Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/78061b29-d846-3107-a526-47fd5a8d4b89.roa
File:                     78061b29-d846-3107-a526-47fd5a8d4b89.roa (raw, json)
Hash identifier:          yi6TnEajVSDNzhXiaYslqZ5/iSPn3+oCZcp+u4TWfmw=
Subject key identifier:   F7:8D:2E:CE:D3:65:4A:45:F0:E3:69:62:BB:56:9D:79:1E:7C:96:A2
Certificate issuer:       /CN=36ee0355-1d23-4ead-8858-b26a81c6add0
Certificate serial:       010D0C9F43285847BAC6B078B79D96AA375107C0
Authority key identifier: A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/78061b29-d846-3107-a526-47fd5a8d4b89.roa
Signing time:             Fri 01 Nov 2024 01:00:30 +0000
ROA not before:           Fri 01 Nov 2024 01:00:30 +0000
ROA not after:            Thu 30 Jan 2025 02:00:30 +0000
asID:                     3423
IP address blocks:        2602:fbdc::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ba:c6:b0:78:b7:9d:96:aa:37:51:07:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36ee0355-1d23-4ead-8858-b26a81c6add0
        Validity
            Not Before: Nov  1 01:00:30 2024 GMT
            Not After : Jan 30 02:00:30 2025 GMT
        Subject: CN=6c2cab78-823e-424e-b9aa-0b272eccc33b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:4b:8d:ed:a6:83:c5:49:d9:6b:f5:fa:07:1d:
                    08:d8:33:10:54:6b:bc:fe:c1:16:40:ab:f0:c4:56:
                    93:c9:bf:98:ca:2d:7c:ec:3e:3e:ac:05:73:60:56:
                    75:59:60:f9:aa:32:83:15:50:ac:58:d6:bf:9a:d9:
                    18:35:b8:24:d5:30:db:71:ad:ec:ca:21:73:8a:31:
                    7a:51:fe:95:a2:f6:75:92:2f:2d:43:44:a8:06:86:
                    86:d5:a8:3e:29:17:bd:48:d8:5a:50:7b:22:e7:07:
                    55:68:9f:7c:59:f3:64:88:07:73:be:3b:04:17:9b:
                    ac:08:7f:82:80:e6:9c:9b:a3:bb:a3:8c:06:f2:c7:
                    c0:3a:30:e4:9d:d2:ac:aa:ac:97:db:be:ce:a2:9f:
                    dc:d1:cf:cc:a2:f9:f3:01:83:6d:54:07:aa:af:fe:
                    98:b1:f4:00:73:f2:43:0f:d2:2b:14:86:85:00:38:
                    48:94:ad:64:f5:ec:01:9c:8f:85:58:51:47:85:ea:
                    22:ea:2f:7a:ec:4c:cb:02:db:4f:e0:79:fd:d7:d1:
                    06:5f:e4:78:b6:dd:00:48:c4:f0:2a:ee:a4:02:fd:
                    55:9a:0c:ab:37:13:9e:88:ed:8d:11:9a:77:00:7e:
                    89:76:d7:77:a8:7f:07:29:0f:2e:20:3b:59:2a:d8:
                    3e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:8D:2E:CE:D3:65:4A:45:F0:E3:69:62:BB:56:9D:79:1E:7C:96:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/78061b29-d846-3107-a526-47fd5a8d4b89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl

            X509v3 Authority Key Identifier:
                keyid:A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbdc::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:59:5f:f7:ee:8f:ac:7c:c8:30:ca:6b:f5:b3:d7:32:75:77:
         1d:12:68:36:54:d7:f3:9c:5c:96:01:c3:5d:ae:4b:d5:d2:c7:
         aa:2e:d6:5e:57:8e:ff:8a:23:e0:4c:46:5f:16:ca:c0:c1:ab:
         d8:6b:e2:cc:a7:18:29:0c:22:7f:00:f6:a1:a1:f6:84:d8:cf:
         4e:8a:17:d7:70:92:5e:07:56:b1:48:66:34:9a:ba:eb:3c:6b:
         7c:d8:bb:49:ec:a2:fb:e0:28:e6:7b:05:6c:e0:3a:80:ff:13:
         10:08:c3:4f:7b:9c:c0:da:b7:98:3e:c2:ce:6b:42:7f:5f:20:
         7c:ba:da:58:4f:73:95:f5:a5:1c:f9:33:63:f3:a6:1e:f3:11:
         ec:89:b6:b4:42:fb:64:d8:88:e9:2c:c2:8e:f1:71:23:1e:4a:
         9b:df:d0:01:b9:c7:7c:19:5d:f5:df:1e:7c:0f:70:c2:6c:b7:
         9b:d1:15:06:ea:62:63:21:f8:6d:0d:bc:5a:67:d2:83:30:91:
         ea:8b:5a:03:e6:67:e0:6c:b8:bd:4b:a5:25:c8:82:35:dd:3d:
         8d:57:01:64:68:e8:80:bf:34:9b:db:f9:07:d5:e6:9c:c2:3f:
         16:fb:21:2c:70:01:1f:13:83:51:b6:3c:95:23:5e:49:f5:92:
         c0:a5:85:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:05:46 2024 by rpki-client on console-fra.rpki-client.org