Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340/a6a9d896-2d48-3ca0-a293-3e1eb74a3c32.roa
File:                     a6a9d896-2d48-3ca0-a293-3e1eb74a3c32.roa (raw, json)
Hash identifier:          uja2UdWNP3x1aQySXsXkNrmhYgF7iKkbgJnQO1NvW9k=
Subject key identifier:   DB:DB:F0:0B:DB:83:20:10:98:24:1E:15:B3:00:CB:DB:B6:21:38:2B
Certificate issuer:       /CN=37a1bff3-cff2-41f8-a1d2-8a10cad7e340
Certificate serial:       010D0C9F43285845628D8E63481FED2DFC9730A0
Authority key identifier: 0C:8C:A0:41:6E:20:D0:55:A5:33:45:77:B1:7E:51:36:33:22:11:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340/a6a9d896-2d48-3ca0-a293-3e1eb74a3c32.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     36001
IP address blocks:        2606:3d00::/32 maxlen: 48
                          2605:bbc0::/32 maxlen: 48
                          2607:580::/32 maxlen: 48
                          2606:ab80::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340/37a1bff3-cff2-41f8-a1d2-8a10cad7e340.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340/37a1bff3-cff2-41f8-a1d2-8a10cad7e340.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8d:8e:63:48:1f:ed:2d:fc:97:30:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37a1bff3-cff2-41f8-a1d2-8a10cad7e340
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=06d10fbc-7bf9-491d-9ca7-4cd97c6e681a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:07:fc:04:bc:0c:f3:3c:f0:68:56:bf:ed:e4:
                    55:27:2b:05:75:d2:c6:1f:24:b2:f2:42:40:08:52:
                    dc:98:cd:26:fd:aa:0a:ff:77:2b:e4:ad:11:32:0c:
                    d3:5c:46:8d:69:cc:5b:75:11:ff:c5:33:10:99:63:
                    b7:9a:e7:99:69:01:6a:fa:b5:70:c0:66:28:b5:cd:
                    07:e7:af:c5:4f:d7:fe:9f:76:c3:f4:6f:e3:1f:fc:
                    50:67:d4:26:45:02:69:e5:6c:8b:4c:1c:a9:de:7f:
                    73:ae:cd:28:9f:c8:2c:fc:a6:78:0b:e1:a9:6b:05:
                    06:14:52:46:c8:2c:fd:9f:d9:85:6e:f2:9e:e8:4c:
                    03:fb:a7:21:a1:90:2e:59:c0:eb:68:5a:6f:b1:1d:
                    30:64:e6:6f:3c:98:dc:3a:fe:a6:0e:07:95:4c:4f:
                    a5:1a:4f:65:63:43:89:95:92:7f:ea:47:4b:5d:a1:
                    5c:9e:bf:a3:d5:ae:6b:06:63:bb:c5:e6:1c:93:09:
                    d0:cf:5f:28:3b:0c:d4:ff:cc:ab:6c:82:21:f8:c7:
                    a5:4f:e6:b7:0b:75:be:7f:0d:db:45:78:7c:d8:95:
                    4f:1a:c7:03:80:9e:27:bf:0d:51:50:c0:4b:9d:01:
                    70:b1:f5:8e:80:97:ea:7c:1d:64:b5:d7:2e:85:3c:
                    33:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:DB:F0:0B:DB:83:20:10:98:24:1E:15:B3:00:CB:DB:B6:21:38:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340/a6a9d896-2d48-3ca0-a293-3e1eb74a3c32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340/37a1bff3-cff2-41f8-a1d2-8a10cad7e340.crl

            X509v3 Authority Key Identifier:
                keyid:0C:8C:A0:41:6E:20:D0:55:A5:33:45:77:B1:7E:51:36:33:22:11:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:bbc0::/32
                  2606:3d00::/32
                  2606:ab80::/32
                  2607:580::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:4f:35:0f:c9:41:b9:7f:bc:09:03:88:06:97:17:b7:d4:52:
         ab:e6:01:60:10:13:93:eb:73:21:c2:8b:4d:4a:5d:5d:d2:25:
         58:82:15:c4:d7:21:44:ef:ed:ac:be:bb:ef:84:1b:7c:81:71:
         f5:c5:23:4d:7b:45:8f:a4:97:75:9c:2f:8f:d6:78:b4:87:8f:
         9a:7c:c9:68:f5:09:31:87:da:d6:64:89:da:fd:54:9a:88:6d:
         99:c1:61:1c:5c:36:8b:e5:bc:14:d2:52:bc:05:a3:8a:dd:38:
         78:73:3e:56:d2:79:8e:50:e1:96:f5:f4:d6:b1:f1:dc:22:ea:
         e8:0d:3c:26:60:1d:e5:d7:ae:1f:ae:91:2c:a3:df:8f:32:66:
         28:81:4f:d3:96:49:84:3f:c9:89:31:65:69:11:97:78:6d:6f:
         0a:08:4a:e2:1f:63:d7:d0:53:7e:14:69:4d:23:77:7c:db:27:
         89:6e:52:43:d9:9a:0b:66:f2:83:a2:1b:b8:f3:de:ec:16:01:
         f2:e1:ec:86:77:da:c8:84:d8:af:d7:7d:34:dd:b7:62:d1:9b:
         b1:c1:19:88:2c:08:38:59:d0:75:06:81:d6:05:92:99:d5:1f:
         dd:05:ea:e0:6f:c4:b9:44:10:bb:f1:7b:0b:5d:31:1a:d6:a2:
         24:8d:49:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 15:33:05 2024 by rpki-client on console-fra.rpki-client.org