Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/63495d19-e739-3808-ab7d-1c4c9a5d8285.roa
File:                     63495d19-e739-3808-ab7d-1c4c9a5d8285.roa (raw, json)
Hash identifier:          XklKUyPAWZkIaLOsPdPPgvCUSffp6irR2geNszHR8qI=
Subject key identifier:   A1:1B:8A:E7:4A:24:DE:A4:E8:87:4C:43:26:B7:20:2F:99:FD:7A:3B
Certificate issuer:       /CN=2ccef7a6-b8db-4753-b71f-dd2e40d58081
Certificate serial:       010D0C9F432858472405CF2796B0EEE98046B500
Authority key identifier: E2:C2:CF:84:93:6A:CB:B4:7D:66:12:04:5C:13:88:E7:23:E3:F0:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/63495d19-e739-3808-ab7d-1c4c9a5d8285.roa
Signing time:             Sun 08 Sep 2024 01:00:31 +0000
ROA not before:           Sun 08 Sep 2024 01:00:31 +0000
ROA not after:            Sat 07 Dec 2024 02:00:31 +0000
asID:                     136557
IP address blocks:        2606:fc40:4002::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/2ccef7a6-b8db-4753-b71f-dd2e40d58081.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/2ccef7a6-b8db-4753-b71f-dd2e40d58081.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:24:05:cf:27:96:b0:ee:e9:80:46:b5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ccef7a6-b8db-4753-b71f-dd2e40d58081
        Validity
            Not Before: Sep  8 01:00:31 2024 GMT
            Not After : Dec  7 02:00:31 2024 GMT
        Subject: CN=0d99f973-aaeb-41ca-8dc2-093c051bb873
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:71:90:b7:64:5c:cd:73:bb:27:f4:7f:85:9d:
                    9b:c3:fb:30:3e:9d:35:c2:f0:31:46:7a:c6:32:cc:
                    85:b6:d4:9f:cc:33:e2:63:09:bf:8a:c3:5b:a7:e5:
                    7e:6d:4b:7d:6a:20:a7:1e:9f:06:ad:e4:9c:0a:b6:
                    a2:5d:40:3c:24:39:c7:28:53:69:fe:a9:f5:33:10:
                    75:ee:8f:b1:b6:01:b3:e6:5a:e6:6d:27:43:1e:88:
                    97:e1:4b:12:95:e8:15:87:9e:46:0b:0c:7e:9a:e8:
                    5f:c1:2b:68:dd:3f:4b:43:84:75:17:ec:05:f6:54:
                    79:c1:73:89:d2:47:c2:ba:97:82:dc:94:fd:c5:68:
                    ad:59:b5:38:a2:ad:a7:c3:89:4c:6d:ca:53:c6:b9:
                    97:eb:8c:41:d2:36:99:d2:25:3f:65:73:bd:ff:7a:
                    95:97:f4:00:81:59:d4:17:e7:70:20:57:f2:44:fd:
                    4d:a9:b7:88:eb:1d:bd:77:7d:8d:14:ad:44:40:11:
                    11:57:00:1b:d5:3e:84:66:b8:e2:71:e5:f6:64:2f:
                    0c:a3:b8:97:3d:63:23:4c:6f:03:11:94:81:3c:15:
                    e9:c7:fb:35:42:92:54:54:c3:d7:37:78:03:67:14:
                    43:b8:75:75:84:2c:f0:63:d3:7f:51:99:42:5d:e1:
                    21:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:1B:8A:E7:4A:24:DE:A4:E8:87:4C:43:26:B7:20:2F:99:FD:7A:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/63495d19-e739-3808-ab7d-1c4c9a5d8285.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/2ccef7a6-b8db-4753-b71f-dd2e40d58081.crl

            X509v3 Authority Key Identifier:
                keyid:E2:C2:CF:84:93:6A:CB:B4:7D:66:12:04:5C:13:88:E7:23:E3:F0:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:fc40:4002::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:79:8f:d7:05:ad:2a:9d:4e:92:a0:9a:f4:57:47:a7:3e:b3:
         5e:f3:a3:ff:ef:f5:12:87:c8:22:c3:e8:63:6f:1d:cc:c8:d5:
         62:12:5f:a5:fb:67:b3:dc:dd:3e:00:f7:3d:64:c8:fc:22:7f:
         52:ac:6b:cc:0d:dc:fa:d9:46:f9:fa:3e:0e:6f:11:53:c1:26:
         d2:bc:e7:3d:f8:0d:35:08:4f:a5:55:44:5e:50:ae:ae:62:c7:
         fc:84:7e:83:25:44:24:97:e6:74:82:bf:ae:31:11:43:34:9c:
         2d:ce:25:d3:a0:5f:0a:e5:5d:85:67:e1:bd:5a:98:6f:54:c0:
         a7:fa:90:70:3d:43:03:c3:e7:4b:66:8a:15:6d:f4:14:6e:22:
         25:0c:ba:95:c9:bd:09:be:ab:01:18:41:19:10:99:25:ab:6b:
         2c:03:78:79:d5:e3:67:aa:a8:ae:64:b4:d0:82:f6:03:4c:c5:
         85:ee:d1:b9:3c:fd:23:60:3d:3c:99:bb:bf:51:21:99:ce:03:
         ff:12:63:6b:c0:5a:e3:ff:f1:0d:6b:93:df:e4:d1:06:62:bb:
         82:09:53:ca:33:11:ce:eb:5c:ca:09:21:f6:98:57:78:ee:b7:
         7c:6a:8a:47:40:fa:71:bf:d4:b3:0c:d1:88:1a:98:10:46:d3:
         8a:4e:ed:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 16:06:23 2024 by rpki-client on console-ams.rpki-client.org