Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b86ec0e2-930a-42b9-a90a-8ccd0c9dcf59/e751b78c-338a-3d91-8677-7c8e85c62442.roa
File:                     e751b78c-338a-3d91-8677-7c8e85c62442.roa (raw, json)
Hash identifier:          AeKWnA6edMAg25k4GwkIUZdw7gbPJzAJibY9gE93ej8=
Subject key identifier:   A1:FF:0D:EC:B6:73:2F:FA:A6:3A:ED:B0:06:E1:BE:6F:94:36:47:D3
Certificate issuer:       /CN=b86ec0e2-930a-42b9-a90a-8ccd0c9dcf59
Certificate serial:       010D0C9F4328584765A0E2262FF30C36BE1DB240
Authority key identifier: 6A:2F:81:03:3C:D5:6D:3F:A2:D1:CB:2F:88:81:66:B9:AD:CD:ED:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b86ec0e2-930a-42b9-a90a-8ccd0c9dcf59.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b86ec0e2-930a-42b9-a90a-8ccd0c9dcf59/e751b78c-338a-3d91-8677-7c8e85c62442.roa
Signing time:             Tue 01 Oct 2024 13:00:42 +0000
ROA not before:           Tue 01 Oct 2024 13:00:42 +0000
ROA not after:            Mon 30 Dec 2024 14:00:42 +0000
asID:                     31827
IP address blocks:        2606:8780::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b86ec0e2-930a-42b9-a90a-8ccd0c9dcf59/b86ec0e2-930a-42b9-a90a-8ccd0c9dcf59.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b86ec0e2-930a-42b9-a90a-8ccd0c9dcf59/b86ec0e2-930a-42b9-a90a-8ccd0c9dcf59.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b86ec0e2-930a-42b9-a90a-8ccd0c9dcf59.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:65:a0:e2:26:2f:f3:0c:36:be:1d:b2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b86ec0e2-930a-42b9-a90a-8ccd0c9dcf59
        Validity
            Not Before: Oct  1 13:00:42 2024 GMT
            Not After : Dec 30 14:00:42 2024 GMT
        Subject: CN=d19326ae-f169-4df0-ae4f-e93b98a38da9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f5:90:49:bc:f1:e8:c8:87:19:7b:2f:11:d6:
                    c2:21:56:b0:9f:7e:9f:51:c3:1a:72:8d:c3:52:88:
                    ed:f5:c3:96:c9:04:32:7b:6f:3f:27:ac:95:22:61:
                    72:fa:be:5b:7c:9e:ec:44:88:c5:ab:58:ea:0c:5a:
                    48:05:f5:f4:f1:b4:11:00:2d:c4:b1:9e:49:37:71:
                    15:a0:a4:a6:67:a3:37:c6:32:12:7d:ca:aa:05:84:
                    64:13:62:83:c1:e4:8f:c6:70:4a:a4:66:7f:a3:1b:
                    a0:bb:b4:34:dc:08:59:03:ad:49:e8:7d:39:c7:9f:
                    3a:7c:59:2f:69:d9:6e:41:13:24:35:9e:68:0f:8a:
                    ac:70:c6:21:7c:c7:c5:b5:c7:4e:74:49:ac:9d:af:
                    f6:8f:ff:d1:e2:d5:37:2f:18:1c:82:dd:ad:e5:1f:
                    65:38:38:ab:10:27:81:03:4b:ae:a0:f2:f9:32:8a:
                    e7:ea:69:00:2f:59:91:37:1b:e1:9f:b3:29:1d:b7:
                    98:07:17:11:e3:b3:13:29:a9:97:6a:55:67:32:fc:
                    77:6f:6f:a5:a9:85:8e:be:55:11:e2:05:0b:33:c1:
                    f0:92:a3:52:f1:af:10:32:ab:f1:6e:44:02:d9:c7:
                    82:3b:ef:74:62:0f:29:98:75:59:d5:6f:f3:58:71:
                    20:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:FF:0D:EC:B6:73:2F:FA:A6:3A:ED:B0:06:E1:BE:6F:94:36:47:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b86ec0e2-930a-42b9-a90a-8ccd0c9dcf59/e751b78c-338a-3d91-8677-7c8e85c62442.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b86ec0e2-930a-42b9-a90a-8ccd0c9dcf59/b86ec0e2-930a-42b9-a90a-8ccd0c9dcf59.crl

            X509v3 Authority Key Identifier:
                keyid:6A:2F:81:03:3C:D5:6D:3F:A2:D1:CB:2F:88:81:66:B9:AD:CD:ED:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b86ec0e2-930a-42b9-a90a-8ccd0c9dcf59.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:8780::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:a9:5d:fe:67:72:50:49:99:f4:3e:39:f6:1b:6e:d2:b4:f7:
         0d:04:c5:fe:e1:08:5b:67:35:3d:1f:fe:17:a0:4c:d9:1c:14:
         5a:62:26:69:79:fa:59:0a:41:95:ca:78:88:e6:a9:b7:91:9a:
         36:ce:37:31:c7:30:7a:63:36:5b:f2:d4:7c:de:c4:89:80:2b:
         d1:06:8c:90:d2:d1:8a:e5:31:ba:d3:e0:4e:cc:dd:ca:60:1c:
         c4:e7:81:18:32:df:39:6b:ff:31:05:f0:c5:a8:a0:0f:62:3f:
         f4:94:e9:f0:03:9d:2e:c5:85:99:fd:c9:30:94:c2:91:f1:c1:
         38:58:14:73:6e:b1:ed:fe:7b:e2:76:93:3e:e5:4b:45:07:d4:
         89:c5:ba:00:50:c8:0a:63:22:e7:44:8d:de:7e:ba:4a:ed:ff:
         60:ef:85:25:dd:bb:2f:92:6a:72:b7:c7:51:d9:a2:1a:8c:1d:
         49:7f:5d:15:fe:b4:8d:6a:30:62:f5:7b:4a:df:51:3d:a2:ab:
         7f:d0:a9:2c:55:b2:52:80:4d:6f:7f:d4:cf:d9:b0:75:de:b9:
         b6:3e:67:3b:da:bd:36:2f:45:94:f7:17:27:7f:37:7c:44:ca:
         0b:85:5d:1e:fc:f7:e3:fc:80:48:51:4a:d8:be:a8:dd:0e:87:
         a0:1c:6e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:03 2024 by rpki-client on console-ams.rpki-client.org