Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/e6503301-3b1c-32d4-9763-95a27fdd924e.roa
File:                     e6503301-3b1c-32d4-9763-95a27fdd924e.roa (raw, json)
Hash identifier:          pmSf3orZejWvOn1MjvYkru2hl+DLWf2RDtm0BClSG3Y=
Subject key identifier:   2D:03:06:72:60:9F:A4:E9:4E:18:AF:D1:C8:CA:A7:A5:94:E9:00:7B
Certificate issuer:       /CN=39695c91-50ed-402c-b896-6056bbde88df
Certificate serial:       010D0C9F43285845A9631160BE4F78ECAE99E380
Authority key identifier: FA:F5:3A:11:1E:00:5D:BC:9C:61:67:B1:97:6B:D5:0D:E9:1D:81:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/e6503301-3b1c-32d4-9763-95a27fdd924e.roa
Signing time:             Thu 25 Apr 2024 09:57:18 +0000
ROA not before:           Thu 25 Apr 2024 09:57:18 +0000
ROA not after:            Wed 24 Jul 2024 09:57:18 +0000
asID:                     14445
IP address blocks:        2606:18c0:4115::/48 maxlen: 48
                          2606:18c0:758e::/48 maxlen: 48
                          2606:18c0:66e2::/48 maxlen: 48
                          2606:18c0:6f89::/48 maxlen: 48
                          2606:18c0:63c6::/48 maxlen: 48
                          2606:18c0:7235::/48 maxlen: 48
                          2606:18c0:37f3::/48 maxlen: 48
                          2606:18c0:d15::/48 maxlen: 48
                          2606:18c0:18c3::/48 maxlen: 48
                          2606:18c0:1a62::/48 maxlen: 48
                          2606:18c0:7ee::/48 maxlen: 48
                          2606:18c0:2b9::/48 maxlen: 48
                          2606:18c0:3ed7::/48 maxlen: 48
                          2606:18c0:38bd::/48 maxlen: 48
                          2606:18c0:3954::/48 maxlen: 48
                          2606:18c0:a922::/48 maxlen: 48
                          2606:18c0:bf73::/48 maxlen: 48
                          2606:18c0:dc2b::/48 maxlen: 48
                          2606:18c0:dfa4::/48 maxlen: 48
                          2606:18c0:ff21::/48 maxlen: 48
                          2606:18c0:e217::/48 maxlen: 48
                          2606:18c0:ced9::/48 maxlen: 48
                          2606:18c0:5b7c::/48 maxlen: 48
                          2606:18c0:48a4::/48 maxlen: 48
                          2606:18c0:4700::/48 maxlen: 48
                          2606:18c0:4644::/48 maxlen: 48
                          2606:18c0:30e2::/48 maxlen: 48
                          2606:18c0:362f::/48 maxlen: 48
                          2606:18c0:2627::/48 maxlen: 48
                          2606:18c0:2363::/48 maxlen: 48
                          2606:18c0:5d1c::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/39695c91-50ed-402c-b896-6056bbde88df.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/39695c91-50ed-402c-b896-6056bbde88df.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a9:63:11:60:be:4f:78:ec:ae:99:e3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39695c91-50ed-402c-b896-6056bbde88df
        Validity
            Not Before: Apr 25 09:57:18 2024 GMT
            Not After : Jul 24 09:57:18 2024 GMT
        Subject: CN=3345ad20-6c6c-42b4-a014-05d7bca2fe36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:78:6f:cf:5c:e5:16:68:5c:3d:ef:56:20:29:
                    50:47:c9:ea:3c:7b:39:4e:13:31:f1:80:10:5f:65:
                    a1:69:6f:92:c8:a0:1c:05:e2:dc:ac:46:03:cc:19:
                    54:ea:01:47:f6:4a:6e:54:91:77:e1:f8:27:fb:93:
                    d3:16:fb:e2:7c:89:da:7b:84:29:f6:3c:40:da:de:
                    da:a8:6c:ff:67:95:0b:df:96:1a:d7:45:21:d5:3f:
                    f0:7e:91:82:bd:55:f6:64:63:a1:2a:6b:59:ab:e0:
                    cb:fe:c3:c3:05:87:95:c9:6a:88:6f:14:c4:db:c4:
                    77:74:1e:fa:9a:f5:48:3f:6f:d9:9f:f2:bd:a1:89:
                    c0:d3:ca:4b:a8:6a:11:46:22:8e:a2:85:b8:89:96:
                    4d:ee:c1:51:96:eb:ed:6f:fe:29:f3:4c:44:6c:c3:
                    3b:40:18:18:94:51:7b:ae:4f:8a:df:99:fb:d2:e2:
                    ef:74:6f:c8:f6:2c:db:c3:bc:11:b6:2a:60:12:70:
                    a4:ad:74:17:31:60:a1:4a:e9:8f:23:ee:2a:c5:0f:
                    14:62:34:1a:5c:dd:26:9f:58:49:10:aa:bb:9b:78:
                    61:7f:e7:76:15:72:37:73:b4:4a:a4:04:da:5b:22:
                    a7:75:2c:64:74:34:74:13:94:5f:42:fe:18:dc:93:
                    b9:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:03:06:72:60:9F:A4:E9:4E:18:AF:D1:C8:CA:A7:A5:94:E9:00:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/e6503301-3b1c-32d4-9763-95a27fdd924e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/39695c91-50ed-402c-b896-6056bbde88df.crl

            X509v3 Authority Key Identifier:
                keyid:FA:F5:3A:11:1E:00:5D:BC:9C:61:67:B1:97:6B:D5:0D:E9:1D:81:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:18c0:2b9::/48
                  2606:18c0:7ee::/48
                  2606:18c0:d15::/48
                  2606:18c0:18c3::/48
                  2606:18c0:1a62::/48
                  2606:18c0:2363::/48
                  2606:18c0:2627::/48
                  2606:18c0:30e2::/48
                  2606:18c0:362f::/48
                  2606:18c0:37f3::/48
                  2606:18c0:38bd::/48
                  2606:18c0:3954::/48
                  2606:18c0:3ed7::/48
                  2606:18c0:4115::/48
                  2606:18c0:4644::/48
                  2606:18c0:4700::/48
                  2606:18c0:48a4::/48
                  2606:18c0:5b7c::/48
                  2606:18c0:5d1c::/48
                  2606:18c0:63c6::/48
                  2606:18c0:66e2::/48
                  2606:18c0:6f89::/48
                  2606:18c0:7235::/48
                  2606:18c0:758e::/48
                  2606:18c0:a922::/48
                  2606:18c0:bf73::/48
                  2606:18c0:ced9::/48
                  2606:18c0:dc2b::/48
                  2606:18c0:dfa4::/48
                  2606:18c0:e217::/48
                  2606:18c0:ff21::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:8e:36:af:e0:04:57:23:99:55:0d:a5:26:8f:56:26:5b:5a:
         5b:3e:6b:d2:99:e2:43:dc:48:f6:61:a2:3d:bb:23:ba:99:6a:
         a5:c8:6f:64:25:c8:fe:00:8d:8d:4e:9c:d5:31:3b:6a:9b:11:
         c1:bf:45:2f:fb:9c:6a:e7:d2:1f:92:6a:c3:cf:d0:69:84:1e:
         65:3e:67:a7:1e:3b:02:64:f7:17:be:b1:78:18:0e:84:04:19:
         64:ad:d1:b1:3f:40:a3:ef:83:02:d3:3d:73:a6:ce:b1:22:b5:
         4a:61:5c:21:26:15:c8:6e:d8:1d:41:00:6c:fa:5e:bd:2e:67:
         e7:5a:ce:4a:a4:f4:74:1c:63:6c:dc:ca:c5:5a:8e:05:07:f3:
         92:64:f4:c7:23:44:29:3b:a5:54:f2:73:10:e2:bb:0d:4f:56:
         49:84:89:95:f9:8e:2c:ab:a4:c8:9e:b7:d5:01:67:63:9d:95:
         56:71:22:f5:be:08:2b:0b:bc:20:af:b1:d3:2e:fd:67:c4:36:
         9f:66:45:0a:20:6c:20:33:af:b3:a9:bf:e9:e8:0e:e8:03:0a:
         c3:93:29:54:cc:eb:c0:89:87:61:79:f9:dd:2f:15:5f:2d:b0:
         92:f4:7c:2d:d5:07:77:34:8c:e1:c6:0c:73:ad:73:8a:d0:6a:
         7d:04:0c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 15:36:41 2024 by rpki-client on console-fra.rpki-client.org