Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/611dbbed-256e-489b-8656-320fdaca032f/ff11d196-488e-3232-b5a8-49623fac902f.roa
File:                     ff11d196-488e-3232-b5a8-49623fac902f.roa (raw, json)
Hash identifier:          89DFrYRMak2CHi3B5D4LbGbPQlPQ1Fyv/uJ4mKvyJpY=
Subject key identifier:   F6:55:5A:DE:C1:D4:47:D7:C1:8B:94:05:43:75:5B:F6:F7:BB:94:8A
Certificate issuer:       /CN=611dbbed-256e-489b-8656-320fdaca032f
Certificate serial:       010D0C9F432858479AABE5EB6D1E9A1DCAC26F80
Authority key identifier: 34:01:17:47:F4:DB:06:E2:96:FB:D7:3F:F5:17:E1:AF:C6:1C:D6:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/611dbbed-256e-489b-8656-320fdaca032f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/611dbbed-256e-489b-8656-320fdaca032f/ff11d196-488e-3232-b5a8-49623fac902f.roa
Signing time:             Sun 20 Oct 2024 13:00:42 +0000
ROA not before:           Sun 20 Oct 2024 13:00:42 +0000
ROA not after:            Sat 18 Jan 2025 14:00:42 +0000
asID:                     11796
IP address blocks:        2603:b000::/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/611dbbed-256e-489b-8656-320fdaca032f/611dbbed-256e-489b-8656-320fdaca032f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/611dbbed-256e-489b-8656-320fdaca032f/611dbbed-256e-489b-8656-320fdaca032f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/611dbbed-256e-489b-8656-320fdaca032f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9a:ab:e5:eb:6d:1e:9a:1d:ca:c2:6f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=611dbbed-256e-489b-8656-320fdaca032f
        Validity
            Not Before: Oct 20 13:00:42 2024 GMT
            Not After : Jan 18 14:00:42 2025 GMT
        Subject: CN=8fdc87be-2fb0-4e9c-aaf8-bd7648551c8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:25:bf:69:6a:60:72:0e:49:67:62:35:82:b1:
                    47:fe:7a:1c:42:40:b5:0c:11:c3:14:26:71:c9:67:
                    d0:cc:31:ae:0f:8d:ff:79:32:8b:4a:c9:c1:96:e2:
                    c8:e1:f6:06:43:ce:0c:8b:c3:5a:22:99:38:2f:5d:
                    45:c5:f3:bd:3a:11:81:13:91:53:38:0f:24:48:ba:
                    76:9d:c0:e7:0a:a3:d4:94:8f:3c:46:21:af:f3:49:
                    c1:a9:d4:21:4c:bd:25:ae:1b:da:cb:6e:95:ca:85:
                    5d:f0:05:a6:be:8a:3e:96:54:c7:9a:58:a4:db:98:
                    6e:56:ee:ac:54:95:05:57:d3:cd:d1:56:de:71:74:
                    a2:98:f5:1a:8f:b9:21:60:23:55:ed:40:96:84:a9:
                    89:86:cd:08:c2:df:54:22:7b:47:7f:01:ab:e7:59:
                    c4:04:47:45:d0:65:9d:ba:50:75:dc:e8:7e:30:50:
                    46:b6:85:04:0a:a8:19:9a:87:36:dc:f8:dd:da:3b:
                    8c:91:72:05:27:c2:58:ba:35:74:73:00:fd:86:2e:
                    d5:b6:2c:62:a0:07:5c:ea:bb:73:af:36:82:c1:1e:
                    df:24:fd:d2:61:5e:17:a7:6e:49:7c:66:ca:25:04:
                    6c:de:2f:45:e1:c8:ba:8b:e5:88:62:eb:03:12:9f:
                    7b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:55:5A:DE:C1:D4:47:D7:C1:8B:94:05:43:75:5B:F6:F7:BB:94:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/611dbbed-256e-489b-8656-320fdaca032f/ff11d196-488e-3232-b5a8-49623fac902f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/611dbbed-256e-489b-8656-320fdaca032f/611dbbed-256e-489b-8656-320fdaca032f.crl

            X509v3 Authority Key Identifier:
                keyid:34:01:17:47:F4:DB:06:E2:96:FB:D7:3F:F5:17:E1:AF:C6:1C:D6:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/611dbbed-256e-489b-8656-320fdaca032f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:b000::/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:b1:1d:39:82:d7:dd:38:99:2c:c7:85:9d:55:2b:67:d6:4e:
         2a:ae:12:28:e2:1b:74:91:78:40:da:0f:10:ec:46:41:91:3a:
         1f:c1:59:92:c4:b2:ce:77:6f:c9:0a:9d:d7:78:da:c4:28:65:
         28:a6:b2:de:b6:42:c6:63:db:d1:69:58:11:67:96:ca:de:c4:
         8f:33:b3:ba:7a:5a:06:f0:12:b9:cf:69:f0:36:15:c6:03:31:
         e4:ad:56:34:c0:ad:68:b3:b0:91:1c:74:69:8b:b4:1e:0f:83:
         c8:5c:c9:34:84:b0:1c:3d:13:fe:aa:a4:63:5a:41:13:e6:9d:
         80:6f:dd:83:a6:0d:85:11:69:d0:5e:76:82:89:e1:67:0f:0c:
         62:63:6f:6b:93:e5:d0:9a:c8:38:24:f7:72:84:99:92:69:ff:
         ed:16:3d:68:cb:78:85:a9:54:11:59:fb:7c:3b:8e:bd:b7:06:
         44:f6:e6:0e:d9:bd:11:f2:10:7a:8e:b4:a4:ef:9b:7a:08:5b:
         77:ab:0e:e1:d4:8e:f3:0a:58:bd:1c:c2:39:17:21:f0:bc:78:
         f0:d0:58:5f:28:a2:12:36:92:38:99:a0:8c:e1:68:0d:28:9d:
         49:4b:24:77:36:68:cc:a5:1d:6c:4e:52:da:34:e6:2b:b2:23:
         a7:74:ab:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:28:57 2024 by rpki-client on console-fra.rpki-client.org