Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dc5ff8c3-fae5-403f-be02-38072ae2ddc6/eff046e7-f8a5-3479-a47b-188dfdf76f32.roa
File:                     eff046e7-f8a5-3479-a47b-188dfdf76f32.roa (raw, json)
Hash identifier:          +5m2VY/5eK4slfxeMkRzcHgOKWixyvwmizE5PQCaECs=
Subject key identifier:   6F:2B:C2:56:BD:69:0A:B1:9B:C0:9A:20:26:7C:02:45:F8:C6:97:C7
Certificate issuer:       /CN=dc5ff8c3-fae5-403f-be02-38072ae2ddc6
Certificate serial:       010D0C9F432858474F4B66EBC2102BB856451380
Authority key identifier: A3:EC:A4:62:68:89:8D:A9:13:14:E8:A6:5D:A4:F9:D8:02:6F:75:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dc5ff8c3-fae5-403f-be02-38072ae2ddc6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dc5ff8c3-fae5-403f-be02-38072ae2ddc6/eff046e7-f8a5-3479-a47b-188dfdf76f32.roa
Signing time:             Mon 23 Sep 2024 13:00:40 +0000
ROA not before:           Mon 23 Sep 2024 13:00:40 +0000
ROA not after:            Sun 22 Dec 2024 14:00:40 +0000
asID:                     399091
IP address blocks:        2606:1340::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dc5ff8c3-fae5-403f-be02-38072ae2ddc6/dc5ff8c3-fae5-403f-be02-38072ae2ddc6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dc5ff8c3-fae5-403f-be02-38072ae2ddc6/dc5ff8c3-fae5-403f-be02-38072ae2ddc6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dc5ff8c3-fae5-403f-be02-38072ae2ddc6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4f:4b:66:eb:c2:10:2b:b8:56:45:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc5ff8c3-fae5-403f-be02-38072ae2ddc6
        Validity
            Not Before: Sep 23 13:00:40 2024 GMT
            Not After : Dec 22 14:00:40 2024 GMT
        Subject: CN=8d713d0e-3fdb-412a-81a3-c3e2bef56035
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:1b:5d:8e:18:82:fa:21:87:33:2d:96:f3:6e:
                    e3:44:a6:20:8f:bc:9f:98:40:81:5e:db:e6:d4:09:
                    47:2d:c8:93:41:21:95:35:45:46:f4:64:2b:c4:f7:
                    b8:0c:03:45:17:ba:41:bc:e3:34:73:08:9b:92:c6:
                    46:62:ad:57:fc:ee:d4:9d:2d:f6:63:61:a4:30:f9:
                    cd:4d:f3:05:c9:84:64:e6:58:00:85:4f:b2:1e:2f:
                    67:24:85:12:06:5e:9f:03:cc:79:0c:83:a8:9b:62:
                    87:62:38:74:d8:96:35:2a:da:6d:c2:cf:8c:fd:85:
                    d0:c4:ce:08:33:f0:f3:e1:b0:12:b6:70:f4:ca:59:
                    25:e8:65:4c:6c:ca:45:1f:f1:36:b9:17:e2:e3:9d:
                    e7:6f:f7:e3:f7:99:0f:00:17:c3:4f:d6:08:90:df:
                    fb:d3:a9:59:3e:bf:24:4e:3a:80:91:46:5b:8d:aa:
                    ad:91:ea:cc:cc:cc:f3:6b:5a:69:43:80:98:75:ad:
                    55:18:bc:52:c0:56:69:73:48:73:82:ee:5f:dc:54:
                    5c:db:5b:a1:ea:41:c4:bc:2b:a8:50:b0:98:40:cc:
                    c8:9f:45:ed:4c:20:0c:2f:98:08:04:90:d5:d8:24:
                    5d:92:3b:b3:cd:60:ef:8f:75:76:34:df:ce:2a:54:
                    72:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:2B:C2:56:BD:69:0A:B1:9B:C0:9A:20:26:7C:02:45:F8:C6:97:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dc5ff8c3-fae5-403f-be02-38072ae2ddc6/eff046e7-f8a5-3479-a47b-188dfdf76f32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dc5ff8c3-fae5-403f-be02-38072ae2ddc6/dc5ff8c3-fae5-403f-be02-38072ae2ddc6.crl

            X509v3 Authority Key Identifier:
                keyid:A3:EC:A4:62:68:89:8D:A9:13:14:E8:A6:5D:A4:F9:D8:02:6F:75:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dc5ff8c3-fae5-403f-be02-38072ae2ddc6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:1340::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:20:c1:71:6b:79:29:ef:d3:27:af:cd:0b:84:e6:f6:0b:bb:
         ef:c5:8a:24:94:bb:c8:59:c7:76:f3:f1:bc:53:2e:63:be:9a:
         4a:0b:f8:2e:c9:0f:8c:1e:4e:d2:ab:05:b3:5e:88:da:51:58:
         14:a7:cf:67:c9:b2:2c:de:0b:9d:60:3e:78:8a:db:f1:4c:5d:
         b0:10:e9:92:8d:cf:2c:2e:74:b7:46:5d:4d:65:66:a8:82:6d:
         34:f7:75:77:3d:84:77:77:81:a4:bd:80:32:5c:ab:d5:c4:51:
         ca:e0:64:84:9b:fb:21:78:a7:66:d0:b4:d2:d7:11:96:75:1b:
         90:59:c3:61:95:19:1c:e2:27:61:20:d0:bc:90:b9:44:2b:37:
         fd:65:6d:9a:da:8c:68:f2:90:42:61:7b:9b:52:93:7b:ec:c4:
         a1:0b:53:ad:8d:77:4a:28:e1:86:3f:45:ee:2d:7c:34:7f:61:
         87:a6:ce:df:68:87:99:b8:13:67:a6:0e:12:13:c0:09:9f:ad:
         98:d4:6a:eb:97:08:b3:97:dd:01:2b:4f:27:3d:8c:6e:f8:17:
         5e:08:75:ff:89:8b:86:b6:fe:fc:7a:4e:9d:f0:44:b2:a7:6b:
         f9:1d:31:e5:41:8c:50:ab:93:1b:93:f4:e6:64:65:ba:35:34:
         f3:14:d7:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:49:07 2024 by rpki-client on console-ams.rpki-client.org