Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/fa021ffa-4c36-348d-9b6c-00c6cbdba552.roa
File:                     fa021ffa-4c36-348d-9b6c-00c6cbdba552.roa (raw, json)
Hash identifier:          nzR07IUhHaU4eTm7zUwUG+6yUi1Wt28MHtz6/JlBeFQ=
Subject key identifier:   89:D9:04:51:D4:5F:5B:2F:68:42:3A:30:79:8E:04:68:7F:82:54:44
Certificate issuer:       /CN=e286fd28-0939-48b9-86ba-cbe791497d15
Certificate serial:       010D0C9F43285845BD48D3AFFBEAB9E7922EE500
Authority key identifier: 1A:A4:9C:18:83:7A:8A:F6:9B:C9:28:DF:33:44:30:F2:DD:71:0E:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/fa021ffa-4c36-348d-9b6c-00c6cbdba552.roa
Signing time:             Thu 02 May 2024 13:00:34 +0000
ROA not before:           Thu 02 May 2024 13:00:34 +0000
ROA not after:            Wed 31 Jul 2024 13:00:34 +0000
asID:                     16509
IP address blocks:        2606:9c40::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/e286fd28-0939-48b9-86ba-cbe791497d15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/e286fd28-0939-48b9-86ba-cbe791497d15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:bd:48:d3:af:fb:ea:b9:e7:92:2e:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e286fd28-0939-48b9-86ba-cbe791497d15
        Validity
            Not Before: May  2 13:00:34 2024 GMT
            Not After : Jul 31 13:00:34 2024 GMT
        Subject: CN=21ed9e91-7b35-4c8b-9465-c5fa694548a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:c4:14:86:35:36:57:19:c6:db:34:76:c0:99:
                    e1:f5:12:64:f4:33:b4:1f:fd:e9:ce:61:18:02:31:
                    46:68:d0:ad:13:2d:29:26:ff:0f:ab:dc:6a:40:a5:
                    9d:88:56:fc:0b:82:e9:fa:d3:ac:f2:97:0a:f8:46:
                    2f:6a:3e:b6:ed:17:22:ac:4c:84:a3:82:23:eb:f9:
                    69:af:03:bd:75:ef:68:09:7f:ab:88:30:86:ee:56:
                    b3:99:c7:a5:76:42:ad:8a:7f:f0:2e:de:0f:40:6a:
                    0b:e2:a7:d5:bc:5f:66:85:92:4f:59:14:ed:db:e1:
                    8c:93:c4:8f:3d:cd:07:30:ce:a0:c0:ed:b3:c4:fc:
                    b6:79:49:ee:2e:b3:7f:50:b6:8e:c3:4f:65:dd:2e:
                    e4:aa:40:c5:ca:7a:13:15:49:0f:86:86:77:a7:08:
                    91:09:8d:77:9f:a8:8a:02:ca:4e:2c:17:fc:7b:f4:
                    a7:cd:af:29:4d:eb:ac:94:83:06:76:cf:fa:ed:63:
                    cf:78:50:5d:5d:6e:33:06:97:12:9c:33:63:e5:69:
                    1d:bb:8c:82:83:a1:65:c6:45:55:7e:b4:48:87:e6:
                    72:a4:20:ce:27:9a:c4:10:2a:20:50:43:27:27:78:
                    a9:90:d0:2f:8d:12:58:e3:2c:a4:6d:43:04:0b:49:
                    40:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:D9:04:51:D4:5F:5B:2F:68:42:3A:30:79:8E:04:68:7F:82:54:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/fa021ffa-4c36-348d-9b6c-00c6cbdba552.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/e286fd28-0939-48b9-86ba-cbe791497d15.crl

            X509v3 Authority Key Identifier:
                keyid:1A:A4:9C:18:83:7A:8A:F6:9B:C9:28:DF:33:44:30:F2:DD:71:0E:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:9c40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ce:1d:cc:8a:dd:67:29:fd:03:b1:7b:52:3c:a4:c6:f7:f7:74:
         77:71:3c:6e:85:98:8a:87:d5:90:35:fd:6e:44:f3:81:c3:b6:
         ee:47:2c:5f:2a:37:5e:8d:a0:b5:1c:43:7f:01:4b:2f:6d:e3:
         44:00:d9:ea:1d:f8:ff:7f:68:69:e9:b7:15:a8:d1:49:4c:ad:
         ed:45:da:81:f1:d4:09:89:99:aa:93:20:09:49:09:fd:0a:cf:
         20:9a:4c:6b:b4:2f:30:cb:95:82:9d:7d:17:ac:22:c9:4c:ac:
         91:01:c5:44:dd:64:f2:38:63:cd:09:ae:38:fa:a4:5d:58:00:
         f5:92:64:39:ca:2b:d1:a1:61:b4:de:8e:21:12:0f:11:25:52:
         bc:8f:4e:27:5c:54:93:4d:f1:a2:48:1d:bc:1e:c4:83:95:e6:
         0e:3a:16:18:c2:54:99:0b:02:c7:3f:40:4d:de:dc:cb:2d:38:
         2e:8f:36:df:a8:08:88:37:0b:aa:66:33:71:7c:ba:ff:4d:b6:
         34:70:49:a6:bf:af:b4:04:ee:68:58:61:cd:ab:dd:6a:64:10:
         08:ac:7b:d0:c8:20:26:fd:1a:2f:5e:b4:21:a7:d2:02:f3:45:
         62:1b:c1:a2:f1:74:fe:a1:87:4a:51:84:74:ea:ac:45:bd:a8:
         31:d7:1b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 22:32:10 2024 by rpki-client on console-ams.rpki-client.org