Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/cce51543-b0dc-321d-9685-6861e58a4aa1.roa
File:                     cce51543-b0dc-321d-9685-6861e58a4aa1.roa (raw, json)
Hash identifier:          6QNf5MCDZNQefJnp4Lk3Nt1ion7Sm4bmQ8VfQN32l3U=
Subject key identifier:   D2:75:4A:9C:ED:43:FF:1C:23:71:24:61:9C:EB:D8:AA:04:03:D7:CB
Certificate issuer:       /CN=52e7b96d-0aa5-402a-b2fe-337d7c207eee
Certificate serial:       010D0C9F4328584797E13AAFC92B48855492DA40
Authority key identifier: 9B:6A:6C:86:9C:34:20:C4:8F:63:A2:11:A4:03:41:1A:D2:5D:9F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/cce51543-b0dc-321d-9685-6861e58a4aa1.roa
Signing time:             Sat 19 Oct 2024 13:00:42 +0000
ROA not before:           Sat 19 Oct 2024 13:00:42 +0000
ROA not after:            Fri 17 Jan 2025 14:00:42 +0000
asID:                     950
IP address blocks:        2602:fc09:210::/44 maxlen: 48
                          2602:fc09:950::/44 maxlen: 48
                          2602:fc09:960::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:97:e1:3a:af:c9:2b:48:85:54:92:da:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52e7b96d-0aa5-402a-b2fe-337d7c207eee
        Validity
            Not Before: Oct 19 13:00:42 2024 GMT
            Not After : Jan 17 14:00:42 2025 GMT
        Subject: CN=6cc61e83-e341-4375-8c25-7020d6821d1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:23:e1:a0:f6:7e:ad:17:7a:2f:66:6b:f0:d6:
                    f8:ee:d4:e9:83:ec:8c:9a:0e:f8:20:bf:17:43:27:
                    41:ed:20:0b:eb:9f:ff:54:95:1b:ca:de:eb:5a:6e:
                    4f:96:ab:b6:15:9a:26:0c:57:d1:98:56:ba:7f:8d:
                    44:9f:24:fb:0d:4b:25:82:a9:a6:9a:4a:bb:9d:46:
                    58:86:fa:40:64:39:8f:9b:47:ce:1a:88:88:31:3e:
                    68:f2:27:ee:35:6c:b2:90:6d:7b:a6:88:82:28:96:
                    36:bd:2f:53:a6:e3:73:45:65:ca:81:ce:3c:02:5a:
                    da:1e:b3:12:0e:2c:89:95:0c:ce:e5:64:f7:14:4a:
                    aa:36:31:10:5e:3e:55:dd:91:2e:63:c4:b8:59:7a:
                    32:d6:b6:97:17:45:0d:03:35:9b:38:40:cb:4f:25:
                    a0:00:58:67:53:10:e2:ac:b4:13:ff:63:64:41:93:
                    f8:0e:5f:06:5c:5e:1e:5d:22:1e:5f:b3:9e:33:ac:
                    9b:62:98:f0:25:66:f1:f8:84:ac:43:44:71:0f:fc:
                    c0:bb:be:ca:41:74:61:13:2b:a7:d5:3a:71:0a:36:
                    56:b3:b7:d2:97:a9:85:f8:e8:5e:d8:4b:ac:f1:09:
                    2b:9a:74:a9:fa:f3:3e:08:fb:2c:58:75:2f:46:88:
                    fc:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:75:4A:9C:ED:43:FF:1C:23:71:24:61:9C:EB:D8:AA:04:03:D7:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/cce51543-b0dc-321d-9685-6861e58a4aa1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.crl

            X509v3 Authority Key Identifier:
                keyid:9B:6A:6C:86:9C:34:20:C4:8F:63:A2:11:A4:03:41:1A:D2:5D:9F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc09:210::/44
                  2602:fc09:950::-2602:fc09:96f:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:0f:4d:80:01:f7:c3:b7:b8:83:53:5f:8e:36:65:76:4d:20:
         a0:46:49:be:39:d5:d4:62:2e:ae:82:b8:71:02:97:52:80:02:
         bd:f6:90:4f:64:56:c8:80:c5:01:3c:92:1c:10:26:c9:95:c7:
         9f:24:32:30:e9:30:43:22:3d:50:2e:ff:f6:f7:07:72:7d:2c:
         22:9f:f3:25:dc:fc:9b:22:c9:47:37:7d:a1:d2:37:ad:cd:2b:
         eb:58:16:b4:d2:89:ba:ab:63:21:4b:f5:c5:67:d0:49:8f:19:
         2c:ad:60:bd:57:c7:fd:72:d0:6a:09:67:77:34:7e:22:d1:da:
         79:40:5a:82:d5:eb:48:be:a8:0a:e2:f7:42:72:67:9d:a3:33:
         74:71:79:4f:10:3b:56:28:96:60:4f:41:05:ee:f9:cb:e6:bb:
         47:1b:95:1c:bc:07:03:1d:7c:63:51:20:eb:e4:4b:f0:5a:de:
         8b:f4:91:65:ab:b6:4e:87:2a:33:d5:8e:a7:77:29:a4:b0:d9:
         64:ac:d6:cd:49:e7:37:09:2c:5d:c4:a1:57:3d:b2:30:59:5a:
         93:e0:a2:59:66:0e:73:5f:2d:36:1b:91:3c:3d:15:1a:6e:e5:
         3e:f4:44:f5:ff:0d:e6:d5:aa:81:45:b3:75:a0:83:3d:fb:ad:
         7d:88:6d:cf
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Nov 25 15:59:14 2024 by rpki-client on console-fra.rpki-client.org