Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/6c7472b0-6d12-33be-a9f9-85e26dc54729.roa
File:                     6c7472b0-6d12-33be-a9f9-85e26dc54729.roa (raw, json)
Hash identifier:          kM4bisYmkCTj2+mkI3zSaExl+sz40LBAo3NmQP5/A3g=
Subject key identifier:   2E:CA:1D:DF:0E:75:35:FC:24:8C:F2:B9:AF:E6:95:E5:ED:E1:20:21
Certificate issuer:       /CN=33c78d60-34eb-4fed-8e25-925b95a30c8e
Certificate serial:       010D0C9F432858479C111F5358B9A983D2DBB6F0
Authority key identifier: 5F:65:25:B0:69:97:21:82:E6:E2:D3:91:46:77:BA:5C:33:D3:E0:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/6c7472b0-6d12-33be-a9f9-85e26dc54729.roa
Signing time:             Mon 21 Oct 2024 01:00:31 +0000
ROA not before:           Mon 21 Oct 2024 01:00:31 +0000
ROA not after:            Sun 19 Jan 2025 02:00:31 +0000
asID:                     33039
IP address blocks:        2602:f95c:ca1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9c:11:1f:53:58:b9:a9:83:d2:db:b6:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33c78d60-34eb-4fed-8e25-925b95a30c8e
        Validity
            Not Before: Oct 21 01:00:31 2024 GMT
            Not After : Jan 19 02:00:31 2025 GMT
        Subject: CN=6465c553-65a4-4d9d-8e0b-1c198c5294af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:80:96:c5:38:15:b6:5d:d4:cc:93:5e:ce:77:
                    c7:32:a5:be:a3:8c:6b:06:1e:3b:a6:83:25:eb:06:
                    0b:ab:a1:ff:7a:04:c5:f9:a7:10:3e:13:b5:bc:cf:
                    f5:8b:0a:b8:00:0e:30:a2:20:27:03:c5:43:11:32:
                    97:05:25:bf:4a:b6:a4:e3:15:e3:17:a5:ff:ba:48:
                    eb:b1:e2:93:7a:07:63:c1:5b:90:54:67:dc:a8:5a:
                    0d:4d:81:47:2f:fb:f1:49:16:84:69:c5:83:9d:dc:
                    0b:d4:88:22:22:cb:f2:60:0a:91:4b:5c:6a:cd:40:
                    96:6b:80:8e:d7:ba:02:ad:9e:38:7c:42:db:01:d6:
                    bb:9d:52:91:cb:75:ee:f2:9c:53:7c:4f:78:7c:6d:
                    d0:8a:c1:89:4e:c5:64:23:6e:ae:02:d5:64:4f:23:
                    f5:85:74:e4:2b:59:27:97:a2:95:c7:54:8c:a3:ed:
                    18:de:3d:8e:04:43:f9:9b:16:ed:7a:b8:79:b3:dc:
                    1c:17:95:fd:73:8b:1a:23:89:42:72:3d:c3:13:89:
                    23:a1:bd:c2:50:04:f0:a0:07:c3:56:5c:5b:b9:f2:
                    20:12:7b:8d:f2:e9:4a:8a:50:39:76:9b:8f:72:e3:
                    c5:87:ce:f3:3f:f3:34:8d:c1:07:8b:b0:4e:62:52:
                    ac:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:CA:1D:DF:0E:75:35:FC:24:8C:F2:B9:AF:E6:95:E5:ED:E1:20:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/6c7472b0-6d12-33be-a9f9-85e26dc54729.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.crl

            X509v3 Authority Key Identifier:
                keyid:5F:65:25:B0:69:97:21:82:E6:E2:D3:91:46:77:BA:5C:33:D3:E0:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f95c:ca1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:b1:83:49:17:01:02:d2:8e:0b:a6:3e:23:27:ef:c1:73:11:
         95:dc:97:2b:9d:16:37:f3:92:32:4f:73:b8:e3:72:46:a8:7c:
         8c:95:ce:7d:89:8b:78:db:f7:af:4a:92:eb:4e:7f:75:89:34:
         97:fd:45:b5:e3:8c:04:fd:a2:45:4e:aa:47:ee:39:ba:d5:76:
         8f:74:9b:28:64:4d:c9:85:15:bb:0e:ca:21:e5:5e:82:96:2d:
         b7:b9:53:1f:0c:e3:1e:bc:04:2a:6a:a7:46:81:cb:af:f7:c7:
         b9:25:fc:13:7d:27:26:2e:23:65:43:20:d3:fc:cd:94:9d:2a:
         cb:43:ad:d1:6a:d5:00:fe:93:ec:b9:12:2b:1b:b1:79:89:48:
         1b:af:a9:6a:9c:e2:15:05:22:52:aa:b1:ac:6a:c3:6e:92:a5:
         53:6b:4b:d3:7e:14:b9:04:9b:aa:16:67:63:10:bd:cf:c2:21:
         ac:77:98:01:04:74:d2:44:63:7e:9b:2a:22:07:4a:83:12:fc:
         63:37:60:05:f7:7e:c1:3b:c7:39:8d:d6:88:4a:89:cb:55:05:
         ef:0d:e7:b8:04:ce:7f:9c:5d:b3:be:33:ce:b3:37:b5:69:60:
         09:81:61:27:50:6f:5b:9d:20:ea:b8:3a:54:79:1e:b2:13:c4:
         7e:98:0b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:54:31 2024 by rpki-client on console-ams.rpki-client.org