Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ddea9fab-d471-30c7-a0c9-d702bb07c6ac.roa
File:                     ddea9fab-d471-30c7-a0c9-d702bb07c6ac.roa (raw, json)
Hash identifier:          cNKFrfwVDfi7LtxjsxTujfaCV2qeYLllGE8WQbsp1o0=
Subject key identifier:   61:8E:9D:63:ED:29:EB:10:CD:F0:26:3B:3D:E0:5C:47:05:1D:12:71
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584722A0C849EA9F449309BE9078
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ddea9fab-d471-30c7-a0c9-d702bb07c6ac.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     16787
IP address blocks:        2600:6ce0::/28 maxlen: 28

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a0:c8:49:ea:9f:44:93:09:be:90:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=6ce1a148-7fca-4efa-9f70-1304e086d085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:6b:71:97:69:51:68:11:f4:bc:7b:a1:48:0d:
                    eb:d4:b9:f8:28:2e:59:7b:1a:75:72:6f:f5:19:cd:
                    97:5b:dc:8d:df:5b:70:4c:a4:b8:ef:27:67:03:bd:
                    14:42:73:a0:f7:9d:b7:83:12:e4:0f:76:75:a2:b8:
                    0b:bb:c6:98:eb:1a:f9:e1:27:51:21:0a:bb:05:e3:
                    41:03:7d:e8:c4:1b:14:46:73:9e:2a:69:db:6a:4a:
                    69:3e:25:f0:f6:a3:b6:32:41:7f:be:28:5b:b5:6b:
                    87:4e:2b:f7:18:e1:c7:c0:94:20:c0:af:97:73:44:
                    aa:32:25:0c:4a:1a:df:50:f5:ef:50:3f:08:96:fa:
                    42:93:d4:8d:b9:93:a6:0e:56:53:11:b4:f5:09:1c:
                    63:43:21:33:a3:bc:6d:9f:ba:ff:ca:39:0e:60:78:
                    33:67:ca:2a:09:2a:42:2b:5e:53:0f:18:34:ef:64:
                    26:95:b6:96:e6:fb:cb:ca:25:69:88:03:6f:bb:81:
                    dd:7b:53:62:72:12:f8:54:6e:24:7c:21:98:0a:ea:
                    ff:bf:17:60:f4:3b:c9:27:b1:82:e9:a5:9f:8a:7e:
                    be:91:bb:50:98:19:74:cf:17:d7:7c:ca:dc:5b:78:
                    a5:d5:b5:ae:c5:79:b3:2d:32:3b:e4:92:43:af:8c:
                    26:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:8E:9D:63:ED:29:EB:10:CD:F0:26:3B:3D:E0:5C:47:05:1D:12:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ddea9fab-d471-30c7-a0c9-d702bb07c6ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:6ce0::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:36:e6:cc:4d:e4:ab:40:c3:2f:a3:f4:55:7b:2f:da:71:c0:
         53:1d:e5:c6:1a:56:e9:37:b5:b9:1b:75:85:85:71:8e:59:b5:
         00:cc:ed:ca:b6:b4:e5:2c:16:cf:0f:a2:d6:53:c0:ce:e6:19:
         7c:86:cf:48:1f:b0:55:42:7a:a4:24:71:55:82:29:e3:67:23:
         59:c8:82:ad:4d:6d:bd:a4:51:25:bb:e0:5e:7e:a5:11:ab:d9:
         88:b8:13:e7:d5:5e:91:9d:8b:8c:31:70:87:81:3b:65:11:69:
         b6:a0:6d:6f:cf:b6:66:f9:79:9a:d3:a7:8e:2c:f1:26:69:89:
         37:fb:39:90:14:97:79:48:92:f8:c5:f7:07:e6:d0:1f:f3:1f:
         0b:47:e0:bf:6a:12:13:ed:68:55:25:30:8e:89:e4:fc:fb:56:
         41:e4:2e:d7:13:6c:b7:8b:6a:c2:39:6c:88:a6:ae:4a:74:42:
         0d:2e:e6:3f:c0:0b:21:b8:64:e6:56:ba:97:d6:5e:61:c8:1d:
         cd:2f:56:12:69:57:4a:c1:b7:a8:d8:68:e2:d4:e9:8f:a9:aa:
         ca:c7:6a:0c:fb:d9:8f:56:e7:ee:6c:ca:f6:f7:75:3d:87:1e:
         d0:4d:7b:23:b6:49:30:b1:e4:77:d9:0d:a3:c3:af:0c:44:bd:
         6c:d0:f3:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:51:03 2024 by rpki-client on console-ams.rpki-client.org