Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/35210763-57db-34de-b330-cad02dbdd9ae.roa
File:                     35210763-57db-34de-b330-cad02dbdd9ae.roa (raw, json)
Hash identifier:          wYAuu/BjcdcSvUnMN/HED7T1U2zlV8wAbMy0RfUxK+s=
Subject key identifier:   68:4D:BF:4B:32:7D:2F:54:C0:C0:2E:D8:50:E9:AB:95:33:EF:47:3D
Certificate issuer:       /CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
Certificate serial:       010D0C9F432858479AABF6059535753FA0156200
Authority key identifier: 57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/35210763-57db-34de-b330-cad02dbdd9ae.roa
Signing time:             Sun 20 Oct 2024 13:00:42 +0000
ROA not before:           Sun 20 Oct 2024 13:00:42 +0000
ROA not after:            Sat 18 Jan 2025 14:00:42 +0000
asID:                     945
IP address blocks:        2605:f440:9800::/39 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9a:ab:f6:05:95:35:75:3f:a0:15:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
        Validity
            Not Before: Oct 20 13:00:42 2024 GMT
            Not After : Jan 18 14:00:42 2025 GMT
        Subject: CN=995e2114-21bb-40c9-8a95-1482549e16b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:51:2a:74:e3:d1:c1:6b:60:58:10:a7:f4:35:
                    ec:5d:c6:a4:81:0c:46:e5:45:04:cb:8f:7c:99:5b:
                    7f:ae:1e:e1:91:c0:f0:c5:d3:90:c8:10:99:32:f5:
                    38:6d:e7:c8:6e:84:d3:eb:e2:1f:ab:1a:83:99:ba:
                    43:2b:95:d8:b9:bc:24:fd:d4:b9:d2:32:4d:4b:19:
                    29:dd:14:75:69:66:00:56:32:9c:33:56:76:8b:66:
                    d5:be:35:3c:19:d8:b7:4d:1b:95:73:e9:5b:4a:7f:
                    e9:05:f8:03:c3:20:5d:85:ab:e8:9c:95:07:4c:f5:
                    79:cf:62:3e:2e:43:5c:40:f7:f6:c4:1b:d5:14:b9:
                    c2:49:33:c8:f9:4f:5e:47:27:a5:1c:42:61:5a:d6:
                    5e:18:56:20:43:30:bf:5d:e2:8b:dd:a9:95:6a:3c:
                    07:48:9c:28:e5:3b:f2:78:ab:03:ef:80:c9:90:85:
                    c0:da:8a:32:33:6c:a1:70:0b:f4:28:c5:8f:00:41:
                    83:6c:e0:45:43:5b:24:35:2d:16:50:8b:74:e4:b4:
                    fb:fb:17:41:de:bb:e8:32:58:65:0d:bc:ad:e4:04:
                    bb:6e:28:80:03:64:41:4a:80:e0:dd:45:47:58:f9:
                    2f:21:a4:f4:a2:81:72:2e:c6:e4:33:90:a1:04:6b:
                    03:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:4D:BF:4B:32:7D:2F:54:C0:C0:2E:D8:50:E9:AB:95:33:EF:47:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/35210763-57db-34de-b330-cad02dbdd9ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl

            X509v3 Authority Key Identifier:
                keyid:57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:f440:9800::/39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:96:e2:69:95:23:fd:46:56:6a:35:53:51:b3:11:05:e9:c6:
         65:a3:dc:a7:1e:66:c6:74:0f:4d:c1:50:38:c7:ab:32:6a:26:
         d8:97:ac:75:0c:27:3d:f6:08:66:89:2c:68:c5:bd:ba:64:94:
         f7:29:61:47:9d:47:7c:97:2b:02:85:38:c5:03:5d:b9:09:fd:
         6c:dc:57:72:28:83:04:c0:9b:48:1a:89:59:25:5a:68:2b:85:
         82:6a:bf:4c:e6:9c:0a:6f:a5:09:f8:cc:e6:a3:84:bd:f5:4f:
         83:39:93:a1:e3:80:d1:0f:4f:93:bd:45:75:7d:2d:5b:f0:09:
         90:6d:e4:f2:2a:f6:89:ed:01:ec:92:e9:56:d6:cb:91:70:77:
         40:ac:da:4d:c6:ff:45:c0:d6:b4:ac:91:8f:2a:25:e4:33:dd:
         25:ae:35:a1:90:e7:3a:9e:00:0e:0c:62:0a:1c:d3:b1:49:00:
         67:7a:a2:2e:58:92:7a:b4:2f:81:9f:cd:a8:ff:86:e7:0c:8c:
         1f:e1:46:e9:c2:89:71:73:a2:ca:6c:47:6f:9a:5c:19:7d:c4:
         ff:ac:5f:d9:63:6a:6a:4e:67:7f:12:12:9b:b0:c0:d4:cc:da:
         46:2b:a6:5e:9f:47:aa:26:33:36:41:f4:dc:dd:eb:9d:25:79:
         0c:89:da:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:07:53 2024 by rpki-client on console-fra.rpki-client.org