Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/b0e58a91-f3f2-3140-9cec-674d13b30583.roa
File:                     b0e58a91-f3f2-3140-9cec-674d13b30583.roa (raw, json)
Hash identifier:          PUfTA1A7uHl/2frnrmU8R/Jps4qzuL2RZ/+SR1Ju3R4=
Subject key identifier:   CD:43:17:BC:D2:35:74:73:28:27:97:7F:04:CB:C2:CC:DB:BA:28:DF
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F43285847CD09FD006EC1CA2E6B033380
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/b0e58a91-f3f2-3140-9cec-674d13b30583.roa
Signing time:             Thu 07 Nov 2024 14:00:39 +0000
ROA not before:           Thu 07 Nov 2024 14:00:39 +0000
ROA not after:            Wed 05 Feb 2025 14:00:39 +0000
asID:                     15169
IP address blocks:        2606:40:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cd:09:fd:00:6e:c1:ca:2e:6b:03:33:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Nov  7 14:00:39 2024 GMT
            Not After : Feb  5 14:00:39 2025 GMT
        Subject: CN=390a1486-b69b-433b-84bb-1fe7b3b14adb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:81:ce:3e:d6:d3:00:26:54:a3:d7:42:95:3e:
                    f3:8f:53:ca:44:43:48:77:80:75:ce:14:92:8c:29:
                    12:f2:e3:c5:f0:1d:e4:cb:74:9b:84:19:c4:d7:a7:
                    1d:ce:b9:ac:37:c3:ea:d1:fc:2f:c9:8a:af:ed:96:
                    72:bd:69:86:ab:4c:05:84:10:7b:2f:1e:87:b0:77:
                    a6:66:37:d5:db:5f:08:e5:1b:4e:9c:37:2f:ef:db:
                    3f:ae:bd:14:8f:82:17:0b:f1:a5:3b:9a:8b:41:e8:
                    af:30:39:bd:f6:7e:f0:44:87:5e:5b:79:5e:40:4a:
                    34:11:c2:85:d9:3f:3a:62:38:c3:5c:ee:c8:c3:6e:
                    ca:5c:56:5c:1c:01:3f:a1:22:7f:0f:09:ef:3e:84:
                    06:b1:59:d1:8a:92:a9:5e:4c:22:59:35:b6:80:40:
                    63:6e:bd:4e:e2:a1:ed:0d:8c:dd:47:d4:cd:85:00:
                    51:df:de:18:6d:a4:91:09:26:0d:45:32:d6:75:85:
                    75:dd:18:62:f2:f4:65:7c:ae:7d:49:ff:54:1c:b9:
                    08:14:96:0a:62:cf:18:82:0b:40:6a:2e:fd:aa:e0:
                    d6:d2:4e:50:75:e6:70:42:3b:b7:91:a1:5a:93:fd:
                    fb:9c:6d:94:bb:94:e3:09:01:88:85:4c:eb:e7:a2:
                    08:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:43:17:BC:D2:35:74:73:28:27:97:7F:04:CB:C2:CC:DB:BA:28:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/b0e58a91-f3f2-3140-9cec-674d13b30583.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:40:4000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:aa:1b:8e:4d:a9:2e:ae:db:ba:f6:1d:ca:3d:46:81:96:d4:
         00:bf:a4:22:97:be:8e:11:45:b3:c0:e2:d1:76:93:ff:64:5b:
         f8:07:57:b5:c3:08:c0:ad:47:0f:b1:6d:fe:b0:b0:57:a5:be:
         7e:ec:29:2c:6d:4e:0a:b6:8f:a9:e8:06:71:87:e1:88:5c:c6:
         28:3b:5f:30:61:1d:33:43:82:80:b9:8a:d1:73:27:58:b2:61:
         63:03:a2:73:e4:c4:09:74:71:ad:58:8c:fd:42:e4:88:cd:7a:
         dc:a0:00:82:7b:e0:f6:f5:2e:49:8d:5b:8b:0a:78:28:84:e7:
         25:9a:7d:ef:ad:58:3e:d2:88:e5:60:6d:d1:1f:85:7f:99:9e:
         a0:6d:ee:bd:20:d6:e2:ef:8f:0d:22:c0:32:72:89:20:4d:5d:
         e1:c2:9a:37:ae:75:e2:e5:e0:06:b9:40:01:cb:aa:0f:a3:7c:
         7f:eb:f6:33:0f:88:97:84:5f:6b:52:48:d1:40:5f:c1:2b:bb:
         7b:5b:66:70:26:a8:59:f2:2d:e4:42:29:37:54:38:d7:5d:89:
         f4:ee:dc:51:1b:39:49:03:ed:08:75:95:fc:cb:83:a4:a2:13:
         16:ca:ed:db:0c:01:00:ea:d2:ed:85:8d:d8:fa:db:0e:26:6b:
         74:0a:07:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:41 2024 by rpki-client on console-fra.rpki-client.org