Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/b8428946-1e88-3bc3-9f06-263a19c73513.roa
File:                     b8428946-1e88-3bc3-9f06-263a19c73513.roa (raw, json)
Hash identifier:          +C35s4MzLqc1lkDfIIEgFt7OovQYvBCpq4izKfxe64c=
Subject key identifier:   3E:99:8E:86:68:75:89:04:32:CF:C8:97:BB:EF:68:E8:A4:A8:04:18
Certificate issuer:       /CN=52e7b96d-0aa5-402a-b2fe-337d7c207eee
Certificate serial:       010D0C9F43285847E78F697997DF463F6F2B0580
Authority key identifier: 9B:6A:6C:86:9C:34:20:C4:8F:63:A2:11:A4:03:41:1A:D2:5D:9F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/b8428946-1e88-3bc3-9f06-263a19c73513.roa
Signing time:             Sun 17 Nov 2024 02:00:28 +0000
ROA not before:           Sun 17 Nov 2024 02:00:28 +0000
ROA not after:            Sat 15 Feb 2025 02:00:28 +0000
asID:                     206018
IP address blocks:        2602:fc09:f70::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e7:8f:69:79:97:df:46:3f:6f:2b:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52e7b96d-0aa5-402a-b2fe-337d7c207eee
        Validity
            Not Before: Nov 17 02:00:28 2024 GMT
            Not After : Feb 15 02:00:28 2025 GMT
        Subject: CN=bd9c41f4-ce48-4d0a-aea9-c9fd1fb4aab0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:47:24:c1:42:af:b0:37:20:77:f5:7b:c3:c2:
                    4f:24:6f:9c:8e:d4:82:75:fd:4c:a3:62:b7:19:3f:
                    93:1f:45:ff:ac:39:ba:10:f9:ac:f1:21:6b:57:e7:
                    f3:e7:a9:c7:b1:c0:c2:a7:d4:00:1b:8f:82:55:d7:
                    ef:c3:bd:a7:da:2d:3b:44:21:92:6d:91:0c:ef:cc:
                    a8:9f:5a:fb:9c:67:f4:a7:9f:b8:fa:87:8c:3b:72:
                    95:fe:8f:97:7f:fa:4d:4d:73:b0:30:19:a4:d9:04:
                    cd:e8:28:3a:47:5a:2a:a4:dc:91:fe:b4:f9:de:f9:
                    fb:c3:26:41:3a:ab:1b:60:9a:af:67:69:2e:89:cc:
                    c3:ae:71:67:f4:fc:59:29:15:fd:d1:8b:02:6c:9f:
                    7e:7d:dd:df:6b:15:1b:cc:7e:5b:ba:a2:0d:63:a9:
                    1d:3e:14:21:56:8a:1d:67:fd:4e:e6:d0:74:aa:34:
                    51:c4:6e:cf:2b:40:f1:d8:a0:d4:23:97:40:69:9d:
                    5d:2c:3d:95:3e:e3:d2:19:1b:ac:c0:5d:06:61:f1:
                    4f:87:88:72:28:55:17:dd:4a:aa:cb:dd:ef:31:00:
                    21:4f:a2:55:7b:b4:dc:1f:b7:00:3a:de:d6:fe:67:
                    55:5b:ba:0e:0e:b2:3d:ac:1b:53:83:5b:0d:17:7b:
                    d9:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:99:8E:86:68:75:89:04:32:CF:C8:97:BB:EF:68:E8:A4:A8:04:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/b8428946-1e88-3bc3-9f06-263a19c73513.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.crl

            X509v3 Authority Key Identifier:
                keyid:9B:6A:6C:86:9C:34:20:C4:8F:63:A2:11:A4:03:41:1A:D2:5D:9F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc09:f70::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:f2:9f:98:78:6c:5a:3d:df:e6:31:51:cc:3f:af:7b:7f:9d:
         d7:6a:b7:18:af:4a:3c:6b:a7:dd:47:2f:c1:83:01:9e:8c:8e:
         4e:ba:5e:57:c6:ea:26:ef:c4:ce:e6:3b:5c:44:b8:22:1a:50:
         98:5a:41:70:59:5a:1c:20:f8:db:9d:57:e1:0e:62:cd:81:80:
         73:2e:8b:25:97:1c:db:e0:e5:cd:50:28:71:a1:29:c8:80:6f:
         2f:e7:f4:ff:62:70:06:ea:33:56:c6:a2:df:94:52:29:54:78:
         01:f3:08:80:7a:67:96:cc:03:38:d9:64:41:b7:64:50:0e:1e:
         1a:ca:52:00:2a:26:ea:d1:a1:34:19:ac:fa:f3:e8:70:e0:c0:
         69:69:77:c5:63:e5:34:ef:cf:de:a2:77:26:77:8f:e5:1a:8f:
         4f:bc:99:5d:44:cb:3a:58:07:9e:51:2f:d7:6d:3e:32:0d:d3:
         c0:7c:45:54:5e:7a:64:7b:3e:bf:43:53:f9:20:52:a1:4b:63:
         1a:d1:91:f4:7a:51:8f:85:58:01:50:30:0c:11:bb:c7:60:8a:
         ab:3c:db:bd:1e:d3:91:51:77:6c:90:7c:dd:36:94:f0:e3:32:
         37:40:6b:68:95:e9:72:66:95:7b:86:60:0c:34:71:da:b2:6b:
         a7:dd:f5:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:22:50 2024 by rpki-client on console-fra.rpki-client.org