Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69750c1e-d95a-4feb-83fe-2dde8c2f5c68/ab3c1701-3668-35b5-882d-128a1ecca565.roa
File:                     ab3c1701-3668-35b5-882d-128a1ecca565.roa (raw, json)
Hash identifier:          HSfT348DFjJkxdhndNxIWgUJHUoV9K7Ewfs3qyuWF4Q=
Subject key identifier:   F5:60:26:E5:68:ED:F1:61:FE:29:98:7D:BE:48:5F:33:CB:CF:8B:D8
Certificate issuer:       /CN=69750c1e-d95a-4feb-83fe-2dde8c2f5c68
Certificate serial:       010D0C9F4328584726D07FAAA365509E4DEB7900
Authority key identifier: 5B:B4:1D:53:E6:96:10:06:F2:9C:49:C9:17:1F:12:42:9E:7B:8E:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69750c1e-d95a-4feb-83fe-2dde8c2f5c68.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69750c1e-d95a-4feb-83fe-2dde8c2f5c68/ab3c1701-3668-35b5-882d-128a1ecca565.roa
Signing time:             Mon 09 Sep 2024 01:00:31 +0000
ROA not before:           Mon 09 Sep 2024 01:00:31 +0000
ROA not after:            Sun 08 Dec 2024 02:00:31 +0000
asID:                     40676
IP address blocks:        2602:fea6::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69750c1e-d95a-4feb-83fe-2dde8c2f5c68/69750c1e-d95a-4feb-83fe-2dde8c2f5c68.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69750c1e-d95a-4feb-83fe-2dde8c2f5c68/69750c1e-d95a-4feb-83fe-2dde8c2f5c68.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69750c1e-d95a-4feb-83fe-2dde8c2f5c68.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:26:d0:7f:aa:a3:65:50:9e:4d:eb:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69750c1e-d95a-4feb-83fe-2dde8c2f5c68
        Validity
            Not Before: Sep  9 01:00:31 2024 GMT
            Not After : Dec  8 02:00:31 2024 GMT
        Subject: CN=12cb03cd-f4b2-440e-b370-40dda0e9d85a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:4a:65:cc:1a:b5:e0:43:9b:5c:7d:17:68:af:
                    08:a0:a1:a8:7c:9a:a9:f9:13:36:66:8a:c4:15:b6:
                    ed:55:32:33:79:87:e3:ac:46:c1:a0:d7:b3:f8:23:
                    91:17:c3:a3:a4:5c:3e:f9:ca:03:51:e7:9c:5d:4c:
                    1f:34:a4:e4:ee:8a:32:57:9b:12:a1:22:f9:60:71:
                    a3:57:55:32:b1:3d:69:c8:42:5c:fd:ca:13:77:ef:
                    14:42:c9:84:d8:50:a3:56:b1:47:53:55:02:68:83:
                    63:ea:d7:3a:f7:9d:2a:ff:85:04:b2:22:46:e3:bc:
                    83:d2:38:7b:d6:f0:19:5a:0e:57:fa:0a:6f:ed:27:
                    20:8b:a0:d1:12:fa:09:d3:10:cb:6c:89:75:1c:3c:
                    a2:66:47:d9:c3:a4:7b:23:90:9a:29:d5:8d:a6:02:
                    bf:e7:28:42:d9:96:b6:ad:aa:b0:44:2b:e1:0b:7e:
                    f4:03:bd:5b:30:28:fa:cc:d5:c4:44:ef:1b:9c:04:
                    e2:23:6a:9d:43:61:c3:7b:a3:b9:11:84:89:79:4a:
                    61:11:ec:2f:e6:62:a6:67:ca:4c:39:e4:72:7d:32:
                    71:b8:17:c4:24:08:3d:c2:8f:7e:bd:f5:6e:37:23:
                    77:cd:a9:d4:7e:68:f5:2a:46:92:51:bd:3b:97:6e:
                    10:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:60:26:E5:68:ED:F1:61:FE:29:98:7D:BE:48:5F:33:CB:CF:8B:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69750c1e-d95a-4feb-83fe-2dde8c2f5c68/ab3c1701-3668-35b5-882d-128a1ecca565.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69750c1e-d95a-4feb-83fe-2dde8c2f5c68/69750c1e-d95a-4feb-83fe-2dde8c2f5c68.crl

            X509v3 Authority Key Identifier:
                keyid:5B:B4:1D:53:E6:96:10:06:F2:9C:49:C9:17:1F:12:42:9E:7B:8E:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69750c1e-d95a-4feb-83fe-2dde8c2f5c68.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fea6::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:fd:da:81:35:b1:fd:0e:05:d6:3a:72:b3:1e:d3:84:f1:73:
         1e:a4:1f:d5:15:d0:ec:64:84:82:3f:c0:72:31:29:b1:91:bc:
         5c:0f:e1:7b:9f:00:7d:ed:b3:8c:51:a2:f4:1d:7a:ca:46:b7:
         bd:a5:27:c0:55:58:3b:8a:20:07:6d:8b:3a:6e:d9:b3:ab:ec:
         b0:6b:24:e6:3e:8c:74:9c:ff:ca:d0:69:9a:59:27:49:36:93:
         d1:5c:41:1a:4a:31:5f:25:09:dd:c4:ff:5d:38:61:b1:3f:2e:
         cc:12:53:d2:06:4d:4d:75:45:b3:2c:ec:1d:7b:05:00:39:91:
         50:fb:ea:11:ca:be:5c:25:b1:85:a1:eb:f2:2e:02:f9:d7:ef:
         a8:8f:4b:69:55:09:31:12:47:38:81:6b:ab:ca:17:4b:1f:bd:
         2f:3e:ec:9a:dd:71:70:d6:4a:19:7d:77:08:5b:e9:5d:d7:54:
         22:0f:48:17:cd:dc:bd:8c:c8:fb:0f:8c:54:70:c9:5b:c2:d5:
         9b:39:36:e8:c7:d6:84:87:2b:70:1d:d6:66:56:15:45:b5:35:
         85:0a:5b:1d:82:e1:64:63:46:0e:28:28:bc:1f:36:a1:a1:a4:
         94:7f:ce:96:96:4c:9d:e1:18:c3:5c:da:c3:44:6a:8a:8e:42:
         40:36:f5:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:28:39 2024 by rpki-client on console-fra.rpki-client.org