Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/20a12472-5a8f-34f9-93fe-5929eccc24c9.roa
File:                     20a12472-5a8f-34f9-93fe-5929eccc24c9.roa (raw, json)
Hash identifier:          lpcbvBI3lkXuieyW21Z2sDCkS+fk1KUx0dtkSKnTg8k=
Subject key identifier:   35:AD:76:47:6E:0A:2C:99:87:E7:5F:19:83:F7:FB:C7:2A:C5:24:89
Certificate issuer:       /CN=d06d1174-4bf4-465b-9f0b-1091633e6717
Certificate serial:       010D0C9F43285847A5D6A8DD187E471460E87400
Authority key identifier: F6:38:F7:6A:D8:AA:80:BC:13:3B:15:F3:0D:AE:10:37:32:D0:D0:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/20a12472-5a8f-34f9-93fe-5929eccc24c9.roa
Signing time:             Thu 24 Oct 2024 13:00:42 +0000
ROA not before:           Thu 24 Oct 2024 13:00:42 +0000
ROA not after:            Wed 22 Jan 2025 14:00:42 +0000
asID:                     16509
IP address blocks:        2602:fb00:1::/48 maxlen: 48
                          2602:fb00:2::/48 maxlen: 48
                          2602:fb00:3::/48 maxlen: 48
                          2602:fb00:4::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/d06d1174-4bf4-465b-9f0b-1091633e6717.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/d06d1174-4bf4-465b-9f0b-1091633e6717.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a5:d6:a8:dd:18:7e:47:14:60:e8:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d06d1174-4bf4-465b-9f0b-1091633e6717
        Validity
            Not Before: Oct 24 13:00:42 2024 GMT
            Not After : Jan 22 14:00:42 2025 GMT
        Subject: CN=3a228533-1a2d-4c2d-b581-efd663bf983b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:96:25:73:45:5a:0a:0f:3f:94:fe:5a:a2:6f:
                    c2:bf:5d:fd:86:96:a0:a2:e0:be:92:02:0e:64:cf:
                    f1:00:27:8c:f3:0d:a2:2f:c9:c5:57:28:18:5c:88:
                    fc:b8:3a:b3:b8:b5:48:49:1c:07:8a:c1:9d:9f:e9:
                    14:ae:a4:42:47:a5:b7:fb:a8:79:f2:7a:be:ff:1b:
                    ee:5b:54:3f:09:0c:f1:2a:93:44:e3:ad:c1:3c:f5:
                    27:7f:e5:80:ef:e9:75:6b:38:6f:3b:cd:11:72:88:
                    49:72:67:0b:e9:33:5c:bd:cc:f4:36:ce:37:9a:fb:
                    d7:a9:f7:80:09:b6:e8:b5:34:98:07:76:bf:d9:52:
                    f2:de:f3:e9:c0:21:ae:69:21:62:c0:90:9a:ae:62:
                    6d:ee:4b:65:7b:38:20:24:ef:c0:f3:cf:64:49:35:
                    81:b6:73:25:8b:67:69:35:63:00:73:49:18:7c:29:
                    91:99:67:54:79:39:e7:c8:ce:f1:15:7d:dd:fa:3f:
                    2c:e8:73:0a:6b:c9:fc:d0:70:42:ce:c6:b9:91:86:
                    4a:8c:16:64:25:39:03:60:3e:fb:af:1a:c4:88:bb:
                    f3:83:65:a5:d0:56:17:8a:64:e5:b6:66:9a:25:cc:
                    be:67:cb:94:8c:9a:26:51:29:5f:df:ec:1b:06:f3:
                    7e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:AD:76:47:6E:0A:2C:99:87:E7:5F:19:83:F7:FB:C7:2A:C5:24:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/20a12472-5a8f-34f9-93fe-5929eccc24c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/d06d1174-4bf4-465b-9f0b-1091633e6717.crl

            X509v3 Authority Key Identifier:
                keyid:F6:38:F7:6A:D8:AA:80:BC:13:3B:15:F3:0D:AE:10:37:32:D0:D0:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb00:1::-2602:fb00:4:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:1e:73:c8:db:92:ea:28:27:75:67:d4:48:48:64:9c:c2:9f:
         d0:be:4e:ad:74:a1:0c:28:81:d7:65:ac:a7:28:ba:5e:72:95:
         37:b4:98:6b:a4:90:72:a0:06:29:9f:c7:2e:04:73:40:46:2a:
         e2:25:6c:2a:fc:ba:72:21:59:20:f4:3f:d1:fc:3c:cb:44:20:
         9d:fb:b6:d0:35:dd:91:62:66:0e:19:b7:4b:2a:b4:80:bf:e9:
         6c:bd:49:ac:a6:1e:ba:38:5e:34:cd:84:98:90:7d:5d:81:d3:
         f8:8c:c4:bf:d3:8c:00:9c:08:9e:b0:7f:db:7c:73:ee:65:ae:
         2a:7a:39:4f:48:cd:30:3b:08:d4:33:96:bc:8f:f3:db:c2:e2:
         f3:a7:3a:e9:d9:76:1a:99:8f:e2:86:bc:d7:6d:c9:cd:3e:95:
         ec:ff:03:73:2d:cd:5e:4b:ae:fc:84:e5:67:a9:8c:62:1d:46:
         8b:e9:e9:cc:96:93:5a:3a:8b:aa:f1:35:ff:86:df:48:92:6c:
         09:96:35:3a:6e:d3:45:16:c3:ab:bd:b6:52:76:33:e2:56:7a:
         85:73:af:dc:5d:71:16:8e:23:69:b5:05:4a:54:4e:3b:f6:d8:
         7b:e1:8f:ac:79:b3:7e:7a:08:d9:45:5b:bc:2d:24:23:1e:06:
         75:59:37:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:43:06 2024 by rpki-client on console-ams.rpki-client.org