Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/9465f03a-4a7a-309d-88aa-da4fc03e089e.roa
File:                     9465f03a-4a7a-309d-88aa-da4fc03e089e.roa (raw, json)
Hash identifier:          5rUZHpyQ3pmg8f3kBeUucFkzbCgOfrTKi0Ud9MbYtq4=
Subject key identifier:   B7:73:E7:B6:B3:35:4F:93:59:6C:87:1C:EA:49:8F:73:09:8A:7E:C3
Certificate issuer:       /CN=2ccef7a6-b8db-4753-b71f-dd2e40d58081
Certificate serial:       010D0C9F43285847C344878D9924159FD2D70400
Authority key identifier: E2:C2:CF:84:93:6A:CB:B4:7D:66:12:04:5C:13:88:E7:23:E3:F0:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/9465f03a-4a7a-309d-88aa-da4fc03e089e.roa
Signing time:             Mon 04 Nov 2024 02:00:36 +0000
ROA not before:           Mon 04 Nov 2024 02:00:36 +0000
ROA not after:            Sun 02 Feb 2025 02:00:36 +0000
asID:                     31786
IP address blocks:        2606:fc40:4001::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/2ccef7a6-b8db-4753-b71f-dd2e40d58081.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/2ccef7a6-b8db-4753-b71f-dd2e40d58081.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c3:44:87:8d:99:24:15:9f:d2:d7:04:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ccef7a6-b8db-4753-b71f-dd2e40d58081
        Validity
            Not Before: Nov  4 02:00:36 2024 GMT
            Not After : Feb  2 02:00:36 2025 GMT
        Subject: CN=cc676684-5de6-4a15-9ebe-792384fbbf2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:85:f7:e7:d7:58:fd:43:65:16:4c:e9:b4:8e:
                    a8:a2:5f:65:80:a2:f1:b5:d2:1c:0f:44:89:a9:0c:
                    78:32:4e:29:f4:3a:05:ad:e8:56:1d:be:27:82:40:
                    b4:e7:71:38:67:6b:62:57:e2:a1:9b:ea:b6:de:f3:
                    9e:46:98:bc:33:8a:ab:78:04:55:4c:44:d8:db:a4:
                    66:0b:3c:08:44:f8:a4:28:5e:2e:c6:85:9c:89:93:
                    2b:b8:5e:a2:15:8b:1b:82:50:55:8c:90:b6:9f:dd:
                    d8:71:c0:7e:19:78:eb:27:c2:41:85:30:fd:d0:0e:
                    d7:07:fc:f7:f2:66:63:d3:08:5e:a5:aa:0b:2f:20:
                    20:84:4e:4e:f6:c5:c4:13:d6:f2:f1:7f:68:db:44:
                    99:0d:df:d6:63:ec:4d:3a:ad:71:11:cb:cb:dc:57:
                    04:8a:12:ab:35:a8:f5:a0:b5:36:ef:c7:0e:28:d2:
                    20:c1:02:b8:83:31:1a:74:f4:e2:2a:4e:27:31:67:
                    6a:6d:f3:0e:90:cc:8e:47:db:a0:d7:01:b4:fb:ac:
                    6e:e5:cb:18:6f:0f:d4:db:e4:e8:7d:97:a4:1c:1e:
                    ab:92:59:dd:85:0e:0e:45:97:0f:a2:7b:52:8f:33:
                    69:9e:06:ba:be:73:58:d6:b5:dd:78:05:29:fc:18:
                    09:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:73:E7:B6:B3:35:4F:93:59:6C:87:1C:EA:49:8F:73:09:8A:7E:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/9465f03a-4a7a-309d-88aa-da4fc03e089e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/2ccef7a6-b8db-4753-b71f-dd2e40d58081.crl

            X509v3 Authority Key Identifier:
                keyid:E2:C2:CF:84:93:6A:CB:B4:7D:66:12:04:5C:13:88:E7:23:E3:F0:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:fc40:4001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:4b:64:eb:2c:cb:a3:0d:94:02:1c:b7:d6:14:d0:20:82:77:
         03:0e:35:e1:88:21:ab:7b:de:68:d3:b5:47:c5:91:fd:06:f4:
         ef:28:fa:ed:f7:6d:76:15:ef:b7:60:94:a1:79:cf:84:9c:f9:
         fe:c6:5b:51:8f:0f:ec:b3:fc:23:1e:fe:b1:6e:87:a3:f8:0e:
         2c:ef:2a:c9:22:ff:2e:00:45:15:e6:a7:e3:51:b0:84:bb:40:
         c6:df:a9:94:4a:7b:fb:42:fd:73:f7:ca:b6:54:63:49:c0:65:
         1f:6a:da:36:cc:43:45:45:e5:1c:09:cd:16:ba:98:61:71:3d:
         d6:59:17:ca:f6:8b:54:c2:38:41:58:54:3c:62:c2:f6:e6:66:
         35:c3:c8:b3:18:ad:02:bd:06:95:71:6c:81:40:9f:f0:4b:39:
         82:cb:21:8b:1a:65:46:30:b7:b7:fb:a5:20:f6:f0:49:02:47:
         3f:47:bf:23:38:c7:e7:7c:d1:fd:aa:2a:1a:4c:43:28:d4:bf:
         d5:ae:a3:f6:0f:bf:73:6b:9c:d7:81:48:54:fc:1b:f7:2f:81:
         d1:78:20:b7:40:7a:f3:9d:b8:aa:8d:d8:45:4f:ca:fe:cf:f0:
         88:89:27:a0:3e:72:67:7c:28:3b:a9:a5:7b:61:f4:3d:f9:cd:
         44:cd:5c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:07:42 2024 by rpki-client on console-fra.rpki-client.org