Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02e3db6d-40b5-4639-a499-a02b80a4befe/79ab3f69-c62e-379a-8fe7-27de1b927dd8.roa
File:                     79ab3f69-c62e-379a-8fe7-27de1b927dd8.roa (raw, json)
Hash identifier:          8fERFcyJ+32kdumgvChDQPTNEWsimcdhIaGj/Ev85bM=
Subject key identifier:   4B:9F:F5:D2:C0:07:95:0B:AB:DE:78:46:2A:91:FA:F4:4A:21:21:0A
Certificate issuer:       /CN=02e3db6d-40b5-4639-a499-a02b80a4befe
Certificate serial:       010D0C9F43285847E8F4C9291347BFDFC03618F0
Authority key identifier: CC:62:08:D3:2D:E8:6B:71:2B:A1:F2:C0:86:A8:B6:62:99:81:EF:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02e3db6d-40b5-4639-a499-a02b80a4befe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02e3db6d-40b5-4639-a499-a02b80a4befe/79ab3f69-c62e-379a-8fe7-27de1b927dd8.roa
Signing time:             Sun 17 Nov 2024 14:00:38 +0000
ROA not before:           Sun 17 Nov 2024 14:00:38 +0000
ROA not after:            Sat 15 Feb 2025 14:00:38 +0000
asID:                     62488
IP address blocks:        2604:cc80::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02e3db6d-40b5-4639-a499-a02b80a4befe/02e3db6d-40b5-4639-a499-a02b80a4befe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02e3db6d-40b5-4639-a499-a02b80a4befe/02e3db6d-40b5-4639-a499-a02b80a4befe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02e3db6d-40b5-4639-a499-a02b80a4befe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e8:f4:c9:29:13:47:bf:df:c0:36:18:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02e3db6d-40b5-4639-a499-a02b80a4befe
        Validity
            Not Before: Nov 17 14:00:38 2024 GMT
            Not After : Feb 15 14:00:38 2025 GMT
        Subject: CN=eb7edf47-3caa-4248-93d2-8392550dc878
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e4:58:be:fd:80:26:d0:f5:c5:64:eb:00:62:
                    14:cd:90:1e:28:0b:6b:03:f9:5b:6a:f5:1e:79:74:
                    ae:d1:8c:30:a6:02:65:bd:09:eb:f7:10:aa:ab:22:
                    e1:96:3c:fb:9b:fa:d8:9c:45:74:43:4e:a1:f6:79:
                    88:88:f4:f5:22:eb:d0:30:ac:d7:51:14:30:b0:d3:
                    11:eb:12:02:58:3c:6d:cf:b1:b9:2d:61:3e:1c:a4:
                    b4:b4:05:83:22:7c:d6:45:ec:80:36:9a:16:50:d3:
                    28:57:e3:2e:92:66:8c:cb:c7:33:3e:bd:ce:67:7e:
                    05:29:3b:1a:25:43:77:dc:b7:02:cc:0a:ab:91:24:
                    88:cf:0c:8f:4f:6b:0e:80:58:24:13:e1:c1:14:43:
                    30:4b:e3:fe:63:c4:4e:40:be:6b:cf:5d:05:b9:0b:
                    99:98:22:e2:dc:e8:92:c8:b2:01:63:8d:8f:09:cf:
                    dd:1a:ba:a4:44:e7:7c:f3:9b:e8:8d:4d:12:02:bc:
                    57:cf:b6:b2:a2:21:ea:ba:01:bb:cb:ef:6a:7b:69:
                    cc:b9:e6:61:dd:e3:21:60:45:e3:92:ef:2c:68:64:
                    00:f2:9a:0d:5b:56:4e:2b:07:e0:9e:41:3b:cc:95:
                    81:7e:a1:ab:d3:f7:20:51:a1:81:21:f8:6d:af:39:
                    89:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:9F:F5:D2:C0:07:95:0B:AB:DE:78:46:2A:91:FA:F4:4A:21:21:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02e3db6d-40b5-4639-a499-a02b80a4befe/79ab3f69-c62e-379a-8fe7-27de1b927dd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02e3db6d-40b5-4639-a499-a02b80a4befe/02e3db6d-40b5-4639-a499-a02b80a4befe.crl

            X509v3 Authority Key Identifier:
                keyid:CC:62:08:D3:2D:E8:6B:71:2B:A1:F2:C0:86:A8:B6:62:99:81:EF:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02e3db6d-40b5-4639-a499-a02b80a4befe.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:cc80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:88:e4:00:0f:4a:e2:20:4a:f3:df:6c:83:89:d2:c5:34:f7:
         52:0c:59:e9:f3:dc:c6:de:b4:8c:65:c7:62:f8:28:66:00:72:
         9a:db:69:9e:95:cf:e5:90:56:3e:73:a3:66:13:df:cb:e3:e0:
         75:fe:63:e7:25:e1:69:2c:a0:ed:a4:63:83:f3:de:45:ff:cc:
         e2:09:5d:b2:38:9a:0a:64:f0:43:a3:33:ea:65:87:dc:70:f6:
         9f:26:01:00:21:58:85:4f:56:4e:f3:88:b2:df:0b:ca:7c:f9:
         6e:a9:15:9f:90:19:91:6e:05:f0:e1:7c:20:67:75:53:a7:b7:
         b9:83:69:81:5a:8d:bf:b0:ba:ec:5a:9c:ee:4f:40:96:c0:59:
         a3:e8:ef:19:4b:eb:d2:1e:6b:60:4c:58:ab:e9:35:b0:7c:69:
         f7:67:e2:b3:96:88:6c:b0:db:2d:e6:a8:36:e7:95:95:27:f9:
         95:dd:d6:e1:74:c9:63:72:96:9f:e8:51:df:f4:2b:72:ea:8a:
         c2:ff:fd:e8:df:c8:a5:4e:07:ea:8d:29:32:59:3d:28:0d:ac:
         69:cc:c9:7e:ef:51:45:57:71:54:c3:15:25:2e:f3:08:2b:c7:
         5b:38:ae:30:31:ae:e1:8f:ae:b9:a2:a0:c6:58:3b:0e:6b:b6:
         72:65:f5:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:36:18 2024 by rpki-client on console-ams.rpki-client.org