Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/9f2004b3-f46d-3e83-a948-cc255fe3a018.roa
File:                     9f2004b3-f46d-3e83-a948-cc255fe3a018.roa (raw, json)
Hash identifier:          T7L8zoIl4k0yQPwpCN3GJFo9FuxAvDTztVpnn65wqYk=
Subject key identifier:   FE:10:DE:86:02:56:08:D3:D8:BD:8A:CB:49:59:BA:A8:E4:1E:EC:84
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F43285847294AA70F60392C777330C5C0
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/9f2004b3-f46d-3e83-a948-cc255fe3a018.roa
Signing time:             Mon 09 Sep 2024 22:18:30 +0000
ROA not before:           Mon 09 Sep 2024 22:18:30 +0000
ROA not after:            Sun 08 Dec 2024 23:18:30 +0000
asID:                     62651
IP address blocks:        2604:fc80:2800::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:29:4a:a7:0f:60:39:2c:77:73:30:c5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Sep  9 22:18:30 2024 GMT
            Not After : Dec  8 23:18:30 2024 GMT
        Subject: CN=fff02b03-5f7f-4bfa-9adb-92485f5d3e83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c5:8e:14:ff:1c:9d:82:ad:ea:e9:3c:20:b6:
                    c8:54:cc:00:81:e4:74:1a:72:f1:78:c6:ac:b4:11:
                    99:ae:5f:e7:45:30:cf:da:b3:1f:02:91:b0:86:cd:
                    04:c9:2b:a1:c5:53:ae:e7:5b:9f:f0:40:15:66:4d:
                    51:23:77:51:52:e3:29:ff:f7:12:06:3e:df:47:db:
                    d8:d2:f1:98:09:32:86:76:70:28:fd:20:0e:18:0b:
                    53:2b:95:39:47:b4:3e:91:05:68:de:4e:08:92:d0:
                    f8:3c:4c:2d:ec:c8:91:69:dd:01:38:a3:b2:5b:db:
                    9d:d2:8c:19:d2:51:af:1c:f4:82:c7:95:bd:88:af:
                    bd:16:a8:57:ac:ad:cc:4c:a4:b2:e1:54:98:0c:ea:
                    af:fc:77:8a:37:1f:ed:68:e4:e9:5f:13:71:7e:e4:
                    97:ab:9c:34:c8:9d:bc:59:a6:5b:61:ca:05:d7:d7:
                    1c:36:b4:43:a2:6c:c7:ef:f0:57:1d:e5:04:dc:ac:
                    1d:33:6e:63:97:6c:33:3a:11:67:9b:a3:8a:35:8f:
                    72:55:7c:6d:68:e5:f3:77:82:13:be:80:c9:4e:9f:
                    eb:0f:fa:63:ea:4a:0f:10:6d:45:df:7e:ab:d5:6b:
                    51:f4:0b:f8:05:b4:35:8d:2e:43:d7:bd:96:62:7a:
                    ae:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:10:DE:86:02:56:08:D3:D8:BD:8A:CB:49:59:BA:A8:E4:1E:EC:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/9f2004b3-f46d-3e83-a948-cc255fe3a018.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:fc80:2800::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:16:c9:44:ae:96:09:9e:19:c6:95:db:5d:74:2d:64:16:2d:
         9b:b2:b4:92:87:c5:85:21:6b:a1:7e:02:24:35:95:44:b1:a4:
         3d:5d:e4:d4:e0:e0:95:3a:8f:25:4b:c9:a5:68:e2:cc:fb:d0:
         54:c4:0a:d1:4c:28:b1:35:3b:0d:8d:08:ae:00:1a:16:b1:e3:
         3d:8c:3b:ef:86:54:5b:72:e7:2e:cf:68:43:8d:64:00:9c:dc:
         b9:8e:70:54:8c:58:5e:ce:a8:e0:f5:a3:45:01:24:44:c6:38:
         fb:f3:67:1d:4e:eb:4e:4e:14:86:4a:a5:7f:8f:e0:c1:e3:e4:
         f0:2e:f5:aa:5c:84:31:09:dc:ce:56:ad:35:be:69:3c:1a:55:
         7b:15:57:9b:b8:d9:bb:2b:f9:04:8e:30:31:fe:cb:3b:a8:be:
         c7:00:00:bb:18:80:f1:ff:03:90:6e:e8:90:db:1b:7b:c6:7a:
         a2:db:f6:33:2b:e3:bb:65:6f:71:6b:39:b4:1d:af:d3:1d:7c:
         ee:f7:52:15:4a:07:44:dd:ed:bb:ae:d2:84:e4:f1:67:07:0f:
         c8:31:0d:16:73:d6:ee:fb:b8:d4:ae:55:18:6c:e3:60:18:23:
         37:d6:d8:3f:7b:c1:0f:50:b7:90:8f:d8:38:36:f5:ee:40:99:
         52:eb:a7:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:39:37 2024 by rpki-client on console-fra.rpki-client.org