Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/0092ac2b-5291-3213-961f-46693932424a.roa
File:                     0092ac2b-5291-3213-961f-46693932424a.roa (raw, json)
Hash identifier:          Cp7s4MFc2Diyv1LN2TaB762Osy7aXtauPrpqyRQBSTE=
Subject key identifier:   F7:91:FD:51:46:D5:0F:B1:88:5D:59:E0:0F:9F:19:23:06:3F:88:B4
Certificate issuer:       /CN=9c6e9a25-1599-4e9b-a8a2-015995c805b8
Certificate serial:       010D0C9F432858476C9DB214FDB4EDDB16886180
Authority key identifier: 8E:F7:C9:9E:50:68:66:1B:10:0F:56:6A:37:AB:5B:FF:D4:26:8F:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/0092ac2b-5291-3213-961f-46693932424a.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     400312
IP address blocks:        2602:fbf0::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/9c6e9a25-1599-4e9b-a8a2-015995c805b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/9c6e9a25-1599-4e9b-a8a2-015995c805b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9d:b2:14:fd:b4:ed:db:16:88:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c6e9a25-1599-4e9b-a8a2-015995c805b8
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=9da6e62b-5816-4e08-8777-d8a1b2b5055c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:15:ba:30:2a:9d:92:a8:78:b5:86:68:53:07:
                    d4:23:e4:ce:69:a4:f2:3b:f5:98:ef:68:13:65:f9:
                    b9:8b:ef:12:99:b0:38:ee:28:62:6c:47:99:b7:98:
                    07:4f:88:08:5a:63:88:18:a5:85:a2:44:3d:b5:ba:
                    c6:d1:b1:a3:46:dd:7a:c9:7f:96:47:d3:94:3d:1a:
                    88:1f:fe:cb:9f:f8:9a:9e:69:79:2d:5d:b7:a8:d0:
                    2c:5e:b8:25:67:e6:b9:69:1b:dd:42:a5:5e:47:c2:
                    1f:8a:19:57:1c:c2:b6:ae:a0:55:5b:02:f8:2f:34:
                    fe:61:e6:05:ff:d0:79:a0:a5:db:9d:78:7a:4d:44:
                    d0:40:dc:79:e8:45:21:ce:bc:7f:d0:2f:7f:1f:e9:
                    77:9a:3a:26:57:0a:4f:bc:0d:f5:d4:6a:e9:ec:3e:
                    c3:6c:58:55:85:03:43:a7:54:dc:cb:e6:22:fa:52:
                    d4:a7:05:5a:70:e7:af:0a:d1:20:bf:89:42:ec:e3:
                    a1:93:e8:75:c6:fd:cc:45:71:64:35:76:02:a7:dd:
                    a5:36:f8:e8:a9:f0:f1:b0:b3:21:d5:fb:c4:21:45:
                    1b:ec:e4:0d:95:17:2f:11:6e:be:25:c6:2e:ed:26:
                    46:76:ca:db:ef:cf:99:63:94:fc:cf:68:f0:69:4d:
                    42:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:91:FD:51:46:D5:0F:B1:88:5D:59:E0:0F:9F:19:23:06:3F:88:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/0092ac2b-5291-3213-961f-46693932424a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/9c6e9a25-1599-4e9b-a8a2-015995c805b8.crl

            X509v3 Authority Key Identifier:
                keyid:8E:F7:C9:9E:50:68:66:1B:10:0F:56:6A:37:AB:5B:FF:D4:26:8F:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbf0::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:bd:53:23:13:c6:3a:92:2f:0e:53:d2:44:08:27:d9:fb:bb:
         ba:aa:58:03:43:4e:4b:99:d2:30:d8:c0:84:84:90:a0:1b:4c:
         54:61:bb:ef:78:d9:5f:bb:ae:e1:0a:72:12:0c:51:6d:0e:1e:
         ba:ba:29:d1:aa:8c:f6:96:4b:e9:0f:7b:4c:40:32:fc:bd:4b:
         54:1f:d7:20:9b:01:52:b0:6a:b6:35:d2:46:b4:f6:17:20:bc:
         45:fc:b3:71:f6:47:e9:fe:bb:d2:89:9a:38:5c:64:d2:49:8a:
         4f:b5:93:94:ac:37:69:9b:79:b8:ae:79:9e:bf:55:2d:61:09:
         b3:de:0c:fa:c5:68:73:44:f7:bc:dd:5c:93:62:cb:2a:88:54:
         63:35:9a:07:e3:04:29:87:cc:fb:c0:64:c3:48:64:9f:88:3c:
         23:0d:4a:99:ea:93:b7:f5:10:9c:08:fb:4b:45:f7:09:4c:9b:
         9a:83:83:03:cc:d4:51:34:67:2c:70:a9:65:06:21:52:b2:ab:
         ec:f5:d5:f2:66:12:18:48:50:68:02:01:5a:61:8a:1c:18:eb:
         aa:2e:3a:57:4f:5c:97:5d:49:d4:58:64:de:ae:e1:62:de:eb:
         e4:b9:9c:fb:c6:f7:e4:73:22:19:c1:3d:87:6c:47:5c:b9:c8:
         f6:b8:c1:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:39:15 2024 by rpki-client on console-ams.rpki-client.org