Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/06117935-952b-3adf-88ac-10a942733ca0.roa
File:                     06117935-952b-3adf-88ac-10a942733ca0.roa (raw, json)
Hash identifier:          QWcNMAxqFBwiRz+6LOZwGOY/y0NIMHvH6CYdMsXTaec=
Subject key identifier:   C9:60:F9:F4:6C:8C:24:1A:00:07:E4:1E:F2:9B:BA:D2:28:98:62:35
Certificate issuer:       /CN=45d9fc7a-f366-485f-a2c8-58c4b470361a
Certificate serial:       010D0C9F43285847CA3F7F1A14513B351A7563C0
Authority key identifier: 96:12:B0:E7:AD:D9:71:F2:E5:1F:50:56:E7:7A:70:25:0D:98:B7:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/06117935-952b-3adf-88ac-10a942733ca0.roa
Signing time:             Wed 06 Nov 2024 14:00:41 +0000
ROA not before:           Wed 06 Nov 2024 14:00:41 +0000
ROA not after:            Tue 04 Feb 2025 14:00:41 +0000
asID:                     36850
IP address blocks:        2606:f640::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/45d9fc7a-f366-485f-a2c8-58c4b470361a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/45d9fc7a-f366-485f-a2c8-58c4b470361a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ca:3f:7f:1a:14:51:3b:35:1a:75:63:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45d9fc7a-f366-485f-a2c8-58c4b470361a
        Validity
            Not Before: Nov  6 14:00:41 2024 GMT
            Not After : Feb  4 14:00:41 2025 GMT
        Subject: CN=b6c0e103-b80e-4f5a-9cfd-c1373c8cb959
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:af:8c:99:b9:1a:ec:ef:1e:60:d0:42:bf:07:
                    06:84:9a:25:4c:d8:d8:f9:83:e4:9a:00:9a:ad:17:
                    ec:aa:99:ce:16:29:b6:f2:3d:af:0c:53:f8:66:94:
                    f8:07:be:e0:5d:51:ef:60:32:71:87:ca:41:27:f8:
                    b6:8a:81:df:9c:51:c1:8d:a4:2b:c9:ea:f9:45:48:
                    26:f3:66:2f:e7:c5:e5:77:ec:65:e2:c5:3d:f9:90:
                    f3:7d:1c:4c:8e:5f:8b:f3:49:11:37:a9:85:4b:88:
                    0c:a5:3f:7f:13:7b:c7:84:aa:78:a2:87:f8:15:a1:
                    ed:d2:29:c2:30:30:ae:0d:d1:af:49:e5:58:f4:37:
                    11:33:3a:ac:c8:44:c7:70:d9:a0:c4:f7:bf:99:c3:
                    b7:77:72:4c:cd:2a:2d:d4:8f:e7:5e:d8:30:8f:02:
                    da:e0:ac:0f:cb:6a:8f:2c:3e:40:1c:80:a7:db:36:
                    39:56:d8:da:92:9b:59:f7:0a:86:f3:3a:b3:61:cb:
                    fa:ab:73:08:bd:90:99:0b:b9:bb:89:7a:b0:94:2d:
                    97:e8:37:f6:2f:cb:5e:5b:19:4e:4a:44:d0:2e:95:
                    04:eb:a5:78:6f:3d:a1:e3:c9:22:a8:68:d4:d8:25:
                    f6:3d:c3:64:e0:c4:d0:05:92:82:b9:0a:07:43:d5:
                    58:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:60:F9:F4:6C:8C:24:1A:00:07:E4:1E:F2:9B:BA:D2:28:98:62:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/06117935-952b-3adf-88ac-10a942733ca0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/45d9fc7a-f366-485f-a2c8-58c4b470361a.crl

            X509v3 Authority Key Identifier:
                keyid:96:12:B0:E7:AD:D9:71:F2:E5:1F:50:56:E7:7A:70:25:0D:98:B7:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f640::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:08:74:0c:ac:0d:09:c9:88:a7:cd:1b:8e:f7:25:10:85:4f:
         a4:3c:96:b7:57:7a:cc:33:8c:23:56:6e:4f:4b:a9:cb:e1:31:
         ab:75:65:40:c6:36:e4:01:c0:43:b1:ae:eb:50:70:71:fa:ef:
         78:ae:4b:41:ef:23:af:e4:3d:e3:1b:64:8d:74:a0:83:cb:fe:
         1e:a8:79:be:22:60:42:94:76:03:82:e3:b8:21:d2:e3:a4:9e:
         9b:da:83:86:26:f4:e4:2b:54:ab:38:b4:d6:ba:ef:cc:09:9e:
         a4:15:2a:cc:82:57:7a:63:f0:b3:97:20:49:68:c9:d2:b1:95:
         0a:cc:ac:f6:f6:15:fa:af:d3:26:48:fc:b1:44:61:83:6c:c9:
         21:9f:b9:ff:75:c8:8b:ac:67:bc:9e:86:77:e7:4d:cb:9a:af:
         99:ab:f2:d5:a8:54:6a:e4:67:3a:f0:3b:b5:d7:c1:38:ea:c7:
         af:86:1c:29:d9:fc:23:1b:94:1e:38:d9:ca:5a:5c:e5:72:09:
         a4:19:a1:d6:e2:36:33:47:3b:1d:2c:62:d5:93:b6:1a:24:62:
         12:0d:76:5e:fd:2b:c7:69:27:3e:30:93:a7:b0:1f:46:87:7d:
         56:e9:98:a0:41:72:4c:47:c4:8b:13:72:4d:f5:30:af:55:b9:
         78:58:48:4d
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEfKP38aFFE7NRp1Y8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDVkOWZjN2EtZjM2Ni00ODVmLWEyYzgtNThjNGI0NzAz
NjFhMB4XDTI0MTEwNjE0MDA0MVoXDTI1MDIwNDE0MDA0MVowLzEtMCsGA1UEAxMk
YjZjMGUxMDMtYjgwZS00ZjVhLTljZmQtYzEzNzNjOGNiOTU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6+Mmbka7O8eYNBCvwcGhJolTNjY+YPkmgCa
rRfsqpnOFim28j2vDFP4ZpT4B77gXVHvYDJxh8pBJ/i2ioHfnFHBjaQryer5RUgm
82Yv58Xld+xl4sU9+ZDzfRxMjl+L80kRN6mFS4gMpT9/E3vHhKp4oof4FaHt0inC
MDCuDdGvSeVY9DcRMzqsyETHcNmgxPe/mcO3d3JMzSot1I/nXtgwjwLa4KwPy2qP
LD5AHICn2zY5VtjakptZ9wqG8zqzYcv6q3MIvZCZC7m7iXqwlC2X6Df2L8teWxlO
SkTQLpUE66V4bz2h48kiqGjU2CX2PcNk4MTQBZKCuQoHQ9VYewIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFMlg+fRsjCQaAAfkHvKbutIomGI1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80NWQ5
ZmM3YS1mMzY2LTQ4NWYtYTJjOC01OGM0YjQ3MDM2MWEvMDYxMTc5MzUtOTUyYi0z
YWRmLTg4YWMtMTBhOTQyNzMzY2EwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDVkOWZjN2EtZjM2Ni00ODVmLWEy
YzgtNThjNGI0NzAzNjFhLzQ1ZDlmYzdhLWYzNjYtNDg1Zi1hMmM4LTU4YzRiNDcw
MzYxYS5jcmwwHwYDVR0jBBgwFoAUlhKw563ZcfLlH1BW53pwJQ2Yt7swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS80NWQ5ZmM3YS1mMzY2LTQ4NWYtYTJjOC01OGM0
YjQ3MDM2MWEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgb2QDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBSCHQMrA0JyYinzRuO9yUQhU+kPJa3V3rMM4wjVm5PS6nL4TGrdWVA
xjbkAcBDsa7rUHBx+u94rktB7yOv5D3jG2SNdKCDy/4eqHm+ImBClHYDguO4IdLj
pJ6b2oOGJvTkK1SrOLTWuu/MCZ6kFSrMgld6Y/CzlyBJaMnSsZUKzKz29hX6r9Mm
SPyxRGGDbMkhn7n/dciLrGe8noZ3503Lmq+Zq/LVqFRq5Gc68Du118E46sevhhwp
2fwjG5QeONnKWlzlcgmkGaHW4jYzRzsdLGLVk7YaJGISDXZe/SvHaSc+MJOnsB9G
h31W6ZigQXJMR8SLE3JN9TCvVbl4WEhN
-----END CERTIFICATE-----
Generated at Sun Nov 24 23:08:34 2024 by rpki-client on console-ams.rpki-client.org