Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/4bdf525f-c871-3e38-b3fc-adc51096b141.roa
File:                     4bdf525f-c871-3e38-b3fc-adc51096b141.roa (raw, json)
Hash identifier:          tcsVBeQundMhdu3f/nZEc7RTObuZvNLfrk0z1Q6iDGg=
Subject key identifier:   47:A5:85:6A:5A:9C:E2:C2:C0:EA:31:8B:73:8A:AB:6E:DF:21:54:E5
Certificate issuer:       /CN=2775f7c3-c238-47d5-98c9-835a28d9095e
Certificate serial:       010D0C9F432858474420A743EE168607D2AC8C40
Authority key identifier: D1:24:DF:CC:7F:5B:80:D2:8D:EC:FE:EE:8C:CF:52:33:8E:B5:21:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/4bdf525f-c871-3e38-b3fc-adc51096b141.roa
Signing time:             Thu 19 Sep 2024 13:00:42 +0000
ROA not before:           Thu 19 Sep 2024 13:00:42 +0000
ROA not after:            Wed 18 Dec 2024 14:00:42 +0000
asID:                     62467
IP address blocks:        2602:fccf:800::/37 maxlen: 37

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/2775f7c3-c238-47d5-98c9-835a28d9095e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/2775f7c3-c238-47d5-98c9-835a28d9095e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:44:20:a7:43:ee:16:86:07:d2:ac:8c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2775f7c3-c238-47d5-98c9-835a28d9095e
        Validity
            Not Before: Sep 19 13:00:42 2024 GMT
            Not After : Dec 18 14:00:42 2024 GMT
        Subject: CN=fb0723e8-6d2f-454c-a9a3-acc2e316ffa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:76:80:9b:96:dd:f4:1a:04:33:50:0f:1c:d0:
                    e6:aa:e3:8b:e4:d2:64:9d:b8:af:cd:7b:1f:13:5d:
                    a1:3c:2d:a8:fd:d6:84:08:81:32:dd:f2:11:2c:35:
                    98:1a:a1:45:7a:8e:d0:ae:b6:c8:c3:b2:0d:e7:78:
                    a1:88:a3:a3:72:c6:21:ed:e9:85:a9:3e:02:97:f5:
                    85:58:59:96:85:3c:6b:3e:67:05:42:9e:80:33:6e:
                    79:7c:22:6b:c7:90:4e:da:c3:d2:4e:15:e1:f2:0c:
                    2f:0d:a5:5a:be:a5:df:c1:f7:e5:69:75:0c:fc:46:
                    25:21:00:98:14:2d:88:c2:34:d6:69:3f:50:40:c5:
                    8b:90:1d:ca:84:60:a6:b0:93:3b:74:66:07:b4:3a:
                    93:55:14:88:02:8a:f3:85:8f:ec:0b:48:f3:0d:23:
                    79:4d:3d:42:83:1a:bc:22:48:7e:d9:a1:44:cf:c9:
                    24:29:54:bc:f1:2f:02:6c:b7:d0:62:15:87:80:47:
                    bf:4d:a9:89:d6:bf:f3:c5:5f:7e:42:cc:cd:d7:f8:
                    99:3f:fb:94:04:10:58:23:4a:3b:66:55:93:0e:b7:
                    fc:3b:29:30:81:82:73:e9:fc:43:f8:08:79:f1:32:
                    ce:a1:9c:0b:20:a9:6b:1d:9c:1a:51:70:43:fb:b8:
                    6a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:A5:85:6A:5A:9C:E2:C2:C0:EA:31:8B:73:8A:AB:6E:DF:21:54:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/4bdf525f-c871-3e38-b3fc-adc51096b141.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/2775f7c3-c238-47d5-98c9-835a28d9095e.crl

            X509v3 Authority Key Identifier:
                keyid:D1:24:DF:CC:7F:5B:80:D2:8D:EC:FE:EE:8C:CF:52:33:8E:B5:21:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fccf:800::/37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:4d:cc:92:81:3e:4a:49:ca:56:70:96:ee:be:fb:91:8e:cc:
         f2:50:5d:c7:c9:73:b7:2c:b5:fa:78:13:4f:41:3e:b3:a5:57:
         25:67:09:42:98:2a:a0:5d:24:69:31:54:4d:ff:7a:c0:1d:9b:
         e6:bb:73:84:c0:77:ff:c6:af:8c:f7:8c:ab:fc:6d:c0:6c:62:
         06:ba:36:46:77:ba:64:3d:20:ce:3a:4e:90:4e:03:c5:01:56:
         73:85:96:66:07:c7:dc:13:59:b0:56:dc:71:25:a4:38:74:07:
         69:fe:09:2a:8f:ec:cb:2f:db:5f:fb:dc:63:6f:77:95:d5:8b:
         37:34:4a:5e:5b:b4:53:5d:43:31:56:ec:d9:dc:22:d9:4c:7b:
         36:74:ac:8f:e0:41:93:f6:39:10:83:d9:4a:ee:0d:e9:aa:dc:
         db:75:09:12:34:71:3e:4d:76:a5:88:a4:62:4b:f8:7c:c7:c4:
         bf:2e:87:84:9a:53:5f:ca:6f:27:72:c7:4b:ff:15:e8:9f:aa:
         d9:6c:dc:64:18:bd:ef:76:60:85:f4:2d:bc:a9:e9:e5:3a:94:
         6e:6b:2b:fd:1e:af:ae:a8:6a:80:ce:be:d7:03:93:a3:25:12:
         70:e9:bf:97:ce:52:15:07:1d:7a:f8:85:c6:96:af:36:dc:60:
         cf:67:56:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:42:04 2024 by rpki-client on console-ams.rpki-client.org