Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/788f972d-81cb-3079-82c2-6c1926c28690.roa
File:                     788f972d-81cb-3079-82c2-6c1926c28690.roa (raw, json)
Hash identifier:          Srx68r1ZQcZSv3OXIV0+mOAN3KKb4+PG47jqjmlLkQU=
Subject key identifier:   C0:E2:6B:C4:58:44:1B:49:E3:D8:B1:7F:38:68:90:A9:F3:A9:9F:6C
Certificate issuer:       /CN=d106a247-9308-46e9-9d88-ae987a6bdace
Certificate serial:       010D0C9F432858473D2600AADA5CA48D3EB2C390
Authority key identifier: E7:DC:3B:E5:56:FF:1D:5F:DF:CA:F4:65:1C:3D:2E:6C:FD:FE:82:3A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/788f972d-81cb-3079-82c2-6c1926c28690.roa
Signing time:             Tue 17 Sep 2024 01:00:31 +0000
ROA not before:           Tue 17 Sep 2024 01:00:31 +0000
ROA not after:            Mon 16 Dec 2024 02:00:31 +0000
asID:                     201106
IP address blocks:        2604:9cc0:1c00::/38 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/d106a247-9308-46e9-9d88-ae987a6bdace.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/d106a247-9308-46e9-9d88-ae987a6bdace.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3d:26:00:aa:da:5c:a4:8d:3e:b2:c3:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d106a247-9308-46e9-9d88-ae987a6bdace
        Validity
            Not Before: Sep 17 01:00:31 2024 GMT
            Not After : Dec 16 02:00:31 2024 GMT
        Subject: CN=45ea748d-a733-4241-815e-932836d49c74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:d1:bb:9f:67:ee:d3:44:a3:f1:86:b2:65:b9:
                    29:e9:17:92:83:dd:31:4d:9f:34:b5:32:d4:28:08:
                    3b:8c:a7:10:96:6e:a9:d0:2d:ec:cf:1a:85:e2:39:
                    c3:c3:13:3d:dc:28:c3:51:13:9b:a3:fd:4b:63:f8:
                    f4:aa:99:b2:59:39:2a:61:3c:69:27:4b:d7:3f:f9:
                    37:96:53:ba:48:fb:d9:5e:59:a1:82:3c:1b:e0:75:
                    bd:9e:d0:ca:3e:e6:22:d0:53:96:42:2a:c1:9e:87:
                    7d:27:bc:f1:9c:72:2f:bc:d5:e8:df:a6:d1:c5:31:
                    20:da:61:5d:a3:f5:70:83:ea:be:f2:29:62:50:6b:
                    4b:cd:3f:fe:3f:1c:e6:c4:84:77:56:8b:73:ea:1a:
                    85:86:21:95:fe:10:11:6f:ca:2f:d7:3f:e8:5b:4e:
                    ee:28:d5:21:5e:56:21:15:23:64:b5:8f:f8:7d:d3:
                    30:21:39:2c:1c:aa:f6:d7:77:64:5e:42:42:54:68:
                    60:15:6a:24:51:3d:41:24:45:aa:8d:35:69:00:a9:
                    3b:a3:a3:f2:c8:e0:a0:fb:e8:cb:ef:5e:41:78:6b:
                    2b:d4:bd:21:81:d1:60:bc:82:85:b2:1f:06:f5:80:
                    e9:62:d2:a1:bf:55:b8:9b:47:c7:9e:1c:4c:97:ed:
                    5f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:E2:6B:C4:58:44:1B:49:E3:D8:B1:7F:38:68:90:A9:F3:A9:9F:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/788f972d-81cb-3079-82c2-6c1926c28690.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/d106a247-9308-46e9-9d88-ae987a6bdace.crl

            X509v3 Authority Key Identifier:
                keyid:E7:DC:3B:E5:56:FF:1D:5F:DF:CA:F4:65:1C:3D:2E:6C:FD:FE:82:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:9cc0:1c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:c0:2b:66:97:28:9f:63:ee:d8:97:c9:50:0f:bb:f4:da:14:
         33:c9:6b:cd:9c:1e:08:61:a2:c1:f9:f9:1c:72:d3:54:15:9b:
         c3:1e:cf:b6:7a:be:1d:a3:b8:83:0d:f1:fd:8b:cf:95:6a:43:
         7f:e6:5a:a9:5f:ea:16:82:3f:f2:39:6a:98:34:48:b2:f6:b7:
         16:81:6e:16:23:72:c7:68:85:cb:9d:cb:ac:a6:09:62:23:05:
         ed:84:c7:03:6d:4a:79:fd:3b:a8:a8:77:4e:95:de:d7:ce:fc:
         73:f9:3c:64:c6:92:45:c1:07:aa:53:ae:58:d5:d4:e3:33:82:
         06:22:2e:89:db:a3:98:cc:11:13:ee:e5:64:5b:9c:6e:40:1e:
         f2:31:79:22:b3:21:d3:af:36:ad:38:de:78:ea:9d:4e:5c:96:
         31:0d:eb:2f:22:6b:3c:39:42:fe:80:a6:c8:eb:79:68:f7:0a:
         36:54:0c:9c:2e:20:d7:c6:e2:25:e8:a4:25:63:0d:7f:a5:8c:
         17:66:8e:f7:a4:be:fc:2e:e0:c7:44:27:18:1d:35:3c:3a:12:
         26:14:6d:25:59:93:ac:4e:5c:0d:2c:28:df:fa:a2:d5:9f:aa:
         54:93:54:d6:67:84:86:56:9f:27:ed:98:5d:3c:c8:bb:63:2d:
         24:0f:4a:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:27:41 2024 by rpki-client on console-fra.rpki-client.org