Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/eb897800-3173-3ad7-a4b0-e87851b064b0.roa
File:                     eb897800-3173-3ad7-a4b0-e87851b064b0.roa (raw, json)
Hash identifier:          aAXJvgVf9kEsIb6WUpLQsfKfHQgXVh3BjjBFvrgp80I=
Subject key identifier:   62:9C:96:EC:6B:0B:63:00:20:E9:00:18:61:70:53:51:F2:CD:2C:2F
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858473A5B2DEFF126A8AF079285DC
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/eb897800-3173-3ad7-a4b0-e87851b064b0.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     63949
IP address blocks:        2600:3c10::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:2d:ef:f1:26:a8:af:07:92:85:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=899f19d0-7cb4-4f1f-a039-41179738f495
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:65:91:7e:4a:ba:3a:2a:df:42:01:fe:1f:78:
                    61:5a:44:a4:19:da:56:4d:98:05:51:63:17:7f:68:
                    62:4e:03:ed:0a:54:a4:2e:fb:2f:76:e7:de:d6:c9:
                    f2:f2:97:4a:b0:e6:85:2a:70:de:5a:7f:cb:06:94:
                    ab:c7:30:f1:cb:6b:75:e1:bd:05:f2:d0:cd:ab:06:
                    d1:10:b0:6b:f3:19:17:1d:0f:65:37:e5:99:f5:05:
                    84:9a:55:7e:4f:b0:89:12:c3:13:bb:fd:ae:20:1a:
                    65:fa:d5:05:11:0d:6f:0c:0d:8a:94:0c:9c:1c:45:
                    3f:b2:88:6c:6d:be:a8:ee:e7:45:c2:c2:f9:ae:7e:
                    0c:82:1f:d3:0e:e4:4d:ca:05:c8:15:93:cf:3f:62:
                    2e:f2:5f:d4:4a:73:6d:0d:34:5e:41:8e:30:c1:9c:
                    06:92:d0:a8:94:3e:5f:b4:28:ed:12:67:1e:a9:98:
                    68:71:b2:d6:d5:d5:1b:9d:10:f0:79:56:30:bc:bb:
                    23:cd:2e:dd:39:41:bf:ec:aa:58:9d:c3:39:e7:78:
                    5a:66:79:2f:b0:a4:8f:cb:4c:5e:2f:32:b0:91:08:
                    70:a4:d1:2d:7d:8c:c9:05:62:9a:54:81:5d:f9:86:
                    be:64:59:9b:f8:46:4c:c8:13:87:e4:61:92:85:83:
                    5b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:9C:96:EC:6B:0B:63:00:20:E9:00:18:61:70:53:51:F2:CD:2C:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/eb897800-3173-3ad7-a4b0-e87851b064b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:3c10::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:2e:e2:f3:61:90:c5:2f:4b:da:03:4d:01:4e:ef:85:1d:aa:
         4d:fc:6b:0a:25:0c:19:5f:9d:a1:07:f8:53:6a:04:8b:18:b4:
         ef:26:c1:f7:04:9a:a9:c0:c0:57:5c:2c:e3:6e:a4:1e:af:ec:
         ca:8e:1e:2e:6f:d9:ed:9c:40:df:5a:81:c9:83:31:51:a2:60:
         34:2b:16:cb:26:6b:94:43:fa:3e:66:b6:a4:14:eb:a8:30:c5:
         97:22:6a:7a:5b:1c:9d:5b:0c:7e:35:18:3d:ab:97:26:b5:01:
         fd:c8:1b:4b:a4:4d:e5:dc:15:1c:28:be:e7:e2:cf:6b:2a:14:
         15:ad:11:1a:35:11:b3:ac:21:f3:a6:b0:8a:97:2f:06:88:94:
         f2:93:b0:99:40:5f:a7:86:cb:81:9c:63:c3:dd:9f:15:f0:67:
         00:1b:30:85:b7:df:55:70:d4:6b:4f:f3:8e:72:b9:81:75:87:
         65:17:3c:27:26:0b:92:ca:1a:05:72:70:38:61:a2:f2:de:b4:
         7e:19:bf:17:db:48:ac:6e:d9:48:8b:74:21:0f:7a:af:ff:e7:
         93:6d:ad:bb:19:b0:d8:ab:fd:18:2f:37:b1:b4:02:78:fa:2c:
         c3:81:50:73:c3:91:20:27:7c:40:88:4b:f0:1e:f0:b9:a7:75:
         e1:03:6d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:33:03 2024 by rpki-client on console-ams.rpki-client.org