Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35a6c1ad-c1ba-4522-a911-1f8a24c8ae38/0a8c8684-8ddc-30fd-a22c-66c4ab72ca1a.roa
File:                     0a8c8684-8ddc-30fd-a22c-66c4ab72ca1a.roa (raw, json)
Hash identifier:          krZZ+NhXs8AzTtZW2QUIsmvy50fCbGu+ZrqpLgDomg4=
Subject key identifier:   86:42:F8:44:EE:5B:C1:A2:78:83:4F:81:56:54:9B:08:65:8D:B4:85
Certificate issuer:       /CN=35a6c1ad-c1ba-4522-a911-1f8a24c8ae38
Certificate serial:       010D0C9F432858478CB69355A5E972D923B7F060
Authority key identifier: 6B:96:63:42:FE:61:F5:C8:CE:92:57:7F:63:77:AD:57:36:04:F0:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35a6c1ad-c1ba-4522-a911-1f8a24c8ae38.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35a6c1ad-c1ba-4522-a911-1f8a24c8ae38/0a8c8684-8ddc-30fd-a22c-66c4ab72ca1a.roa
Signing time:             Tue 15 Oct 2024 13:00:47 +0000
ROA not before:           Tue 15 Oct 2024 13:00:47 +0000
ROA not after:            Mon 13 Jan 2025 14:00:47 +0000
asID:                     18973
IP address blocks:        2606:1a00::/32 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35a6c1ad-c1ba-4522-a911-1f8a24c8ae38/35a6c1ad-c1ba-4522-a911-1f8a24c8ae38.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35a6c1ad-c1ba-4522-a911-1f8a24c8ae38/35a6c1ad-c1ba-4522-a911-1f8a24c8ae38.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35a6c1ad-c1ba-4522-a911-1f8a24c8ae38.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8c:b6:93:55:a5:e9:72:d9:23:b7:f0:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35a6c1ad-c1ba-4522-a911-1f8a24c8ae38
        Validity
            Not Before: Oct 15 13:00:47 2024 GMT
            Not After : Jan 13 14:00:47 2025 GMT
        Subject: CN=4a9d21f9-7839-4047-9f10-f8ce9720aa0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:27:ce:12:74:77:ae:97:4b:e0:78:7e:68:da:
                    19:34:92:ba:17:96:91:17:25:f1:13:54:f6:64:c9:
                    a9:30:1a:5a:2a:7f:52:a2:cb:d7:83:3a:cc:fc:f6:
                    54:65:1c:1a:1a:2e:9e:17:2d:7a:49:99:28:ea:ff:
                    20:07:de:d7:52:52:24:a8:65:28:e0:3e:ca:a3:07:
                    ee:8e:2b:9d:79:af:e9:03:31:4c:ae:58:64:07:0e:
                    0e:03:af:39:28:92:0e:b9:60:54:ea:c4:ab:70:df:
                    88:39:ae:eb:52:64:b1:e1:13:2f:e9:7f:be:24:47:
                    2e:5b:7b:87:de:dc:46:02:ee:ae:88:dd:ce:09:a8:
                    9c:70:c4:16:fb:22:cd:1e:a8:5d:ac:6b:16:9c:1e:
                    a4:ea:75:97:42:34:51:be:e0:1b:0e:5d:a3:fb:da:
                    86:3f:44:c3:64:05:73:37:fd:cb:c6:13:3e:38:95:
                    38:0f:0f:85:ff:5d:d8:50:39:29:bd:d6:c3:9f:31:
                    5a:36:94:95:0a:af:d8:5f:43:07:b2:c5:91:56:2c:
                    99:54:ae:ac:9a:75:fe:c4:0a:de:7e:c0:36:26:7a:
                    c3:cb:7d:db:44:7a:39:5a:a6:07:59:80:dc:37:ce:
                    4f:09:0e:19:7b:11:8f:ab:9a:86:94:f7:42:1e:72:
                    a3:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:42:F8:44:EE:5B:C1:A2:78:83:4F:81:56:54:9B:08:65:8D:B4:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35a6c1ad-c1ba-4522-a911-1f8a24c8ae38/0a8c8684-8ddc-30fd-a22c-66c4ab72ca1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35a6c1ad-c1ba-4522-a911-1f8a24c8ae38/35a6c1ad-c1ba-4522-a911-1f8a24c8ae38.crl

            X509v3 Authority Key Identifier:
                keyid:6B:96:63:42:FE:61:F5:C8:CE:92:57:7F:63:77:AD:57:36:04:F0:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35a6c1ad-c1ba-4522-a911-1f8a24c8ae38.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:1a00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:c7:44:ca:a8:7c:55:83:e7:9d:74:1f:d4:29:58:32:6c:e3:
         58:92:4f:76:5c:44:c8:c1:60:09:a4:10:3e:62:2a:83:5d:ce:
         63:1c:b2:bf:79:e4:cd:c5:98:b5:1a:c1:5e:41:91:4a:1e:73:
         d1:04:0e:a8:45:83:8f:63:10:ac:c3:1c:c9:0d:88:38:62:75:
         c7:ca:13:d4:10:2c:6c:47:cf:e6:fd:8a:5e:62:dc:64:9e:e5:
         30:db:cb:ac:b1:97:94:3a:03:72:c4:e3:ec:3d:1e:8b:e0:2e:
         0e:37:0c:8e:c7:a9:71:31:0f:1e:18:9b:27:f1:a6:1a:f8:83:
         62:ee:ad:e6:46:94:18:63:9a:c2:7e:c5:9b:71:51:e3:fe:88:
         4c:94:5b:2f:aa:29:27:8d:95:b1:76:eb:14:fe:4e:1f:e8:48:
         40:e5:87:e2:d2:29:5e:9c:f5:bc:4c:8c:fe:39:53:9d:a1:4f:
         c6:22:e3:c1:eb:22:6a:24:63:97:e2:38:2b:fe:65:d4:fd:5b:
         65:42:88:4b:c7:87:f8:3b:97:f1:73:f5:8b:2a:65:34:e0:54:
         74:27:19:93:5a:6f:b6:a3:a8:2d:58:18:66:73:4a:44:47:8f:
         40:a9:06:de:70:3d:6c:4d:2e:2b:71:e2:d9:cf:cd:8a:a7:8a:
         e0:3f:0c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:30:55 2024 by rpki-client on console-fra.rpki-client.org