Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/8c736370-3653-3f0e-b1db-5dae81d69d87.roa
File:                     8c736370-3653-3f0e-b1db-5dae81d69d87.roa (raw, json)
Hash identifier:          +zZZqFoGKGAqQBPhKoy3iS2XG8/DzWAc4naHIUpZID0=
Subject key identifier:   EF:81:64:06:E2:34:95:20:83:64:64:20:51:A0:41:31:E2:6F:4A:2C
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F4328584774FBAB96975A7369BF6FDB80
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/8c736370-3653-3f0e-b1db-5dae81d69d87.roa
Signing time:             Mon 07 Oct 2024 01:00:31 +0000
ROA not before:           Mon 07 Oct 2024 01:00:31 +0000
ROA not after:            Sun 05 Jan 2025 02:00:31 +0000
asID:                     399976
IP address blocks:        2602:80c:20bf::/48 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:74:fb:ab:96:97:5a:73:69:bf:6f:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Oct  7 01:00:31 2024 GMT
            Not After : Jan  5 02:00:31 2025 GMT
        Subject: CN=960ff7db-a53f-4f05-a067-3e5743566f53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:23:5f:c3:d6:f2:1e:b0:90:d3:bd:c2:f6:e6:
                    8f:30:46:ef:5c:d4:6b:36:ed:4c:ed:d9:d4:14:0a:
                    bd:a9:9c:29:be:a8:21:d1:dc:20:1f:85:e4:d0:34:
                    e5:30:f2:94:d1:3d:fc:82:8d:bb:3f:4f:a5:63:a3:
                    c6:57:d6:21:a0:00:de:21:fd:62:83:f7:a0:e4:77:
                    46:c2:0a:25:ff:ca:39:a3:14:41:b5:e9:df:70:fa:
                    a4:e5:10:03:65:91:14:85:13:e7:dc:11:a5:7a:95:
                    df:fa:18:d9:c9:83:4b:eb:43:fd:bf:de:75:0d:90:
                    4f:e6:93:00:58:cd:80:b5:40:7a:8b:f5:c9:bf:1d:
                    a4:59:83:17:68:1a:2d:f4:e3:90:9a:db:d6:01:c6:
                    1f:f9:ae:9f:8d:00:25:e5:7d:09:10:d1:16:df:c1:
                    c8:4b:e2:b5:63:08:14:15:f0:ac:d5:4a:bf:ec:83:
                    66:44:f7:2f:f6:b7:8d:a0:68:10:38:72:88:ad:89:
                    96:c1:52:43:be:db:3f:00:0f:25:28:87:15:5d:d9:
                    ea:db:f3:a9:dd:a3:e7:90:28:60:3b:e8:47:eb:f7:
                    dc:a9:14:e2:5f:ba:ae:6e:cf:40:07:05:88:5a:3f:
                    3b:24:bd:af:88:83:d0:b8:e6:e5:7f:aa:4f:bd:d7:
                    38:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:81:64:06:E2:34:95:20:83:64:64:20:51:A0:41:31:E2:6F:4A:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/8c736370-3653-3f0e-b1db-5dae81d69d87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:20bf::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:b7:76:01:8b:2e:db:26:d8:92:8b:45:63:cf:74:75:44:66:
         25:e6:d5:36:50:b2:45:c6:d6:ec:3b:9a:9b:18:42:6a:e5:f9:
         66:f9:4c:5d:6b:55:b8:cf:05:d2:ba:35:8e:4e:a0:e6:07:f1:
         2d:00:9c:7f:b8:cb:e6:bb:1b:4d:7e:4b:3f:cd:da:34:ab:84:
         37:91:7e:15:8a:20:fa:67:06:4a:f8:53:38:bc:60:cc:c7:fb:
         35:0b:a0:81:fd:d6:f2:09:e8:c6:8a:7c:d2:4e:59:b8:49:1d:
         4d:f6:05:83:90:e5:76:b1:88:41:e0:d3:a2:d6:fc:b7:33:c0:
         46:09:c4:21:00:2d:58:24:ac:a8:a7:99:bd:af:e6:57:5a:c4:
         8b:42:af:0e:d9:02:e5:5b:34:8f:32:37:ac:ad:a5:57:3e:12:
         9c:a2:2f:25:28:1b:c8:d3:4e:12:6e:75:81:63:05:0e:49:e2:
         22:b4:98:2d:ed:21:61:87:9b:55:bb:69:f8:e0:6c:3c:94:9d:
         89:f8:fa:2d:04:2e:c7:22:f9:cc:90:12:26:92:40:1a:b8:ce:
         8d:e9:dd:e7:a9:4c:2e:45:14:df:63:17:68:64:9a:04:80:e7:
         df:17:0a:c2:91:35:17:e6:3c:45:8c:75:db:68:43:ca:8f:ac:
         0e:f4:b4:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:37:04 2024 by rpki-client on console-fra.rpki-client.org