Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/e53bee3d-7e95-3d21-9b67-0a49a2b5464d.roa
File:                     e53bee3d-7e95-3d21-9b67-0a49a2b5464d.roa (raw, json)
Hash identifier:          16w7o5AGp5w2bIHJgjWG8jJOKH/j6OCMx+5KiVkaMtM=
Subject key identifier:   6F:A6:32:38:92:06:92:FB:B5:B7:B7:CF:14:A7:6A:A1:36:ED:7B:EE
Certificate issuer:       /CN=d106a247-9308-46e9-9d88-ae987a6bdace
Certificate serial:       010D0C9F43285847E1AE80A2FC9E919C1C186708
Authority key identifier: E7:DC:3B:E5:56:FF:1D:5F:DF:CA:F4:65:1C:3D:2E:6C:FD:FE:82:3A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/e53bee3d-7e95-3d21-9b67-0a49a2b5464d.roa
Signing time:             Thu 14 Nov 2024 23:28:26 +0000
ROA not before:           Thu 14 Nov 2024 23:28:26 +0000
ROA not after:            Wed 12 Feb 2025 23:28:26 +0000
asID:                     50131
IP address blocks:        2604:9cc0:2000::/38 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/d106a247-9308-46e9-9d88-ae987a6bdace.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/d106a247-9308-46e9-9d88-ae987a6bdace.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e1:ae:80:a2:fc:9e:91:9c:1c:18:67:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d106a247-9308-46e9-9d88-ae987a6bdace
        Validity
            Not Before: Nov 14 23:28:26 2024 GMT
            Not After : Feb 12 23:28:26 2025 GMT
        Subject: CN=97eddec4-5f14-41ff-919a-9c8a0b27a389
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9d:de:8f:59:e8:c5:1a:e1:0b:7e:10:0d:c1:
                    64:20:e6:4d:86:5c:f5:57:39:7d:0b:f1:32:d0:73:
                    03:c0:04:23:02:a0:b8:88:be:11:40:a8:57:95:db:
                    a1:b0:e6:b9:20:61:40:98:40:0e:17:43:e4:98:4f:
                    18:bb:a8:89:56:20:ea:c2:19:1b:3a:8c:86:60:bf:
                    fe:93:a2:ce:4f:77:b0:72:2a:45:69:9b:9f:72:93:
                    11:3c:e5:59:30:cb:04:79:c7:6b:35:4d:dd:14:10:
                    1e:d3:1d:3a:2a:cf:34:4a:36:73:e8:d7:a9:4f:58:
                    7c:1d:6b:59:54:c2:4e:67:f9:4c:4a:55:4e:8f:5c:
                    36:cd:17:f3:ea:7f:7d:8c:b2:cb:59:1a:fe:5b:60:
                    89:5c:5d:3d:c7:c4:2e:f6:2d:5e:1a:17:c6:00:6d:
                    9a:25:ba:28:cd:4c:84:ce:df:4f:d9:28:1d:a5:87:
                    11:c6:a3:d8:01:c3:d1:dd:96:1e:f8:92:b3:eb:43:
                    7b:91:ff:40:a1:7f:41:25:49:9c:8d:76:db:2e:71:
                    e6:98:00:8b:49:ef:98:db:41:43:1a:84:be:77:36:
                    90:e2:e9:3d:7c:64:8e:3f:2a:4b:9f:b6:34:12:35:
                    e2:7d:ae:bd:38:b1:6f:92:9f:6f:21:d4:f1:0e:b7:
                    36:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:A6:32:38:92:06:92:FB:B5:B7:B7:CF:14:A7:6A:A1:36:ED:7B:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/e53bee3d-7e95-3d21-9b67-0a49a2b5464d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/d106a247-9308-46e9-9d88-ae987a6bdace.crl

            X509v3 Authority Key Identifier:
                keyid:E7:DC:3B:E5:56:FF:1D:5F:DF:CA:F4:65:1C:3D:2E:6C:FD:FE:82:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:9cc0:2000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:2f:e3:12:21:88:86:9d:b4:9e:7a:b3:a8:29:4f:88:70:af:
         a3:ba:5e:23:a6:12:05:1d:4e:5c:c9:58:90:b9:40:eb:cf:a6:
         d6:9a:43:7b:38:73:59:d1:43:db:0a:fa:f9:d9:34:0e:9e:97:
         9a:9e:9f:76:2d:62:73:31:06:90:48:a0:50:57:67:51:ec:63:
         db:3a:c6:02:f3:a4:3c:25:ab:d3:f7:13:bd:71:0a:17:ec:97:
         31:7b:ac:a3:ca:fb:ed:aa:14:f8:00:6f:f8:a4:9a:e9:bd:91:
         3d:d0:88:2f:54:a7:4c:6a:d0:95:2c:0c:4d:bd:5a:ee:cc:3b:
         87:5a:dc:72:4f:90:1a:0c:a8:ec:ae:02:4a:c9:f3:74:94:d3:
         56:eb:44:39:1f:1d:e9:a3:96:ac:cd:c2:66:7b:ac:7d:07:88:
         22:5c:49:fb:79:fc:3c:b4:99:10:19:3f:27:e2:85:c0:23:79:
         4a:57:26:c2:b8:39:64:cc:c4:bb:d9:60:04:b5:cf:fd:a7:12:
         09:a9:0e:77:e9:0f:9e:77:88:c3:97:73:0a:78:67:4f:fe:85:
         79:fa:f8:3b:30:17:ae:85:3d:9a:13:b4:51:03:6d:bb:47:0a:
         78:a1:f0:ea:ff:a3:1e:78:b9:b5:65:cd:9a:ef:1c:66:a3:52:
         c5:c8:2a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:27:41 2024 by rpki-client on console-fra.rpki-client.org