Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9f12aa87-6a5c-3cd2-a4e3-81e2498c1cc7.roa
File:                     9f12aa87-6a5c-3cd2-a4e3-81e2498c1cc7.roa (raw, json)
Hash identifier:          iM1/b8LWQrvo/Qjm8hZXGH8K/6uVGwO92nZvqgAzhMY=
Subject key identifier:   36:8C:54:67:F0:85:B3:35:68:74:D8:31:FF:B4:38:62:49:1E:E2:C9
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285847D6CF4203C20ABA757D5197B0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9f12aa87-6a5c-3cd2-a4e3-81e2498c1cc7.roa
Signing time:             Mon 11 Nov 2024 02:00:27 +0000
ROA not before:           Mon 11 Nov 2024 02:00:27 +0000
ROA not after:            Sun 09 Feb 2025 02:00:27 +0000
asID:                     852
IP address blocks:        2001:569:c000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d6:cf:42:03:c2:0a:ba:75:7d:51:97:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Nov 11 02:00:27 2024 GMT
            Not After : Feb  9 02:00:27 2025 GMT
        Subject: CN=b6844d17-a845-4e61-842f-ed7a3fcea1c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:fe:f4:99:eb:d1:e7:46:5b:77:62:7e:13:fa:
                    53:9e:26:54:52:58:49:3c:9a:63:d8:48:ec:f1:d1:
                    c1:f3:b0:4f:9c:eb:a7:50:64:5b:2e:64:7a:98:bc:
                    b3:e1:3e:0c:59:52:29:a8:c4:da:7d:b0:b6:ba:db:
                    8e:9b:08:fa:d6:8a:93:d4:89:8f:86:7b:7f:cb:fa:
                    5c:74:48:b6:9a:5d:4b:fd:c1:ce:51:42:d3:c1:6b:
                    76:e6:67:db:e3:8a:91:1d:45:d2:be:9a:96:86:7a:
                    4a:a0:91:90:14:6b:47:00:dc:36:94:97:de:fb:bf:
                    ce:42:38:a3:d0:c6:0b:cb:34:a8:e1:6a:21:9d:97:
                    01:e2:79:3c:c7:d2:a7:e1:f0:77:5c:be:cf:96:a0:
                    4e:75:0e:41:9a:83:68:51:70:7b:d0:9f:78:00:00:
                    a1:7c:0c:b5:4a:55:ef:27:ec:02:a9:6f:8a:b3:24:
                    ac:10:e8:7f:0f:4f:b9:ab:ab:6c:b1:cc:d6:7d:6f:
                    7d:2f:16:65:fd:62:57:89:e8:91:c1:6f:28:30:05:
                    17:d9:56:9f:a6:4c:ec:72:c7:09:4a:aa:e7:9f:3d:
                    3e:8f:ba:85:31:63:ab:21:07:0b:8b:c6:ec:00:60:
                    d6:a4:5a:99:6e:94:05:93:94:ec:de:27:54:f0:9b:
                    4c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:8C:54:67:F0:85:B3:35:68:74:D8:31:FF:B4:38:62:49:1E:E2:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9f12aa87-6a5c-3cd2-a4e3-81e2498c1cc7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:569:c000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:32:58:3a:fc:e6:ba:89:30:9d:bd:38:6e:2b:d2:f2:43:0a:
         6b:f7:fe:6a:60:00:42:c0:20:15:40:af:85:4e:b1:9a:60:00:
         33:ed:1c:15:d3:b5:f8:0f:29:d2:1e:de:d8:12:e4:40:a5:e4:
         e5:86:eb:34:b9:38:ae:69:f3:c9:8f:0b:10:dc:45:b6:68:11:
         61:50:43:d3:43:b1:a1:1d:bb:ff:66:11:46:58:73:d3:d9:5f:
         6c:f1:54:a2:94:d6:67:bb:71:1e:83:d1:2a:09:81:2d:7a:4b:
         30:9e:44:81:da:a2:3b:4d:54:cd:8d:9b:88:c1:46:39:95:bf:
         e1:b3:6a:00:7a:52:93:56:79:51:f4:5f:c1:7f:6b:10:df:8e:
         3e:6b:14:d3:78:d4:13:70:33:bf:4b:cf:e7:e1:92:ec:0c:ac:
         9d:3b:e1:88:a9:5a:4b:92:07:9c:d3:3b:ed:15:08:06:96:2f:
         0c:ec:9b:0d:58:cf:75:03:c3:2c:5d:5c:ba:9a:af:37:ad:e9:
         83:ba:e3:ab:d7:84:89:61:94:e2:a9:7d:11:e6:32:73:3a:65:
         77:bf:ba:6f:8d:38:f4:43:19:e6:46:85:16:3a:2c:23:b6:0d:
         99:a3:81:b7:f8:fd:9b:f4:45:63:e6:57:84:ef:e5:1e:2d:a2:
         79:b5:ac:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:04:12 2024 by rpki-client on console-ams.rpki-client.org