Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/aa4fd095-3216-3638-92cf-e11b27683085.roa
File:                     aa4fd095-3216-3638-92cf-e11b27683085.roa (raw, json)
Hash identifier:          a4eb4VMRvHwzzRxdZu/R0aqZQodc1wFktjcfrJ4w2aI=
Subject key identifier:   AC:53:29:7B:10:FD:7D:11:C6:FF:2F:85:14:13:56:4F:18:72:8E:78
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584722A12175D7C5E4A309E89C00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/aa4fd095-3216-3638-92cf-e11b27683085.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     10796
IP address blocks:        2603:6000::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a1:21:75:d7:c5:e4:a3:09:e8:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=9342fa03-b0ef-4153-b2d4-514a95984734
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:cd:8a:10:88:6b:7f:5b:3c:bb:96:54:5f:88:
                    12:b0:dd:fa:b5:53:54:4d:03:8b:ac:75:7e:4b:8c:
                    4b:9d:62:14:ee:42:70:66:f3:a9:36:ed:5c:8e:48:
                    4c:50:e8:95:5e:d8:c0:5c:26:26:2e:dc:f3:c4:97:
                    90:a2:88:0c:d5:30:e0:11:78:2f:76:09:f0:7d:17:
                    a5:8b:a6:f2:d3:61:d7:b2:37:bd:c6:93:cf:98:22:
                    92:fa:95:0f:3f:e6:2d:b8:63:cc:57:a5:7b:68:1b:
                    9d:28:58:8e:b5:c4:e9:b2:55:bb:fa:bf:c9:ac:7e:
                    54:1f:dc:d4:08:8b:53:67:f9:0f:d7:83:95:14:f6:
                    4f:c1:d1:8a:6d:6f:22:e2:ae:b5:f6:ee:ea:d4:27:
                    eb:d6:82:b4:d5:d2:1d:28:b2:51:44:8e:4e:2c:c4:
                    90:33:c7:53:21:b7:5e:7a:f4:88:2c:ea:01:c7:06:
                    96:4f:52:66:85:32:cc:41:0f:df:8a:41:91:7f:37:
                    c9:8a:d8:f2:f9:69:6a:b0:52:b8:9b:19:9a:b0:24:
                    d5:aa:89:c8:94:0b:e7:ed:d5:48:67:31:ec:c9:58:
                    1c:fa:47:1c:a5:df:5e:b0:ec:36:2b:9f:ac:78:f9:
                    81:e2:3d:48:cd:3c:a4:06:57:ad:1b:12:ed:84:05:
                    2a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:53:29:7B:10:FD:7D:11:C6:FF:2F:85:14:13:56:4F:18:72:8E:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/aa4fd095-3216-3638-92cf-e11b27683085.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:6000::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:76:0a:59:10:10:dd:4f:9e:02:39:25:9d:e4:45:cd:57:c6:
         83:f1:d6:c9:4d:d0:76:1b:45:12:12:5a:40:33:9b:62:07:01:
         77:8a:dd:8c:10:03:2e:92:68:49:b6:eb:a2:ce:80:36:39:5d:
         0b:27:ad:01:3f:1d:92:4d:27:ab:ea:30:d3:ef:c4:1d:99:ab:
         31:ec:14:6b:a8:10:e0:ba:1b:27:4e:7e:e0:7d:68:9b:73:28:
         22:2c:e7:d2:8e:51:e4:79:1d:d8:c4:ee:84:2b:39:61:93:c3:
         35:f6:67:f0:a7:28:43:88:63:1b:9f:b4:51:c5:a0:fe:78:6e:
         c6:81:d1:cb:54:a8:89:05:8f:63:f9:f5:78:6d:6a:ca:96:3f:
         1f:9f:1f:de:cc:08:d7:47:d4:47:9e:b8:cd:a2:e7:a8:3f:88:
         fc:a6:d5:ae:bc:c5:db:53:27:80:75:94:83:d1:59:15:4d:6c:
         e7:3f:d2:4a:d4:84:64:3b:d3:48:04:e1:66:7d:65:15:d6:09:
         62:32:f0:50:43:6a:43:a4:34:76:2c:8d:c1:73:bc:95:ac:1f:
         b2:e7:aa:94:dd:f4:8a:7e:c4:38:9d:bf:38:c8:f4:9a:c0:27:
         f7:2d:dd:80:b8:d7:87:24:35:af:35:74:39:61:fa:84:48:bd:
         36:84:d9:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:41:28 2024 by rpki-client on console-ams.rpki-client.org