Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/56865cb1-338b-3891-a272-f9e9f164c108.roa
File:                     56865cb1-338b-3891-a272-f9e9f164c108.roa (raw, json)
Hash identifier:          4hhA4HmxDefBfhuPkL7C1yUn+xSzPqaWr9r3RsKqskU=
Subject key identifier:   C1:15:C8:21:3D:35:10:35:2B:C7:58:76:3B:1E:28:C1:06:DD:5A:DD
Certificate issuer:       /CN=34592396-ac3d-4a48-97f1-caed65436525
Certificate serial:       010D0C9F432858478F8122911FDDFE0981DD3D80
Authority key identifier: E0:F9:1F:E1:0F:59:EE:87:BC:BA:61:8A:CE:E9:74:C9:83:E1:41:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/56865cb1-338b-3891-a272-f9e9f164c108.roa
Signing time:             Wed 16 Oct 2024 13:00:43 +0000
ROA not before:           Wed 16 Oct 2024 13:00:43 +0000
ROA not after:            Tue 14 Jan 2025 14:00:43 +0000
asID:                     16509
IP address blocks:        2602:fdeb:10::/48 maxlen: 48
                          2602:fdeb:11::/48 maxlen: 48
                          2602:fdeb:12::/48 maxlen: 48
                          2602:fdeb:13::/48 maxlen: 48
                          2602:fdeb:14::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8f:81:22:91:1f:dd:fe:09:81:dd:3d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34592396-ac3d-4a48-97f1-caed65436525
        Validity
            Not Before: Oct 16 13:00:43 2024 GMT
            Not After : Jan 14 14:00:43 2025 GMT
        Subject: CN=ef19b31f-d733-4e2b-9b06-2e926089311a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:6a:42:3b:a4:2f:0c:5c:2f:2a:2b:4f:59:ef:
                    96:48:ad:68:6c:7a:89:f7:0b:d8:44:e7:86:c1:69:
                    2c:d4:43:dc:95:f9:4b:72:32:55:3b:49:6b:2e:28:
                    c3:5b:3f:a7:89:20:23:e3:0b:8c:bd:36:37:3b:42:
                    a6:d6:d0:8e:93:03:e4:52:45:11:5f:16:c9:6d:81:
                    9c:51:4d:d7:f6:90:6e:36:1b:76:1a:2e:a7:da:d4:
                    1c:47:b2:01:c8:8d:ec:5b:12:09:83:e3:ab:9d:ee:
                    7d:1e:7d:27:83:a1:58:5f:66:e8:33:14:b5:71:34:
                    42:ec:54:4e:5d:e5:6d:d6:f1:ef:01:ec:e8:5a:08:
                    29:4b:5d:b6:b2:0b:96:1f:bf:c3:d6:4c:fc:37:e6:
                    64:50:f9:7d:f2:9c:e8:cb:fe:70:f8:7c:6b:02:9b:
                    76:ec:71:5d:55:54:cd:1f:43:4d:f9:9b:ce:85:af:
                    d4:c5:72:31:5b:66:0c:57:ab:41:2a:bf:32:99:b5:
                    0f:0c:fc:c0:44:32:8e:64:90:63:45:ea:62:5d:54:
                    fb:ca:15:b0:73:ec:8c:68:3e:b4:99:c1:dd:92:29:
                    96:83:9f:e6:1e:32:3a:11:b2:0c:6a:d7:ef:7e:39:
                    b9:0f:f4:0e:4a:cb:b4:4e:e9:f4:63:96:aa:f0:d3:
                    1c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:15:C8:21:3D:35:10:35:2B:C7:58:76:3B:1E:28:C1:06:DD:5A:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/56865cb1-338b-3891-a272-f9e9f164c108.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.crl

            X509v3 Authority Key Identifier:
                keyid:E0:F9:1F:E1:0F:59:EE:87:BC:BA:61:8A:CE:E9:74:C9:83:E1:41:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fdeb:10::-2602:fdeb:14:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:7a:9d:ed:8c:17:18:29:01:2f:9a:67:7b:83:4c:9c:82:ef:
         ba:28:f4:14:c8:31:04:e7:da:e8:2f:43:2b:1d:e9:ec:74:22:
         c8:45:9e:2a:83:70:aa:24:f3:a8:77:e6:30:cb:59:f2:5c:26:
         b2:9a:10:2e:78:ac:ff:65:6e:7e:23:94:fd:3d:7a:f2:5a:68:
         9c:e2:a2:47:28:8e:22:cf:a4:0f:fe:13:94:d3:19:bb:ba:7f:
         4f:9c:4c:75:54:3e:4d:e0:5a:63:2a:74:d3:06:aa:26:ac:ae:
         7e:11:59:e0:c6:0c:85:a8:70:90:2c:0d:ed:b7:9d:af:55:a7:
         e3:be:5c:d7:a9:b6:46:00:1a:86:a7:ee:bf:e5:8c:76:ef:b8:
         32:54:ee:3b:58:8e:08:e0:e5:5d:ed:71:7f:dc:06:21:fc:5c:
         3c:7c:d4:1a:57:89:9f:af:c9:e6:ae:14:b1:17:47:fe:70:8d:
         16:0f:66:97:f3:9d:74:f5:3b:5c:0a:07:4e:d6:95:41:31:f0:
         87:25:c3:37:fe:19:e5:ed:ff:33:bf:3c:bd:12:fe:dd:34:dc:
         bc:be:53:65:dd:ca:52:36:d3:d2:b9:c5:26:81:26:d8:bd:7c:
         4b:50:f6:a9:a7:19:ab:48:63:de:3c:ab:61:46:0f:92:c4:5e:
         e7:35:c1:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:37:24 2024 by rpki-client on console-ams.rpki-client.org