Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c235459b-705a-42fb-9059-b6a9bf0c853f/5f1a9616-7b33-3d43-a437-dd89224e97dc.roa
File:                     5f1a9616-7b33-3d43-a437-dd89224e97dc.roa (raw, json)
Hash identifier:          GQREmiUpH/117yNxo2jh4I7lrBMqcYyGkK7bx/Pzows=
Subject key identifier:   7E:2F:91:34:00:04:C5:04:DC:D6:CA:FB:C4:93:33:E9:87:44:2B:C3
Certificate issuer:       /CN=c235459b-705a-42fb-9059-b6a9bf0c853f
Certificate serial:       010D0C9F432858478CCFA82A0A4951CB8E11DF00
Authority key identifier: 15:F5:EC:4A:5E:00:41:2A:E7:D7:5D:8E:11:BF:89:80:9E:D7:3E:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c235459b-705a-42fb-9059-b6a9bf0c853f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c235459b-705a-42fb-9059-b6a9bf0c853f/5f1a9616-7b33-3d43-a437-dd89224e97dc.roa
Signing time:             Tue 15 Oct 2024 13:51:31 +0000
ROA not before:           Tue 15 Oct 2024 13:51:31 +0000
ROA not after:            Mon 13 Jan 2025 14:51:31 +0000
asID:                     393905
IP address blocks:        2602:2c0:ffb::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c235459b-705a-42fb-9059-b6a9bf0c853f/c235459b-705a-42fb-9059-b6a9bf0c853f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c235459b-705a-42fb-9059-b6a9bf0c853f/c235459b-705a-42fb-9059-b6a9bf0c853f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c235459b-705a-42fb-9059-b6a9bf0c853f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8c:cf:a8:2a:0a:49:51:cb:8e:11:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c235459b-705a-42fb-9059-b6a9bf0c853f
        Validity
            Not Before: Oct 15 13:51:31 2024 GMT
            Not After : Jan 13 14:51:31 2025 GMT
        Subject: CN=7ff3b57f-006d-47a8-bf3d-637eab24c2c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c2:70:a3:8b:7d:c1:73:02:67:26:fd:30:35:
                    93:ff:41:8f:f2:e2:4d:7f:83:f4:1c:74:67:0a:f6:
                    29:72:2b:40:82:6f:e8:dd:d7:fc:28:91:62:e3:e7:
                    57:cf:08:72:7c:e7:bf:b6:7b:2d:96:3d:b1:24:86:
                    04:04:f2:53:c9:a0:57:fb:fd:f4:96:46:ad:21:08:
                    96:5b:12:da:6a:d8:82:2b:3e:5d:c4:95:04:cd:d6:
                    d5:12:71:f9:ab:16:82:6b:bd:ac:9d:eb:f8:a5:3e:
                    d2:9c:45:36:b9:c8:e1:42:90:12:6c:2f:fe:5a:c4:
                    0e:3f:98:d8:08:b4:b1:d2:27:ce:67:8f:75:45:cf:
                    f7:34:ce:86:7a:ec:77:39:75:a1:43:ba:21:21:17:
                    c5:f6:f4:28:53:5c:dd:2a:4c:ef:c3:6e:ef:eb:5d:
                    9e:91:ed:fe:73:bc:d6:19:d5:bd:01:16:3c:2d:c2:
                    64:06:32:3a:a8:20:d3:4b:16:c1:0c:7c:d0:7d:93:
                    f3:fe:9d:d7:df:3c:f6:8e:52:5d:81:cb:42:3e:0c:
                    8f:af:a7:18:6a:3b:5f:b7:9e:33:0d:e4:3b:6c:11:
                    b3:57:b3:97:87:ce:fd:32:cb:ce:e4:91:8a:51:d1:
                    f2:98:c2:af:83:ee:2c:d9:a5:eb:8d:06:99:51:d2:
                    de:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:2F:91:34:00:04:C5:04:DC:D6:CA:FB:C4:93:33:E9:87:44:2B:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c235459b-705a-42fb-9059-b6a9bf0c853f/5f1a9616-7b33-3d43-a437-dd89224e97dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c235459b-705a-42fb-9059-b6a9bf0c853f/c235459b-705a-42fb-9059-b6a9bf0c853f.crl

            X509v3 Authority Key Identifier:
                keyid:15:F5:EC:4A:5E:00:41:2A:E7:D7:5D:8E:11:BF:89:80:9E:D7:3E:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c235459b-705a-42fb-9059-b6a9bf0c853f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2c0:ffb::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:29:d2:13:33:56:4d:09:54:36:14:b6:1a:a0:ed:d6:93:ca:
         d5:8c:a1:84:65:b2:e6:cf:03:47:c2:b6:45:4d:08:2a:12:ca:
         67:9b:78:7a:65:74:b0:9b:fa:8e:49:15:a6:8a:e6:93:6f:20:
         20:b8:51:9d:44:70:54:40:a9:b4:65:4a:e8:d0:74:4f:f5:1e:
         41:ca:6b:f4:5f:bc:a0:9a:a4:d6:1c:7c:81:f3:eb:46:8b:7f:
         cc:0d:e3:1c:ba:e0:1e:6a:77:da:67:81:cd:4f:5d:11:1a:df:
         fc:40:e6:ae:23:a4:a0:0a:a8:9a:c5:48:c5:c1:1c:b8:4c:11:
         24:3c:c9:a7:bc:69:e4:9b:ad:a8:dc:ce:f6:ce:70:5c:30:9c:
         02:66:63:50:9d:87:ea:c4:14:8f:69:bb:d9:c0:5b:b7:4f:cd:
         2f:f2:da:8c:e1:06:d4:20:fd:5e:8c:f1:57:5e:d0:88:ba:77:
         96:35:2f:b5:c1:09:0d:96:b8:3c:8a:12:f5:b7:83:e9:97:43:
         82:da:91:58:a9:5a:29:ea:17:0c:85:f9:f1:61:86:99:06:b4:
         cb:8e:3d:20:c8:85:fa:9e:f6:37:aa:9c:8e:dc:f4:68:a7:18:
         fd:2c:ae:ce:0e:81:0e:67:50:ba:19:be:e0:44:63:39:9b:7f:
         4d:c5:a7:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:20 2024 by rpki-client on console-ams.rpki-client.org