Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/65b660a1-3975-385b-add8-d9b4f1e98a18.roa
File:                     65b660a1-3975-385b-add8-d9b4f1e98a18.roa (raw, json)
Hash identifier:          54FnvCjE7hCD6YkFsRF7hxfElkLJCujC3q9pmGd9X2M=
Subject key identifier:   82:44:81:80:68:07:0F:B4:B7:BE:D6:80:49:D3:75:3D:AA:06:6A:01
Certificate issuer:       /CN=21a7c020-ebbc-4762-8841-54efb508a7c7
Certificate serial:       010D0C9F43285847B3CC16FBD053CCBAF0FB3180
Authority key identifier: 22:6E:FF:16:97:FA:92:15:31:0A:E9:76:DC:D3:D8:46:D3:8F:61:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/65b660a1-3975-385b-add8-d9b4f1e98a18.roa
Signing time:             Tue 29 Oct 2024 13:00:40 +0000
ROA not before:           Tue 29 Oct 2024 13:00:40 +0000
ROA not after:            Mon 27 Jan 2025 14:00:40 +0000
asID:                     64199
IP address blocks:        2602:fa78::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/21a7c020-ebbc-4762-8841-54efb508a7c7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/21a7c020-ebbc-4762-8841-54efb508a7c7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b3:cc:16:fb:d0:53:cc:ba:f0:fb:31:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21a7c020-ebbc-4762-8841-54efb508a7c7
        Validity
            Not Before: Oct 29 13:00:40 2024 GMT
            Not After : Jan 27 14:00:40 2025 GMT
        Subject: CN=990ea2f9-5566-4356-aa23-e02f17904614
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f6:1f:fd:8a:8a:fd:d8:d1:79:2c:6a:60:61:
                    bb:a3:9f:5b:80:6e:0d:46:3d:5d:2c:51:43:68:fc:
                    92:64:ed:1f:27:29:70:ce:2b:fa:72:c8:9c:1c:48:
                    e4:82:20:ff:b4:8c:80:64:69:8f:da:0f:79:d4:9e:
                    1a:77:08:19:aa:ed:8a:62:13:7b:04:f9:e9:89:12:
                    5e:09:8a:31:4e:ee:3a:77:a3:f7:dd:b1:5a:5b:aa:
                    32:94:7b:4d:5b:52:80:5f:89:de:b1:74:7e:c7:6f:
                    c2:37:fb:e0:6b:c5:f1:37:9b:b8:5b:39:ea:45:95:
                    b3:11:a0:e2:ce:7e:a7:1a:d4:dc:83:47:a4:5e:b5:
                    a5:f6:81:79:cf:d1:43:aa:c2:40:a5:a4:95:19:fa:
                    bc:91:8d:c8:09:60:b2:60:7e:af:64:f9:01:9f:e0:
                    9f:bc:2c:c4:17:cf:a3:6c:e9:d2:83:59:a3:31:3e:
                    d0:18:e7:ca:d5:2a:41:05:9d:fa:7d:16:0e:49:6f:
                    ab:6a:40:fd:73:a0:17:ea:01:d5:02:82:e1:7c:eb:
                    a7:94:b4:52:80:4d:fb:eb:6e:70:67:b1:29:b8:e0:
                    7d:5f:76:89:d9:ba:d0:39:52:e3:3c:b6:7e:49:df:
                    f4:22:54:fe:0b:8b:26:77:6c:ee:b1:9d:93:2f:f1:
                    46:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:44:81:80:68:07:0F:B4:B7:BE:D6:80:49:D3:75:3D:AA:06:6A:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/65b660a1-3975-385b-add8-d9b4f1e98a18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/21a7c020-ebbc-4762-8841-54efb508a7c7.crl

            X509v3 Authority Key Identifier:
                keyid:22:6E:FF:16:97:FA:92:15:31:0A:E9:76:DC:D3:D8:46:D3:8F:61:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa78::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:53:e6:5a:70:af:8c:23:36:d6:e6:c6:77:ac:e0:87:ca:cb:
         0f:9f:bf:40:4f:41:31:2a:29:87:f4:99:4e:18:41:b1:85:64:
         fb:18:08:f5:ca:ec:45:a0:7b:99:8b:f9:79:75:a4:e2:7d:95:
         df:4e:10:68:52:2d:10:d0:39:00:25:b6:fd:d4:3b:ee:8e:97:
         ed:2d:c4:58:d2:23:4d:9b:16:86:e4:12:e2:ec:ab:1b:fe:74:
         72:08:41:79:7c:0e:39:a4:a3:63:86:91:3f:93:76:b7:9f:56:
         35:a3:58:f8:55:33:c6:96:8c:d6:f6:d8:3f:15:49:7b:5a:58:
         4b:97:89:dc:af:9c:6d:f4:13:a2:75:27:a9:3c:b0:2c:5c:c5:
         42:a6:ca:42:d0:80:07:97:88:1a:cc:18:3d:3a:73:a3:73:df:
         94:b1:73:7e:ab:23:4f:3b:ce:41:8c:b4:00:b9:2a:42:97:a6:
         71:85:1f:81:a8:79:d8:9d:3c:36:f7:72:d2:da:9d:ac:22:56:
         7f:e0:49:59:d6:cd:9b:56:c6:46:56:cc:df:d7:1d:4b:50:68:
         5f:c0:16:d2:10:3e:7a:74:2f:e7:7e:2e:cf:20:80:11:3f:92:
         d3:28:43:81:52:91:f9:43:fb:8b:e9:a0:7c:f6:88:de:7e:ba:
         a2:0d:e3:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:00 2024 by rpki-client on console-fra.rpki-client.org