Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c235459b-705a-42fb-9059-b6a9bf0c853f/fbe0db5e-38a2-3c89-a591-282b5f5c3a3a.roa
File:                     fbe0db5e-38a2-3c89-a591-282b5f5c3a3a.roa (raw, json)
Hash identifier:          w+oGibrIn/7tyuRojFkrMxfHmnUNAydFJKMMSqPmbGI=
Subject key identifier:   6D:F6:65:94:9E:B8:75:52:9B:BB:83:E6:A1:14:51:D8:50:A9:94:C4
Certificate issuer:       /CN=c235459b-705a-42fb-9059-b6a9bf0c853f
Certificate serial:       010D0C9F432858478CD04867E07F04B9EA86AA60
Authority key identifier: 15:F5:EC:4A:5E:00:41:2A:E7:D7:5D:8E:11:BF:89:80:9E:D7:3E:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c235459b-705a-42fb-9059-b6a9bf0c853f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c235459b-705a-42fb-9059-b6a9bf0c853f/fbe0db5e-38a2-3c89-a591-282b5f5c3a3a.roa
Signing time:             Tue 15 Oct 2024 13:52:47 +0000
ROA not before:           Tue 15 Oct 2024 13:52:47 +0000
ROA not after:            Mon 13 Jan 2025 14:52:47 +0000
asID:                     393905
IP address blocks:        2602:2c0:ffc::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c235459b-705a-42fb-9059-b6a9bf0c853f/c235459b-705a-42fb-9059-b6a9bf0c853f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c235459b-705a-42fb-9059-b6a9bf0c853f/c235459b-705a-42fb-9059-b6a9bf0c853f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c235459b-705a-42fb-9059-b6a9bf0c853f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8c:d0:48:67:e0:7f:04:b9:ea:86:aa:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c235459b-705a-42fb-9059-b6a9bf0c853f
        Validity
            Not Before: Oct 15 13:52:47 2024 GMT
            Not After : Jan 13 14:52:47 2025 GMT
        Subject: CN=89a482aa-3091-42eb-bbd5-29de1b743438
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d1:2e:72:43:ba:f9:79:44:e3:4d:fa:8e:9a:
                    72:28:9d:75:ed:47:98:06:30:2a:1e:b1:c6:1e:c8:
                    33:e2:f7:9d:23:9a:51:d6:28:1d:0e:10:75:90:cc:
                    13:22:60:94:dd:18:77:ca:44:31:bb:32:58:54:f8:
                    38:b3:d0:93:29:21:4f:40:81:20:0b:1b:55:d1:9d:
                    ee:9a:97:8d:89:2d:f9:79:a5:39:a4:56:e7:58:b7:
                    0a:16:24:c2:d6:c7:a0:05:ce:77:75:73:d2:5f:43:
                    de:83:91:06:b1:09:f0:d0:ad:12:3c:4e:48:de:44:
                    a0:2e:e4:ed:03:38:7d:6e:2e:cb:80:18:7f:da:bc:
                    d8:9f:20:58:00:0d:bc:15:62:5a:b8:79:da:80:c1:
                    b7:db:c7:c0:bb:36:1b:8b:b5:ec:00:d7:4f:2a:24:
                    09:0f:e1:ae:38:88:3d:28:fc:e1:b3:98:24:9a:44:
                    64:87:0e:9b:b7:7e:28:4a:5d:c6:97:0a:1e:23:bd:
                    7b:49:1d:1f:52:22:e6:24:cd:ec:45:f1:b2:0b:0a:
                    6d:86:68:de:98:56:5c:4c:bb:c1:58:a5:f9:37:7d:
                    25:de:6f:d5:45:81:30:0f:45:b8:20:b6:0a:76:ea:
                    70:af:37:c0:c7:b5:c5:ed:3e:54:0a:0c:7e:2e:03:
                    c9:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:F6:65:94:9E:B8:75:52:9B:BB:83:E6:A1:14:51:D8:50:A9:94:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c235459b-705a-42fb-9059-b6a9bf0c853f/fbe0db5e-38a2-3c89-a591-282b5f5c3a3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c235459b-705a-42fb-9059-b6a9bf0c853f/c235459b-705a-42fb-9059-b6a9bf0c853f.crl

            X509v3 Authority Key Identifier:
                keyid:15:F5:EC:4A:5E:00:41:2A:E7:D7:5D:8E:11:BF:89:80:9E:D7:3E:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c235459b-705a-42fb-9059-b6a9bf0c853f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2c0:ffc::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:e3:86:67:80:8f:34:ff:80:46:4d:07:1e:a8:95:b1:23:f7:
         b3:2d:07:19:60:f5:34:4f:c8:4b:28:0d:0e:a4:1b:12:59:29:
         22:da:0e:06:ff:b8:ca:fd:fc:ac:6e:99:b3:e7:b4:a7:da:ef:
         01:d6:76:39:12:cf:37:67:7d:8f:a9:be:04:90:b4:1c:16:0f:
         9a:f0:09:42:0b:0a:87:12:51:65:6d:81:11:49:6e:1d:ac:11:
         1d:15:97:f3:9d:e5:e2:06:65:be:51:05:10:7e:73:84:af:06:
         1a:d3:8c:9e:40:7a:93:09:ea:be:8c:ad:d0:dd:fc:00:ea:d0:
         e0:dd:44:14:54:5f:9c:3e:84:03:07:7a:3b:6d:a2:04:d8:b4:
         cd:1d:33:4f:01:61:75:55:1f:86:44:e7:54:b1:0d:65:85:9e:
         6b:e0:78:c7:83:8c:9f:56:6c:d1:b3:2a:46:b8:3e:8e:69:28:
         7e:39:78:84:cd:6d:63:08:7b:3b:7f:da:90:22:8c:b6:37:5b:
         a8:e9:e6:11:6c:6f:34:a7:c5:f0:39:c7:9a:c9:65:2e:ed:54:
         44:d1:94:a0:31:02:2f:35:3e:32:f3:e9:09:04:07:4e:4f:64:
         d7:ae:b1:d3:8e:f5:32:bd:e9:60:45:df:1a:b8:84:9b:f4:06:
         fc:bb:ea:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:15 2024 by rpki-client on console-fra.rpki-client.org