Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5fb6f799-d584-48a1-9c74-50e91497918a/a00efded-ad39-398d-ade8-0b098b09250d.roa
File:                     a00efded-ad39-398d-ade8-0b098b09250d.roa (raw, json)
Hash identifier:          Wze+s3rpfsRtF3V6RUKvT0WJSNPERrwv6MIVG8923xc=
Subject key identifier:   0D:38:FB:F2:76:E7:AB:EC:A5:3D:60:E8:44:D9:6D:54:67:F0:24:05
Certificate issuer:       /CN=5fb6f799-d584-48a1-9c74-50e91497918a
Certificate serial:       010D0C9F4328584765A0F0A4E006EA79BD2FF500
Authority key identifier: B4:66:3F:CE:6F:9C:67:45:04:4A:C3:43:91:B7:37:A9:FC:E2:26:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5fb6f799-d584-48a1-9c74-50e91497918a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5fb6f799-d584-48a1-9c74-50e91497918a/a00efded-ad39-398d-ade8-0b098b09250d.roa
Signing time:             Tue 01 Oct 2024 13:00:42 +0000
ROA not before:           Tue 01 Oct 2024 13:00:42 +0000
ROA not after:            Mon 30 Dec 2024 14:00:42 +0000
asID:                     7018
IP address blocks:        2600:1700::/28 maxlen: 28
                          2602:300::/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5fb6f799-d584-48a1-9c74-50e91497918a/5fb6f799-d584-48a1-9c74-50e91497918a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5fb6f799-d584-48a1-9c74-50e91497918a/5fb6f799-d584-48a1-9c74-50e91497918a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5fb6f799-d584-48a1-9c74-50e91497918a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:65:a0:f0:a4:e0:06:ea:79:bd:2f:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fb6f799-d584-48a1-9c74-50e91497918a
        Validity
            Not Before: Oct  1 13:00:42 2024 GMT
            Not After : Dec 30 14:00:42 2024 GMT
        Subject: CN=5d23b08c-6c9b-4977-b317-b1a9b896b561
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:91:ab:4e:13:2e:8a:2e:1c:04:25:c7:ac:ca:
                    5a:0b:d9:27:cc:a1:fd:71:66:19:b2:17:f8:ea:63:
                    f4:e8:0e:a6:0e:26:fc:2d:88:ef:ad:26:f6:57:f0:
                    3e:c2:52:34:ba:ac:c7:c8:05:a4:46:ae:04:32:07:
                    39:16:b3:93:1d:38:91:81:24:41:5e:cc:9d:45:5e:
                    1f:7a:53:36:f7:1c:98:3b:91:f1:a3:b3:00:34:cb:
                    3c:49:03:10:22:24:7e:2e:d2:8c:9f:9e:b8:33:ff:
                    37:1c:98:82:00:c6:d2:cd:6e:6d:fd:16:ba:f4:fd:
                    a9:51:2b:9e:1e:2d:3a:17:e1:8b:d3:db:76:f2:f8:
                    29:3d:c0:cf:bd:cf:f7:3b:a9:d5:c3:a4:4a:d5:a3:
                    3d:99:6f:7c:3d:9b:98:bf:87:34:cc:34:3a:b2:42:
                    a3:1f:f8:d2:11:bb:35:2c:0c:a6:29:59:7f:a7:f2:
                    8c:bb:62:72:7a:75:0c:71:68:be:05:d5:39:af:19:
                    e6:e2:38:7a:63:dd:e8:15:4e:93:da:1b:b1:24:9d:
                    2c:68:57:0d:56:0d:5d:75:c4:a5:4e:43:29:9c:25:
                    80:25:f5:3b:c4:93:a1:fa:41:e4:63:49:c2:ac:99:
                    39:be:22:91:70:28:4a:ed:3d:29:c3:81:66:89:15:
                    42:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:38:FB:F2:76:E7:AB:EC:A5:3D:60:E8:44:D9:6D:54:67:F0:24:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5fb6f799-d584-48a1-9c74-50e91497918a/a00efded-ad39-398d-ade8-0b098b09250d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5fb6f799-d584-48a1-9c74-50e91497918a/5fb6f799-d584-48a1-9c74-50e91497918a.crl

            X509v3 Authority Key Identifier:
                keyid:B4:66:3F:CE:6F:9C:67:45:04:4A:C3:43:91:B7:37:A9:FC:E2:26:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5fb6f799-d584-48a1-9c74-50e91497918a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1700::/28
                  2602:300::/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:ff:4d:06:0b:44:5e:24:48:d2:84:a6:26:1b:ad:59:9d:51:
         45:3f:51:bd:2f:e2:84:62:1b:9a:e1:a7:d7:85:34:3b:5d:ed:
         83:10:af:f8:57:8e:3c:31:09:d3:be:6e:35:f5:02:8f:dd:ac:
         f5:96:a8:ef:5b:6e:51:f1:9e:e5:78:de:f4:90:da:d6:86:85:
         e3:40:bc:44:39:14:4f:6d:3f:f4:e0:72:1c:ff:94:d1:3a:13:
         e9:9c:c1:93:b4:f5:1a:b7:35:36:5b:c4:11:06:1d:4c:5e:06:
         36:19:99:7d:26:fd:9a:99:df:5f:19:12:ef:58:1a:35:17:8b:
         82:5e:57:74:53:4b:5c:23:c4:72:5a:e4:5c:62:32:37:72:8d:
         00:87:8e:57:ab:ae:65:0a:cc:5a:3a:fc:1e:6e:8f:45:f0:f7:
         37:b9:bd:59:61:7a:87:c7:c8:20:65:11:35:08:f5:c7:b8:29:
         f1:f2:43:92:14:4a:28:b5:65:28:a0:46:df:58:42:6f:0c:ac:
         db:a5:d9:27:b0:a7:79:14:0b:ed:69:a2:61:84:c4:3d:98:f5:
         48:3b:8b:c3:d8:fe:40:25:c9:db:3a:f4:5c:be:22:a6:7d:58:
         00:34:34:b1:bd:9b:ab:42:7f:34:66:05:6b:f7:08:8d:ac:f3:
         b3:75:32:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:14:06 2024 by rpki-client on console-ams.rpki-client.org