Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/36c39fb8-4da4-452b-a86f-8d28342d9446/7d9edfbb-78b2-3f4d-a5fe-3dc4c031d943.roa
File:                     7d9edfbb-78b2-3f4d-a5fe-3dc4c031d943.roa (raw, json)
Hash identifier:          n7HvPgDL+ghuKl55Jd0K6/Dv+EtaUFt4hlmFppXxZo0=
Subject key identifier:   40:C7:B4:CD:23:D1:37:50:FA:C2:EC:12:E8:2A:BF:DA:D9:D3:11:15
Certificate issuer:       /CN=36c39fb8-4da4-452b-a86f-8d28342d9446
Certificate serial:       010D0C9F4328584774FBA603C6978E749F75F980
Authority key identifier: 7A:55:39:FA:30:D8:56:4E:4F:C7:AC:72:2C:B0:02:A7:E4:5B:AE:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/36c39fb8-4da4-452b-a86f-8d28342d9446.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/36c39fb8-4da4-452b-a86f-8d28342d9446/7d9edfbb-78b2-3f4d-a5fe-3dc4c031d943.roa
Signing time:             Mon 07 Oct 2024 01:00:31 +0000
ROA not before:           Mon 07 Oct 2024 01:00:31 +0000
ROA not after:            Sun 05 Jan 2025 02:00:31 +0000
asID:                     396045
IP address blocks:        2604:c8c0::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/36c39fb8-4da4-452b-a86f-8d28342d9446/36c39fb8-4da4-452b-a86f-8d28342d9446.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/36c39fb8-4da4-452b-a86f-8d28342d9446/36c39fb8-4da4-452b-a86f-8d28342d9446.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/36c39fb8-4da4-452b-a86f-8d28342d9446.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:74:fb:a6:03:c6:97:8e:74:9f:75:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36c39fb8-4da4-452b-a86f-8d28342d9446
        Validity
            Not Before: Oct  7 01:00:31 2024 GMT
            Not After : Jan  5 02:00:31 2025 GMT
        Subject: CN=945e47a7-558e-4197-b5df-3a6df6225e42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:6e:49:fd:d5:d1:7e:81:62:48:a1:2d:fe:97:
                    21:f6:34:94:7f:d3:47:61:1d:7f:ee:7d:48:a4:d2:
                    77:1e:3d:99:41:6e:eb:dd:b7:80:eb:fa:e2:35:bf:
                    1b:fa:42:be:ff:14:83:5e:ea:64:f4:9b:51:11:ab:
                    30:f2:e8:3e:ab:2b:1f:b0:d5:16:ef:b4:0c:42:ba:
                    52:39:a3:95:64:fc:3d:f3:a2:c5:06:f3:ec:37:df:
                    04:9d:d6:b5:97:be:3e:3e:f7:f2:4b:b1:c9:d8:72:
                    57:06:68:c6:c2:ce:b1:0e:c3:85:58:aa:d3:bf:19:
                    34:f8:b1:7d:70:4d:45:c9:2a:fd:1b:a4:19:b1:e5:
                    b0:f1:3f:83:54:3d:e7:f1:ed:6a:0a:5d:a4:a6:d3:
                    ba:7d:40:a0:47:46:30:e3:75:ad:14:c8:1a:dc:de:
                    24:9b:79:e1:93:b5:82:60:30:88:60:6d:7c:91:1d:
                    3f:f1:ee:c2:62:c9:a1:cf:df:b5:86:95:e2:74:21:
                    2e:dd:db:d8:c9:c8:bb:aa:e4:9c:5f:b4:ff:c2:8f:
                    b6:bd:06:da:5c:1b:14:8f:07:e5:8f:6c:66:10:7a:
                    a8:54:75:f9:a8:9d:1b:2c:aa:d5:31:8a:6a:b2:4f:
                    7d:3a:7d:67:f9:53:3e:67:cb:64:f9:64:62:08:f5:
                    7b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:C7:B4:CD:23:D1:37:50:FA:C2:EC:12:E8:2A:BF:DA:D9:D3:11:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/36c39fb8-4da4-452b-a86f-8d28342d9446/7d9edfbb-78b2-3f4d-a5fe-3dc4c031d943.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/36c39fb8-4da4-452b-a86f-8d28342d9446/36c39fb8-4da4-452b-a86f-8d28342d9446.crl

            X509v3 Authority Key Identifier:
                keyid:7A:55:39:FA:30:D8:56:4E:4F:C7:AC:72:2C:B0:02:A7:E4:5B:AE:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/36c39fb8-4da4-452b-a86f-8d28342d9446.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:c8c0::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:a8:7b:91:3c:4f:4f:e2:c3:0c:50:86:47:f1:3b:a1:c2:5f:
         a1:07:6f:0c:b0:4d:7d:02:3c:16:a3:83:bd:af:38:10:62:35:
         63:e3:78:45:ba:69:78:7e:7e:f1:64:9c:1e:93:ab:8a:fa:63:
         47:74:2b:4c:ee:0f:12:c9:99:03:90:3d:7c:6f:3f:91:45:ff:
         7c:77:5b:d3:b9:2d:87:4c:af:ef:6b:5d:79:90:ed:e7:45:0d:
         3d:1a:eb:68:ba:7c:f2:7b:d1:7c:af:c9:03:09:9b:81:bc:51:
         6b:89:d8:dc:51:78:5a:e6:c7:7e:60:80:be:34:93:4f:16:8e:
         50:40:d0:30:d4:c5:c7:6f:2f:45:b3:44:57:2c:5c:14:1b:4d:
         cc:15:e0:c2:2f:47:92:54:09:cc:dd:b6:63:4a:be:fd:ec:c3:
         f7:43:a6:58:ee:3b:8a:ed:b6:97:3c:3e:dd:c9:61:04:35:8d:
         7d:09:d7:c2:40:f2:67:85:1d:1b:e9:40:9d:85:be:ac:c3:d4:
         6b:29:eb:cb:46:22:b9:c2:1f:46:32:58:bb:7e:50:6d:12:c9:
         63:00:f5:ce:74:27:73:dc:b3:51:22:a9:ea:ed:b0:ae:cc:65:
         fb:69:5f:b5:c3:06:b4:49:73:67:2b:90:60:be:38:df:7e:84:
         45:b2:60:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:04:06 2024 by rpki-client on console-ams.rpki-client.org