Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/4bf343cc-4a98-3a39-9d0f-ab1e8212c29c.roa
File:                     4bf343cc-4a98-3a39-9d0f-ab1e8212c29c.roa (raw, json)
Hash identifier:          9etJ2B3erjy4VAup7PbhIy47rvnAuioX2z4OsfGsLm0=
Subject key identifier:   CC:D0:A3:AA:C7:46:F6:94:76:2E:F6:3C:50:DD:3A:66:BC:88:FB:B5
Certificate issuer:       /CN=f7798abb-711d-4f10-bc46-bceed055e1fa
Certificate serial:       010D0C9F4328584769D0E28EE534D66C7E327200
Authority key identifier: CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/4bf343cc-4a98-3a39-9d0f-ab1e8212c29c.roa
Signing time:             Thu 03 Oct 2024 01:00:31 +0000
ROA not before:           Thu 03 Oct 2024 01:00:31 +0000
ROA not after:            Wed 01 Jan 2025 02:00:31 +0000
asID:                     206216
IP address blocks:        2602:fb54:145::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:69:d0:e2:8e:e5:34:d6:6c:7e:32:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7798abb-711d-4f10-bc46-bceed055e1fa
        Validity
            Not Before: Oct  3 01:00:31 2024 GMT
            Not After : Jan  1 02:00:31 2025 GMT
        Subject: CN=49863595-6b42-491d-aa7b-47f3d392fdcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:0a:29:00:19:dc:4b:1f:bb:88:d3:6c:54:2e:
                    42:9d:c0:81:13:5b:a5:05:b3:ad:57:e8:a5:d8:c2:
                    d2:50:ae:73:98:e4:c3:06:2b:ac:0a:6c:0f:34:33:
                    5a:6d:0e:a6:53:14:30:b6:36:ce:1a:78:dc:68:a0:
                    ec:ce:18:d0:18:f1:78:be:6b:a8:36:0c:fd:9d:90:
                    c9:f4:ea:ce:c1:cd:25:84:21:70:cd:44:a6:a6:2a:
                    6f:a7:a7:e1:bc:a2:4c:38:c8:9d:50:54:a5:f1:95:
                    a6:0f:da:59:4f:de:e2:d2:ec:d2:3d:b8:a1:a7:86:
                    a3:8f:73:41:35:7e:79:3e:82:15:5f:b4:8d:ff:37:
                    4b:5c:39:b3:0e:69:80:8d:49:eb:40:f9:36:1b:bc:
                    1d:64:4d:39:ab:cb:d9:5e:67:7d:e8:43:99:1f:07:
                    1e:fa:ca:6c:e1:67:d9:f5:ac:42:bb:03:85:10:f3:
                    8a:75:a8:49:3b:b9:99:30:fb:20:e0:3b:b8:45:90:
                    aa:27:31:55:e9:61:c9:4d:52:a5:1b:67:1a:73:d1:
                    07:70:e9:2f:92:17:a1:11:67:64:1f:ba:6c:24:70:
                    3a:ab:aa:e6:69:64:a9:57:0a:f9:43:b4:a1:dc:32:
                    5f:7d:18:cd:b8:c0:ef:62:b7:55:43:80:36:a7:ed:
                    5f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:D0:A3:AA:C7:46:F6:94:76:2E:F6:3C:50:DD:3A:66:BC:88:FB:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/4bf343cc-4a98-3a39-9d0f-ab1e8212c29c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.crl

            X509v3 Authority Key Identifier:
                keyid:CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb54:145::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:5a:f1:29:e5:d6:60:fc:8b:0a:19:4a:da:f7:00:40:3a:5f:
         f1:00:e4:82:03:b5:02:64:e4:b7:33:64:43:4a:79:90:b0:9b:
         82:3a:ec:f5:99:4f:7d:6d:66:f0:93:65:d9:83:e8:c2:3b:2d:
         df:0d:14:14:1c:fc:89:0e:71:32:8d:67:2d:6f:c4:94:9f:b1:
         4c:3b:7c:88:95:c6:74:6a:cd:e3:d3:94:da:2d:cb:67:b5:a0:
         b6:ef:c9:a0:37:a2:9f:80:d9:c7:e5:69:b7:9f:06:8b:d5:ac:
         22:da:37:e0:8f:5a:9d:9e:2d:ee:4d:ca:df:61:6e:4f:bb:6a:
         24:66:fb:88:70:54:02:59:5d:3d:75:79:66:8c:53:75:43:b3:
         a9:63:87:a2:04:ae:c7:09:15:89:6e:89:5f:3b:a0:15:a5:ef:
         50:a6:44:a2:b7:a9:8d:40:a0:bd:df:f9:7a:65:92:72:9b:3c:
         89:f8:89:cc:e1:dc:05:d7:e4:92:3e:69:ea:62:51:2c:9c:58:
         d9:8d:14:8c:b9:fe:7c:35:97:29:11:14:dd:54:38:b3:93:62:
         61:4a:32:36:02:9d:24:18:50:73:fb:02:08:32:df:a3:a6:9a:
         40:5e:15:57:cb:c1:0d:72:d3:38:e1:50:e7:aa:5f:a9:7d:07:
         c8:f7:c3:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:22 2024 by rpki-client on console-ams.rpki-client.org