Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/a3b36418-37a2-34a8-b072-a15f8f21810a.roa
File:                     a3b36418-37a2-34a8-b072-a15f8f21810a.roa (raw, json)
Hash identifier:          /PPzmc71MTaJNvcwoIF2zC/mQOqrSQQJRS5lgXptoVg=
Subject key identifier:   CF:E6:F6:D4:1C:B9:D6:AE:6F:33:BC:61:B2:9E:32:AC:F9:A4:53:11
Certificate issuer:       /CN=eb5e041e-98b3-4dff-827b-03e1387393cf
Certificate serial:       010D0C9F432858474F4B71047ABCCA1F461A32C0
Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/a3b36418-37a2-34a8-b072-a15f8f21810a.roa
Signing time:             Mon 23 Sep 2024 13:00:40 +0000
ROA not before:           Mon 23 Sep 2024 13:00:40 +0000
ROA not after:            Sun 22 Dec 2024 14:00:40 +0000
asID:                     12189
IP address blocks:        2607:6000:900::/40 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4f:4b:71:04:7a:bc:ca:1f:46:1a:32:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf
        Validity
            Not Before: Sep 23 13:00:40 2024 GMT
            Not After : Dec 22 14:00:40 2024 GMT
        Subject: CN=6ea24294-196f-4061-81b3-3ed86f169a86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:a2:f3:eb:47:61:2b:40:d7:ee:77:d4:99:fb:
                    00:8d:c8:3a:17:bc:48:95:7e:4e:18:47:65:12:8e:
                    0d:aa:7c:c5:65:54:34:ec:5d:12:3c:ba:c4:a6:8b:
                    67:0a:78:19:29:e3:31:ad:65:4f:fa:d9:e9:e2:ba:
                    b0:b9:be:27:9f:ff:b4:3a:85:7c:32:44:f1:7e:29:
                    30:f8:0a:e8:79:51:ed:54:59:19:b5:79:0c:7c:7c:
                    2c:6a:7a:90:33:ab:16:cd:c9:a4:02:71:76:58:81:
                    7f:86:7c:6b:b0:1c:c2:3e:dd:57:31:e3:1a:dd:cf:
                    3b:de:db:2b:63:f9:e4:5a:84:5d:25:36:7f:c7:25:
                    85:3f:06:48:7e:6b:6f:fb:81:fb:fa:ce:c6:3d:d4:
                    c3:00:34:01:67:c8:5c:8e:26:ac:45:1e:73:62:13:
                    9e:94:25:60:e2:6d:b2:4e:76:a7:f5:e3:80:68:8a:
                    22:70:b9:51:47:ec:39:c8:89:90:55:7e:29:ea:61:
                    3f:dc:ef:28:7e:dd:ec:6b:8d:72:42:69:72:2c:fb:
                    79:bf:81:f9:60:06:62:88:4e:63:e4:38:28:e1:5f:
                    59:11:57:39:05:01:4e:b4:f5:a5:f6:48:7d:79:d4:
                    ec:d1:71:2b:9f:8e:8e:a0:ae:fc:e2:a9:b4:08:1b:
                    9c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:E6:F6:D4:1C:B9:D6:AE:6F:33:BC:61:B2:9E:32:AC:F9:A4:53:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/a3b36418-37a2-34a8-b072-a15f8f21810a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl

            X509v3 Authority Key Identifier:
                keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6000:900::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:70:ff:64:00:0a:1b:ef:33:22:eb:85:38:5f:d5:b2:27:10:
         13:eb:d3:eb:22:10:ce:ca:3e:82:3f:aa:61:2b:48:dd:6f:76:
         fe:7e:a7:1f:d0:93:28:13:08:fa:40:88:c9:cd:38:fc:ee:b4:
         4e:89:06:4c:26:f1:98:f2:51:42:e7:2c:dd:db:56:0e:7d:26:
         23:c4:12:08:da:c4:b1:16:7e:5e:1f:18:4e:23:4d:5b:00:62:
         f6:a3:05:d7:e3:2a:7c:08:7f:5f:d5:72:6e:6a:86:01:eb:70:
         ea:68:31:c8:7c:1a:8a:af:77:5a:8f:21:3f:20:25:99:c9:8b:
         7f:36:83:1d:c9:14:d1:d6:38:ad:f9:82:f4:4a:3f:5c:a1:12:
         d1:85:bb:29:ed:8c:a6:0b:11:b6:ed:0e:d6:1f:8c:48:80:b2:
         c9:e6:c9:c5:f3:a5:a5:10:57:69:c0:92:37:af:82:29:aa:cb:
         6f:b5:b8:61:9d:3b:96:ec:ab:d9:01:23:2c:3a:ec:5a:40:7f:
         f2:d9:32:3b:00:cb:fd:b3:8c:81:2a:a9:1e:ce:4d:cb:58:78:
         db:c4:25:09:b4:34:04:85:f9:0a:1f:02:73:89:8f:2b:79:90:
         16:40:48:10:eb:75:a8:9b:9a:c9:1e:a2:16:62:cc:3c:c4:e2:
         a4:a9:8a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:55 2024 by rpki-client on console-fra.rpki-client.org