Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/c7d23d54-6f9a-3ad3-914f-a83f68df2949.roa
File:                     c7d23d54-6f9a-3ad3-914f-a83f68df2949.roa (raw, json)
Hash identifier:          qG+SuA2oJYzvAPPkB+nGyPDubXMcyH4Cf2sEJrgUfL8=
Subject key identifier:   17:5C:32:73:46:1E:C8:07:4C:FE:5C:FE:B1:56:B9:04:E8:1A:C7:BD
Certificate issuer:       /CN=d06d1174-4bf4-465b-9f0b-1091633e6717
Certificate serial:       010D0C9F43285847A5D6A185A88284B23FD94180
Authority key identifier: F6:38:F7:6A:D8:AA:80:BC:13:3B:15:F3:0D:AE:10:37:32:D0:D0:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/c7d23d54-6f9a-3ad3-914f-a83f68df2949.roa
Signing time:             Thu 24 Oct 2024 13:00:42 +0000
ROA not before:           Thu 24 Oct 2024 13:00:42 +0000
ROA not after:            Wed 22 Jan 2025 14:00:42 +0000
asID:                     36262
IP address blocks:        2602:fb00:51::/48 maxlen: 48
                          2602:fb00:52::/48 maxlen: 48
                          2602:fb00:53::/48 maxlen: 48
                          2602:fb00:54::/48 maxlen: 48
                          2602:fb00:55::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/d06d1174-4bf4-465b-9f0b-1091633e6717.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/d06d1174-4bf4-465b-9f0b-1091633e6717.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a5:d6:a1:85:a8:82:84:b2:3f:d9:41:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d06d1174-4bf4-465b-9f0b-1091633e6717
        Validity
            Not Before: Oct 24 13:00:42 2024 GMT
            Not After : Jan 22 14:00:42 2025 GMT
        Subject: CN=84d06baf-a543-44a2-a27b-4be5a3b9d9ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d1:4b:75:98:43:45:22:ff:23:9e:26:f2:d5:
                    71:a6:9e:a6:4d:11:91:21:87:0e:9d:60:82:e7:b6:
                    b4:7b:e8:80:21:15:a0:ba:7c:2f:e0:cf:56:64:60:
                    e7:15:54:bb:8d:1a:7c:24:4e:6d:07:67:dc:39:5c:
                    65:c0:3d:3f:d7:70:e5:1a:e2:8d:7d:8c:e5:9b:b0:
                    50:fe:60:b8:38:6f:43:01:e1:1d:75:2d:b8:0c:4e:
                    bd:d6:a5:0b:69:d5:b1:0f:1a:14:3f:7c:13:4d:c6:
                    b7:8b:db:f6:08:3e:cc:9b:f3:e2:73:87:a8:27:32:
                    dc:14:21:0d:ae:30:3c:1d:cd:54:f0:2d:87:84:6d:
                    e3:88:7d:4f:fa:6a:8e:50:4d:ef:c7:64:ed:7c:87:
                    20:46:8e:26:4f:39:75:ad:52:69:b6:07:41:8b:ca:
                    7a:4c:43:15:48:57:17:d2:18:13:28:0c:9a:ea:82:
                    89:eb:c9:54:2f:1c:8d:b3:80:5d:93:b0:c8:54:32:
                    0f:7d:24:2d:2e:ab:cb:82:bc:b7:87:4b:34:14:7c:
                    b7:ee:01:e3:3c:4b:6b:9a:8b:34:62:93:21:10:2c:
                    27:6a:71:1d:96:2e:e0:f2:e5:1b:5b:7e:9a:d4:b2:
                    6d:15:96:b9:4c:27:1a:d2:65:61:fd:66:55:99:3b:
                    02:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:5C:32:73:46:1E:C8:07:4C:FE:5C:FE:B1:56:B9:04:E8:1A:C7:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/c7d23d54-6f9a-3ad3-914f-a83f68df2949.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/d06d1174-4bf4-465b-9f0b-1091633e6717.crl

            X509v3 Authority Key Identifier:
                keyid:F6:38:F7:6A:D8:AA:80:BC:13:3B:15:F3:0D:AE:10:37:32:D0:D0:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb00:51::-2602:fb00:55:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:12:ea:59:65:d0:2d:5f:7d:93:82:65:43:f2:5b:cf:62:60:
         02:69:3a:eb:82:5f:58:ea:e1:ef:6e:c6:b0:88:a5:bb:8b:5b:
         6a:14:80:c8:c9:f5:f0:70:6a:c2:ef:d4:7d:7e:d2:fa:6b:f5:
         68:36:b3:c8:a2:5b:85:a6:08:3d:7a:95:57:f9:d4:3b:fe:17:
         7f:18:9b:cf:38:30:42:7c:a1:c1:6d:01:32:ba:12:33:59:e7:
         71:23:af:34:7c:45:81:27:25:23:74:6e:31:65:98:6f:3a:38:
         f3:cb:63:4f:35:db:27:26:3e:da:ec:99:eb:78:d8:7c:c7:82:
         3f:aa:d0:39:63:a7:1f:94:18:07:9d:9e:02:28:16:cc:d0:12:
         62:a6:7e:f0:ea:70:52:64:81:a0:1b:07:2c:72:bd:ab:1f:64:
         a2:71:a3:8b:3a:6b:7c:7c:f4:d0:2f:4c:84:f7:92:26:a7:5f:
         1b:2d:fc:2f:d7:2f:8d:91:16:d5:39:4b:30:96:27:b4:ac:81:
         cf:c6:f3:55:c7:75:56:d9:80:32:55:6c:26:80:e5:ca:fa:12:
         9d:12:25:b8:92:86:3b:e1:7a:07:95:63:8d:ac:06:d9:b9:97:
         16:c4:04:37:98:ac:f2:b3:1c:1f:c5:4f:c9:c5:49:9d:96:62:
         79:26:7b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:45:31 2024 by rpki-client on console-ams.rpki-client.org