Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/df79f37c-d5ed-39ca-adc2-8139c251a7fc.roa
File:                     df79f37c-d5ed-39ca-adc2-8139c251a7fc.roa (raw, json)
Hash identifier:          glB8VPw3xEmg2AYUMpVl69FQTl9CRsLEaXDtsW62WO8=
Subject key identifier:   8C:B6:30:CC:5C:53:60:FC:EA:55:1C:A2:CC:80:F7:91:15:FC:2C:14
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F4328584774FB9BBCF4CB6ADB1AE62D80
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/df79f37c-d5ed-39ca-adc2-8139c251a7fc.roa
Signing time:             Mon 07 Oct 2024 01:00:31 +0000
ROA not before:           Mon 07 Oct 2024 01:00:31 +0000
ROA not after:            Sun 05 Jan 2025 02:00:31 +0000
asID:                     399976
IP address blocks:        2602:80c:2012::/48 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:74:fb:9b:bc:f4:cb:6a:db:1a:e6:2d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Oct  7 01:00:31 2024 GMT
            Not After : Jan  5 02:00:31 2025 GMT
        Subject: CN=00dedb6c-16ff-4bd5-baf7-d5c5ac316149
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:b6:1c:5b:20:fc:89:fb:b3:a9:6b:0b:86:54:
                    10:8d:7b:d9:fc:ac:6d:5f:54:f6:4c:be:a1:2b:d7:
                    75:f5:48:84:2c:a5:96:ef:8a:2c:2d:82:53:d1:fa:
                    ea:c7:3b:fb:2b:e2:ff:f3:69:08:3d:d6:be:47:c9:
                    86:7e:dc:7f:f9:25:b8:b4:e2:42:ec:03:23:89:b8:
                    c7:d3:36:fd:b0:0b:af:f9:65:f3:45:e2:a9:48:7a:
                    94:97:c7:cd:e7:7d:7f:d8:4e:70:cc:d5:01:a2:d7:
                    e5:5e:16:cf:73:d3:4a:e9:47:fe:6a:33:1d:9c:0a:
                    40:35:68:00:f4:2e:66:ad:34:dd:a2:54:ff:e4:bc:
                    33:31:62:46:c9:47:84:bf:ee:38:5e:a0:a0:f4:29:
                    87:06:c2:4e:d6:59:63:e5:d2:eb:ef:a7:f4:77:45:
                    de:5a:1b:a9:c5:65:f0:3b:3c:1f:f9:7f:a4:65:ff:
                    bc:94:63:9e:ca:fd:37:da:10:b9:04:29:1d:50:80:
                    e3:a8:cb:bb:2f:ca:3a:ab:55:4b:c9:38:46:2d:aa:
                    a8:30:7c:2d:81:28:b6:50:a3:3c:20:81:ec:12:56:
                    58:c7:22:70:9c:d7:fd:d6:c6:67:21:32:8c:1f:6a:
                    75:a0:73:34:f8:a0:e2:1d:bc:fd:af:48:b8:88:7a:
                    3d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:B6:30:CC:5C:53:60:FC:EA:55:1C:A2:CC:80:F7:91:15:FC:2C:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/df79f37c-d5ed-39ca-adc2-8139c251a7fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:2012::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:c7:45:3d:bb:38:78:a4:37:ca:53:08:8e:05:7c:95:d3:e1:
         db:bd:4c:2b:31:a6:9c:81:6a:e8:f0:c4:13:ee:9f:58:59:2d:
         7d:4f:be:d6:40:48:36:91:92:2a:2b:e2:ed:61:5d:88:da:38:
         f2:84:88:5b:e2:e9:ce:66:7d:87:d6:f0:a0:6f:29:18:20:cf:
         6a:89:4c:29:6f:26:41:fd:6f:7e:4c:38:fa:96:38:78:48:16:
         e0:0d:38:35:cf:7c:99:bb:4f:db:b8:4d:2c:16:d7:6a:bc:2e:
         9d:dc:62:35:b5:8c:0d:1f:31:f7:6a:7c:20:29:4e:f2:95:48:
         e8:f8:7c:1e:3b:41:1e:76:4f:3f:f8:96:3e:97:37:bd:e3:c0:
         28:00:57:4c:73:41:ee:22:3d:d9:10:6e:1c:3d:4f:f4:40:a2:
         0c:52:d1:aa:51:d4:92:cb:f2:d2:a8:b3:d4:67:f8:d5:41:7a:
         ce:74:1c:46:65:8c:9f:97:89:19:ba:80:a4:db:85:37:cb:41:
         83:cc:8e:3e:75:6a:3f:7a:90:e2:67:5e:f2:f6:45:d8:f3:12:
         0a:7b:77:3f:4e:39:f7:e0:b2:6c:da:21:fd:b4:74:b6:2f:2d:
         41:62:9d:cd:70:0b:48:1a:ee:5b:fd:94:3a:ca:68:a4:cc:fc:
         0e:f5:43:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:58:00 2024 by rpki-client on console-ams.rpki-client.org