a:31:
         a9:fd:47:52:4f:3d:af:33:e5:79:bf:a9:74:02:28:76:a1:8a:
         9f:93:29:e7:71:57:84:8e:7f:91:c2:6b:f9:0e:4a:cb:c6:10:
         72:57:12:77:a1:b2:05:a9:ac:fc:4d:13:63:d2:88:50:fb:77:
         4d:d1:36:29:a0:e0:d1:0e:2d:0d:64:3e:51:fa:e3:ee:26:2f:
         9e:58:6a:0d:fa:bc:d8:78:25:1e:97:7c:a9:5e:7d:11:ee:79:
         e0:45:b4:ae:e2:b8:48:e5:0a:61:d3:da:6c:80:e4:39:83:6f:
         4a:e3:e9:74:0a:a5:fe:94:5d:c2:42:25:21:d7:22:63:5d:b6:
         ba:05:43:6a:7f:e1:9d:dc:8a:f6:7d:96:a3:72:d5:af:c2:fc:
         54:f1:e6:85:4d:da:2c:a7:2c:41:8e:dd:52:ef:cf:f2:bb:ac:
         eb:f4:39:45:56:ed:4c:e5:5f:ba:af:72:be:af:66:97:3f:a7:
         5c:00:e4:22:c2:c5:0a:98:65:10:9e:e9:89:6c:8f:64:23:81:
         da:74:3c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:25:23 2024 by rpki-client on console-fra.rpki-client.org