Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/638c64fe-64fb-347f-be0f-66a64d56454e.roa
File:                     638c64fe-64fb-347f-be0f-66a64d56454e.roa (raw, json)
Hash identifier:          fB3GTYOHlHaX2G0qvtR3fcgELG8pT7NkabwEh+mWT50=
Subject key identifier:   ED:54:7E:67:81:53:DA:52:A1:A0:27:B4:43:11:3F:35:F9:55:DB:20
Certificate issuer:       /CN=2890f390-5e53-4d08-aa52-1de5ce7ffb85
Certificate serial:       010D0C9F43285847924BDCB2F1490536148280C0
Authority key identifier: 5E:73:23:98:FC:2B:64:32:AE:9C:D7:6C:D6:1F:5B:C0:7A:14:38:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/638c64fe-64fb-347f-be0f-66a64d56454e.roa
Signing time:             Thu 17 Oct 2024 13:00:42 +0000
ROA not before:           Thu 17 Oct 2024 13:00:42 +0000
ROA not after:            Wed 15 Jan 2025 14:00:42 +0000
asID:                     46432
IP address blocks:        2602:fe59:20::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:92:4b:dc:b2:f1:49:05:36:14:82:80:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2890f390-5e53-4d08-aa52-1de5ce7ffb85
        Validity
            Not Before: Oct 17 13:00:42 2024 GMT
            Not After : Jan 15 14:00:42 2025 GMT
        Subject: CN=310dc0ee-ccdc-43b4-b48d-0327a86356ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f0:cc:b7:26:c8:22:f1:61:b3:7a:a0:d8:32:
                    f9:d6:4b:6e:5d:7b:b2:27:dc:ef:79:ad:78:dc:fc:
                    a4:3d:13:a9:2a:51:f0:c3:5e:8a:ae:0f:4b:aa:58:
                    5d:d3:cf:f9:ac:f7:f7:e5:86:a4:72:c7:e3:ce:52:
                    db:c6:52:93:21:bd:af:45:a9:6a:ab:70:fe:7d:ca:
                    4e:dd:e5:65:bb:0f:11:1f:90:58:cd:e5:14:60:d4:
                    fe:6c:c8:c4:6e:cc:cf:55:47:8d:17:07:7b:9a:cc:
                    81:6b:42:c0:13:ce:1c:9f:ae:a0:e4:ef:43:ce:24:
                    43:e1:0c:32:27:1a:15:c0:a2:88:e8:9f:52:91:71:
                    65:a8:11:30:96:b2:96:32:1b:35:31:f6:f4:ad:6e:
                    fd:38:75:e8:79:c2:12:b6:f0:ed:93:38:e6:59:9a:
                    c2:aa:ad:4a:3e:6a:40:2f:a5:90:7b:29:26:c1:15:
                    8e:f2:f7:cc:48:b2:55:00:d4:bb:43:28:e8:c2:33:
                    30:dc:33:ff:e2:2f:1d:a6:08:bd:bd:24:c3:2a:a0:
                    23:10:45:6d:c9:0b:83:5a:aa:a3:6c:dc:5d:d1:01:
                    99:9b:77:17:9f:1c:a4:67:ae:12:6b:34:94:d7:93:
                    51:3e:5e:83:aa:67:cf:2b:14:1a:da:4b:01:b3:d4:
                    b5:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:54:7E:67:81:53:DA:52:A1:A0:27:B4:43:11:3F:35:F9:55:DB:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/638c64fe-64fb-347f-be0f-66a64d56454e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.crl

            X509v3 Authority Key Identifier:
                keyid:5E:73:23:98:FC:2B:64:32:AE:9C:D7:6C:D6:1F:5B:C0:7A:14:38:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe59:20::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:13:ba:30:74:bf:3c:3a:68:51:d5:b7:98:0c:34:8a:12:0f:
         a9:db:b6:7e:aa:cc:f5:f4:18:06:d6:16:fd:2c:24:13:1c:7f:
         1d:37:a8:75:52:ab:1d:65:7e:9e:52:cf:7a:aa:01:04:ef:14:
         25:cf:57:0e:e6:5b:91:a4:f7:c1:49:5c:a7:60:3e:85:b5:32:
         ab:3e:ba:6c:aa:1b:4f:ff:d6:86:4a:da:be:d8:3b:30:99:3e:
         99:80:95:79:36:e7:51:00:80:d9:8b:36:c1:75:7f:2d:e8:02:
         84:99:39:c1:f5:3a:ca:e4:b0:b5:66:7b:82:a7:a0:7b:b6:aa:
         a5:cb:6d:85:d8:cf:43:51:9c:aa:14:80:44:9a:54:45:5b:cb:
         83:84:71:7e:61:ba:aa:be:af:b1:8e:7f:d2:7a:4d:65:95:98:
         ea:ce:28:94:80:65:50:3d:cf:bc:d9:a0:80:3f:63:14:70:4b:
         38:0e:cd:4c:8e:46:b8:8f:52:45:93:f0:fe:d1:dd:51:73:a9:
         e3:cd:e1:09:3e:f7:dd:71:c5:f8:59:c4:db:29:dc:d5:1c:c7:
         c8:0f:e6:15:3f:ef:7e:ed:5b:18:9d:dc:f1:30:48:82:c5:ad:
         9d:cf:e3:32:9c:21:a1:2a:50:47:4b:2c:13:d9:52:f3:c8:2c:
         c5:fe:ae:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:51:19 2024 by rpki-client on console-ams.rpki-client.org