Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c061d8c-3838-415d-8bbc-20962c789d81/8a09ec7d-ddb6-3b39-8297-533ef36fc37a.roa
File:                     8a09ec7d-ddb6-3b39-8297-533ef36fc37a.roa (raw, json)
Hash identifier:          SR1cgJMvLxPOPXqU65RbtjIRTFRn+Srnuol2zUzp+Yc=
Subject key identifier:   C5:E0:50:32:88:18:D8:47:74:E0:A0:61:6F:27:3F:52:0F:8E:89:DB
Certificate issuer:       /CN=0c061d8c-3838-415d-8bbc-20962c789d81
Certificate serial:       010D0C9F43285846C51A74CFF04D1464C2454DC0
Authority key identifier: 65:B3:C6:31:F3:A8:02:B1:B2:7C:15:AD:5A:4E:B8:FB:EF:9C:3E:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c061d8c-3838-415d-8bbc-20962c789d81.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c061d8c-3838-415d-8bbc-20962c789d81/8a09ec7d-ddb6-3b39-8297-533ef36fc37a.roa
Signing time:             Mon 05 Aug 2024 01:00:29 +0000
ROA not before:           Mon 05 Aug 2024 01:00:29 +0000
ROA not after:            Sun 03 Nov 2024 01:00:29 +0000
asID:                     55223
IP address blocks:        2602:fb0d:61::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c061d8c-3838-415d-8bbc-20962c789d81/0c061d8c-3838-415d-8bbc-20962c789d81.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c061d8c-3838-415d-8bbc-20962c789d81/0c061d8c-3838-415d-8bbc-20962c789d81.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c061d8c-3838-415d-8bbc-20962c789d81.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Sep 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:c5:1a:74:cf:f0:4d:14:64:c2:45:4d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c061d8c-3838-415d-8bbc-20962c789d81
        Validity
            Not Before: Aug  5 01:00:29 2024 GMT
            Not After : Nov  3 01:00:29 2024 GMT
        Subject: CN=ebd7678b-a006-47ff-ba70-082210af4068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:54:9c:07:59:af:06:ec:3f:98:be:99:a0:37:
                    69:4c:c7:0c:37:e5:ab:60:db:40:48:fb:9a:91:53:
                    2b:ba:e0:15:f1:fe:d7:20:34:84:09:6e:75:39:d6:
                    1f:bb:5e:2d:54:3d:1e:78:f3:bc:ef:d1:54:66:68:
                    e2:0c:23:78:13:e8:90:6b:58:0c:08:3c:9b:e1:1f:
                    18:49:28:08:ae:ae:6e:94:ab:15:f3:a5:20:d7:26:
                    84:d4:99:7b:5a:19:f8:28:28:ef:a6:28:4a:3f:b8:
                    b4:83:f9:00:c6:a0:d3:d1:7c:a0:14:7a:9d:d1:de:
                    29:55:60:29:8e:76:95:2b:c0:dc:56:98:b0:31:7b:
                    d5:5c:57:06:eb:9b:02:58:86:fc:a9:81:65:a7:4c:
                    fc:9f:82:e5:a5:55:02:7c:8c:1f:aa:3e:e7:7d:f1:
                    be:ee:c6:8d:17:25:ab:f9:55:20:59:f3:a7:63:a3:
                    6c:1c:f0:84:f2:7e:e9:72:c0:6a:94:f6:05:cd:ff:
                    81:b0:c9:6a:ba:5f:c2:a0:2c:e2:94:b5:42:aa:01:
                    45:5f:c9:f6:41:57:7a:a6:f9:49:a2:f6:b2:66:34:
                    c9:22:e4:ae:d5:25:fd:58:39:f7:d1:e0:e9:39:06:
                    a8:e0:21:51:c8:28:99:ac:56:41:70:60:a9:26:e8:
                    5a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:E0:50:32:88:18:D8:47:74:E0:A0:61:6F:27:3F:52:0F:8E:89:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c061d8c-3838-415d-8bbc-20962c789d81/8a09ec7d-ddb6-3b39-8297-533ef36fc37a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c061d8c-3838-415d-8bbc-20962c789d81/0c061d8c-3838-415d-8bbc-20962c789d81.crl

            X509v3 Authority Key Identifier:
                keyid:65:B3:C6:31:F3:A8:02:B1:B2:7C:15:AD:5A:4E:B8:FB:EF:9C:3E:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c061d8c-3838-415d-8bbc-20962c789d81.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb0d:61::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:8f:0a:38:94:bc:b3:6a:39:1e:5b:ef:92:39:a7:7a:ab:e9:
         11:d5:73:65:39:bf:27:9a:42:9a:58:b5:fb:5e:f4:71:41:89:
         a4:13:56:a9:d8:50:f0:68:d0:e0:8e:ea:47:c0:3d:24:dc:e9:
         fc:c1:d7:1a:6e:93:aa:bd:85:16:d9:ea:24:37:99:a0:5b:cc:
         85:0c:2c:96:87:98:2c:7d:2d:91:86:a4:47:26:b0:6d:1e:18:
         9e:62:23:79:0c:15:5c:ba:68:3d:62:61:9a:60:ce:2b:d1:c4:
         c8:c0:b1:71:43:30:64:cf:92:59:8c:7e:cc:ed:51:1e:56:e2:
         c2:a6:60:95:f7:5c:21:21:61:ad:8e:04:35:41:cd:e6:d1:5b:
         f5:b7:92:dd:e7:19:0f:50:cb:fe:80:ca:e0:d9:3e:60:b5:27:
         e3:7f:90:b9:7f:16:f5:17:81:6f:ab:f5:61:26:bc:d7:ff:4a:
         fc:1f:80:06:09:db:d6:35:ba:92:c1:6c:af:0e:8b:3f:50:a5:
         08:6d:79:bf:b4:28:75:47:90:bd:72:01:df:29:ac:5f:1a:5c:
         b7:6a:32:18:7f:6c:db:7b:9d:93:38:97:6d:81:c2:e5:20:35:
         d0:9a:46:97:86:ca:c5:5d:06:58:17:01:cf:35:be:4c:b0:e5:
         72:f1:f1:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 17:31:01 2024 by rpki-client on console-fra.rpki-client.org