Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c235459b-705a-42fb-9059-b6a9bf0c853f/788f04ec-bb4a-3d25-b76f-e58632ff2f71.roa
File:                     788f04ec-bb4a-3d25-b76f-e58632ff2f71.roa (raw, json)
Hash identifier:          gnzgaB372YKfuWPmSWkWLaHOMiMmCyKr3aJy404ft7U=
Subject key identifier:   D5:CD:1B:44:D1:70:96:D7:89:89:26:4C:47:63:EE:9A:F4:6F:C9:58
Certificate issuer:       /CN=c235459b-705a-42fb-9059-b6a9bf0c853f
Certificate serial:       010D0C9F43285847DF2F51B2B527E7FE5B9BD3E0
Authority key identifier: 15:F5:EC:4A:5E:00:41:2A:E7:D7:5D:8E:11:BF:89:80:9E:D7:3E:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c235459b-705a-42fb-9059-b6a9bf0c853f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c235459b-705a-42fb-9059-b6a9bf0c853f/788f04ec-bb4a-3d25-b76f-e58632ff2f71.roa
Signing time:             Thu 14 Nov 2024 02:00:27 +0000
ROA not before:           Thu 14 Nov 2024 02:00:27 +0000
ROA not after:            Wed 12 Feb 2025 02:00:27 +0000
asID:                     393905
IP address blocks:        2602:2c0::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c235459b-705a-42fb-9059-b6a9bf0c853f/c235459b-705a-42fb-9059-b6a9bf0c853f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c235459b-705a-42fb-9059-b6a9bf0c853f/c235459b-705a-42fb-9059-b6a9bf0c853f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c235459b-705a-42fb-9059-b6a9bf0c853f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:df:2f:51:b2:b5:27:e7:fe:5b:9b:d3:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c235459b-705a-42fb-9059-b6a9bf0c853f
        Validity
            Not Before: Nov 14 02:00:27 2024 GMT
            Not After : Feb 12 02:00:27 2025 GMT
        Subject: CN=bfdd3f7f-5d9a-4aab-8dd7-125a522673a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:38:9f:7d:28:2f:3c:c6:19:51:b3:46:05:a1:
                    92:96:a1:92:3d:da:6a:45:f0:7d:08:8b:3f:98:c5:
                    2d:b5:69:51:03:47:03:fe:f7:3b:60:80:ba:c8:3f:
                    69:4d:57:58:80:b8:ca:8b:bb:a3:33:00:94:dd:c8:
                    22:ec:8b:9e:bb:c3:55:d0:be:ac:06:f1:72:00:ef:
                    41:f0:cd:ff:84:77:bf:f2:d2:dd:1f:bf:97:cf:76:
                    90:71:53:fd:22:76:a5:e8:c0:9f:8c:b4:d3:6b:3a:
                    c6:8f:dd:2a:1f:07:98:ad:02:8b:ae:2b:2c:b5:70:
                    2f:67:6d:ae:d2:68:b4:47:6d:4a:b8:d4:cb:ec:c5:
                    a1:1c:7a:ab:14:4e:34:41:b1:5a:e6:f3:7f:7a:a3:
                    54:04:cf:b5:b3:3b:20:57:36:bc:96:6f:0d:ec:bc:
                    97:bb:c3:bc:82:5a:61:75:62:4c:76:e0:81:dc:af:
                    4d:b1:27:39:9a:2a:e8:b7:a7:25:9a:ec:0f:68:57:
                    55:45:d2:71:23:d2:f2:5c:7e:6d:26:d3:23:e9:86:
                    c1:37:a2:50:f2:0a:a0:27:8e:85:6d:95:c8:53:7d:
                    eb:56:b3:86:15:e8:42:7b:39:fd:81:56:c1:65:94:
                    6a:c0:3a:07:42:d4:31:8e:41:f6:3d:f4:28:1a:5d:
                    22:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:CD:1B:44:D1:70:96:D7:89:89:26:4C:47:63:EE:9A:F4:6F:C9:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c235459b-705a-42fb-9059-b6a9bf0c853f/788f04ec-bb4a-3d25-b76f-e58632ff2f71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c235459b-705a-42fb-9059-b6a9bf0c853f/c235459b-705a-42fb-9059-b6a9bf0c853f.crl

            X509v3 Authority Key Identifier:
                keyid:15:F5:EC:4A:5E:00:41:2A:E7:D7:5D:8E:11:BF:89:80:9E:D7:3E:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c235459b-705a-42fb-9059-b6a9bf0c853f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2c0::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:3b:a2:17:53:6f:66:88:f2:7b:11:37:08:92:fd:f6:54:55:
         de:ac:0a:38:1a:23:2c:3d:fa:b2:71:04:54:3f:6d:80:a8:20:
         91:ab:68:a9:12:b7:05:b0:cf:d6:fc:98:2c:58:9c:18:f5:ad:
         4c:ea:00:46:ad:4b:04:fa:3a:d5:62:50:11:84:76:9c:b2:d8:
         00:20:9e:24:81:99:ed:a1:a0:38:40:a9:03:fe:24:5c:15:2f:
         44:1d:3a:ae:dd:8b:ca:03:48:bc:3e:fa:c2:a1:fc:24:4d:70:
         91:30:c6:fd:70:24:ca:15:c4:f6:9a:50:d7:2b:ac:bb:55:e2:
         19:48:23:03:db:aa:10:86:57:f7:ad:9a:40:c5:65:86:23:ea:
         0f:be:dc:65:3c:3f:1d:18:6e:92:3c:c4:fc:3b:be:4c:f0:ca:
         69:31:85:f3:ab:e5:0d:a3:01:9d:f1:17:cc:d1:68:fc:71:2a:
         93:08:59:86:7c:25:70:fe:45:29:57:b3:82:aa:f1:92:e7:45:
         fa:8f:5a:0c:07:e8:e1:23:5d:45:28:45:14:93:5a:3b:18:95:
         5f:8d:95:a5:f6:e2:ba:e4:9f:fa:10:8a:48:13:c1:0e:37:43:
         6d:6d:01:96:5a:91:3f:bb:be:b1:4e:84:c2:a9:cd:36:78:bd:
         a7:6b:ff:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:15 2024 by rpki-client on console-fra.rpki-client.org