Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/e6503301-3b1c-32d4-9763-95a27fdd924e.roa
File:                     e6503301-3b1c-32d4-9763-95a27fdd924e.roa (raw, json)
Hash identifier:          jkfkNnJ8rVpUXNbttin/nl+xwtYKxlSkgEhM3pAaJew=
Subject key identifier:   4B:7E:B1:56:D0:42:71:9A:57:52:76:2F:13:F5:3C:36:A0:55:F7:D2
Certificate issuer:       /CN=39695c91-50ed-402c-b896-6056bbde88df
Certificate serial:       010D0C9F43285847686B8F4AC604E0B3EAFDDF34
Authority key identifier: FA:F5:3A:11:1E:00:5D:BC:9C:61:67:B1:97:6B:D5:0D:E9:1D:81:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/e6503301-3b1c-32d4-9763-95a27fdd924e.roa
Signing time:             Wed 02 Oct 2024 13:00:42 +0000
ROA not before:           Wed 02 Oct 2024 13:00:42 +0000
ROA not after:            Tue 31 Dec 2024 14:00:42 +0000
asID:                     14445
IP address blocks:        2606:18c0:2b9::/48 maxlen: 48
                          2606:18c0:7ee::/48 maxlen: 48
                          2606:18c0:d15::/48 maxlen: 48
                          2606:18c0:18c3::/48 maxlen: 48
                          2606:18c0:1a62::/48 maxlen: 48
                          2606:18c0:2363::/48 maxlen: 48
                          2606:18c0:2627::/48 maxlen: 48
                          2606:18c0:30e2::/48 maxlen: 48
                          2606:18c0:362f::/48 maxlen: 48
                          2606:18c0:37f3::/48 maxlen: 48
                          2606:18c0:38bd::/48 maxlen: 48
                          2606:18c0:3954::/48 maxlen: 48
                          2606:18c0:3ed7::/48 maxlen: 48
                          2606:18c0:4115::/48 maxlen: 48
                          2606:18c0:4644::/48 maxlen: 48
                          2606:18c0:4700::/48 maxlen: 48
                          2606:18c0:48a4::/48 maxlen: 48
                          2606:18c0:5b7c::/48 maxlen: 48
                          2606:18c0:5d1c::/48 maxlen: 48
                          2606:18c0:63c6::/48 maxlen: 48
                          2606:18c0:66e2::/48 maxlen: 48
                          2606:18c0:6f89::/48 maxlen: 48
                          2606:18c0:7235::/48 maxlen: 48
                          2606:18c0:758e::/48 maxlen: 48
                          2606:18c0:a922::/48 maxlen: 48
                          2606:18c0:bf73::/48 maxlen: 48
                          2606:18c0:ced9::/48 maxlen: 48
                          2606:18c0:dc2b::/48 maxlen: 48
                          2606:18c0:dfa4::/48 maxlen: 48
                          2606:18c0:e217::/48 maxlen: 48
                          2606:18c0:ff21::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/39695c91-50ed-402c-b896-6056bbde88df.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/39695c91-50ed-402c-b896-6056bbde88df.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:68:6b:8f:4a:c6:04:e0:b3:ea:fd:df:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39695c91-50ed-402c-b896-6056bbde88df
        Validity
            Not Before: Oct  2 13:00:42 2024 GMT
            Not After : Dec 31 14:00:42 2024 GMT
        Subject: CN=7a803f3f-2976-4dcf-b591-d9f74dfd793f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:7e:39:d7:d0:63:7a:24:51:3e:2e:fe:1c:88:
                    94:04:95:52:48:4d:9f:fd:a5:af:8a:32:36:13:82:
                    1b:21:fd:1e:bc:5d:e2:ac:ed:59:7c:20:4e:e9:88:
                    7d:97:d7:bd:73:32:e1:3e:47:9f:6a:79:80:68:24:
                    0f:99:2e:94:7b:09:a2:da:6c:a4:3a:b4:a4:ba:c1:
                    7e:ba:4c:d3:bd:25:74:d9:53:6d:33:25:a7:bf:ec:
                    aa:76:13:86:9d:75:87:59:fd:3a:2f:03:6a:db:ff:
                    8d:1c:4d:34:3c:62:8b:40:e6:38:b2:a4:16:60:72:
                    af:1b:57:c1:e6:01:56:df:ef:2e:b5:41:df:37:d0:
                    4a:23:32:e2:ee:50:d0:4f:de:48:3c:b4:90:21:22:
                    71:2e:31:ea:e0:31:a6:ee:2e:c6:92:76:73:70:b2:
                    2e:4b:6e:94:24:5a:60:57:0b:50:3b:81:56:97:a6:
                    f5:d4:9b:27:80:ac:b7:82:0f:7e:c4:1b:8e:4e:49:
                    f9:a1:96:17:69:e3:01:78:d0:00:90:0a:7f:17:89:
                    68:42:2b:9a:dc:6e:7e:1b:4d:6f:78:e1:ab:d7:98:
                    eb:e1:cd:32:41:2a:7c:47:3a:31:93:c9:cd:23:ec:
                    f4:69:49:77:b3:41:b6:7c:92:d4:50:83:81:5b:07:
                    d6:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:7E:B1:56:D0:42:71:9A:57:52:76:2F:13:F5:3C:36:A0:55:F7:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/e6503301-3b1c-32d4-9763-95a27fdd924e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/39695c91-50ed-402c-b896-6056bbde88df.crl

            X509v3 Authority Key Identifier:
                keyid:FA:F5:3A:11:1E:00:5D:BC:9C:61:67:B1:97:6B:D5:0D:E9:1D:81:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:18c0:2b9::/48
                  2606:18c0:7ee::/48
                  2606:18c0:d15::/48
                  2606:18c0:18c3::/48
                  2606:18c0:1a62::/48
                  2606:18c0:2363::/48
                  2606:18c0:2627::/48
                  2606:18c0:30e2::/48
                  2606:18c0:362f::/48
                  2606:18c0:37f3::/48
                  2606:18c0:38bd::/48
                  2606:18c0:3954::/48
                  2606:18c0:3ed7::/48
                  2606:18c0:4115::/48
                  2606:18c0:4644::/48
                  2606:18c0:4700::/48
                  2606:18c0:48a4::/48
                  2606:18c0:5b7c::/48
                  2606:18c0:5d1c::/48
                  2606:18c0:63c6::/48
                  2606:18c0:66e2::/48
                  2606:18c0:6f89::/48
                  2606:18c0:7235::/48
                  2606:18c0:758e::/48
                  2606:18c0:a922::/48
                  2606:18c0:bf73::/48
                  2606:18c0:ced9::/48
                  2606:18c0:dc2b::/48
                  2606:18c0:dfa4::/48
                  2606:18c0:e217::/48
                  2606:18c0:ff21::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:c6:f8:58:49:f7:a0:bd:2e:ad:bf:56:f6:81:77:b7:3b:aa:
         9e:d5:e4:60:4a:23:4a:95:ac:3b:27:91:33:f6:a3:ec:c7:eb:
         ba:f4:54:c7:f6:2a:ce:2f:e1:3c:eb:22:53:11:1d:14:00:48:
         35:45:76:7e:a0:7e:4f:28:cf:31:cc:cf:8e:1a:fb:e0:22:2a:
         8d:7a:8a:03:31:9b:c1:84:7b:9f:9c:a2:59:72:40:b9:55:91:
         4a:d5:5e:75:15:46:f9:98:67:36:26:78:b1:db:54:b3:80:61:
         21:91:bf:bf:df:65:91:68:ff:38:65:2b:10:28:4f:2f:dd:f1:
         ec:d1:53:f9:f3:4e:de:cb:f4:56:30:f1:66:b4:3a:a1:2a:4b:
         37:61:22:b7:32:29:b0:38:44:e0:c8:f6:b7:74:f3:5f:c0:bd:
         06:0d:7c:1a:b5:76:cc:41:fe:c4:fe:c0:ac:71:e5:22:09:ff:
         86:5f:42:69:5b:47:5e:a5:45:1a:26:e5:a5:95:53:a3:fd:c0:
         a2:94:ac:2d:63:e3:30:60:64:fb:39:68:d4:aa:8a:47:08:aa:
         bf:67:4b:fb:74:fd:c6:5c:66:60:ac:1e:34:da:56:f8:1c:b8:
         18:8b:fa:ef:c4:3b:8d:62:62:f9:03:00:92:fa:82:84:ee:86:
         9d:d6:72:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:28 2024 by rpki-client on console-ams.rpki-client.org