Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/2c2f2002-b19b-3f29-a667-5eca934bdc03.roa
File:                     2c2f2002-b19b-3f29-a667-5eca934bdc03.roa (raw, json)
Hash identifier:          v7iczmeCBSveh1j6UzXTSEszJs0XDSD+bCp0Udgz320=
Subject key identifier:   67:5D:3F:20:35:B3:3B:1E:6C:2A:3B:3F:76:83:59:DB:26:57:2A:BB
Certificate issuer:       /CN=ab3688e8-3425-4e58-a239-949508a9f6dd
Certificate serial:       010D0C9F432858474F013AEEBA85EB2594462780
Authority key identifier: 48:68:72:45:64:2E:EE:B7:D1:4C:89:AA:BF:91:87:19:4D:93:99:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/2c2f2002-b19b-3f29-a667-5eca934bdc03.roa
Signing time:             Mon 23 Sep 2024 10:31:17 +0000
ROA not before:           Mon 23 Sep 2024 10:31:17 +0000
ROA not after:            Sun 22 Dec 2024 11:31:17 +0000
asID:                     3573
IP address blocks:        2610:b0:41d8::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/ab3688e8-3425-4e58-a239-949508a9f6dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/ab3688e8-3425-4e58-a239-949508a9f6dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4f:01:3a:ee:ba:85:eb:25:94:46:27:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab3688e8-3425-4e58-a239-949508a9f6dd
        Validity
            Not Before: Sep 23 10:31:17 2024 GMT
            Not After : Dec 22 11:31:17 2024 GMT
        Subject: CN=56c8e149-596d-4565-bbfc-edc124c8f0b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ab:cb:e9:5f:f5:23:d0:d6:86:7f:28:e4:3d:
                    79:5f:de:0a:ca:36:0e:d9:3f:88:b6:68:b6:16:26:
                    2c:81:e3:95:e6:33:57:63:65:40:4c:55:3b:88:79:
                    6a:22:f5:ba:c4:40:e8:87:d3:ac:9a:5b:58:af:9b:
                    a6:d0:f5:f6:48:9f:55:c0:86:4f:55:ab:f1:8d:90:
                    9a:37:cc:08:0b:00:c8:ff:bb:f4:b0:aa:0b:f9:52:
                    09:1d:72:3a:ba:ab:8b:47:90:a4:41:7b:60:e1:bb:
                    6a:b2:76:69:20:6a:a5:75:7e:3e:6c:cb:4b:b7:d7:
                    9e:13:21:92:ed:fb:b8:8c:99:fb:c2:8c:7d:f5:dc:
                    db:ff:ad:d9:20:b3:97:03:b3:45:b1:ab:43:17:6f:
                    32:d8:e9:58:cc:a5:ea:fa:c3:91:42:c3:a4:79:98:
                    0f:53:e7:61:5a:4d:ef:48:41:b5:77:8f:ec:21:2b:
                    35:7b:99:25:4a:e3:70:6e:d3:6a:48:09:82:b7:d5:
                    36:08:ef:a1:51:f3:b5:5e:7e:8f:df:a0:ec:ea:44:
                    38:e5:a6:ee:bb:52:11:c5:2a:cc:8a:c8:ab:07:05:
                    b8:1e:be:33:f7:25:46:1a:6e:23:38:5d:f2:c9:40:
                    ee:60:83:5f:c5:e0:a3:2f:31:8e:8e:f6:55:65:ff:
                    20:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:5D:3F:20:35:B3:3B:1E:6C:2A:3B:3F:76:83:59:DB:26:57:2A:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/2c2f2002-b19b-3f29-a667-5eca934bdc03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/ab3688e8-3425-4e58-a239-949508a9f6dd.crl

            X509v3 Authority Key Identifier:
                keyid:48:68:72:45:64:2E:EE:B7:D1:4C:89:AA:BF:91:87:19:4D:93:99:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:b0:41d8::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:e9:d2:23:63:23:8e:72:03:70:db:ef:ea:59:d5:58:6c:13:
         d7:96:4b:6e:da:cb:ba:ac:dc:b7:59:53:b9:f7:33:90:5d:46:
         45:fe:8d:55:1f:f8:a9:ee:c1:11:01:1f:71:3c:eb:97:cb:98:
         cf:28:ea:51:11:3b:c6:28:a9:d0:28:38:4f:e7:d9:9c:85:67:
         93:ae:c6:9b:11:4d:27:e5:65:87:45:51:43:5d:74:d1:ef:e3:
         9c:cb:e8:80:58:1c:ac:fd:99:d4:74:1e:9b:1d:ec:40:66:84:
         74:96:97:47:aa:c5:0d:30:6c:78:37:8c:ae:db:0c:86:fc:5d:
         43:93:95:4b:f7:9a:cd:96:2d:a3:99:78:d0:72:e4:49:5e:95:
         aa:2b:6b:22:24:2f:69:e3:80:14:50:11:c1:bf:6a:86:69:e5:
         bf:ba:fd:be:aa:e7:96:56:c0:78:8c:70:4f:69:2d:df:7e:fe:
         c8:86:1d:94:3e:6f:4a:37:92:29:e1:d7:3f:74:1c:67:1e:17:
         79:58:0c:60:c1:9b:61:c1:f8:a6:cd:95:ca:00:e5:8b:79:3b:
         a4:54:3c:b5:d8:82:e5:f9:04:8f:2d:83:4c:0f:73:27:43:ac:
         2c:ce:d7:b7:6c:42:92:99:e9:e8:4a:5c:2c:12:17:60:27:57:
         f0:bf:2d:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:48:03 2024 by rpki-client on console-ams.rpki-client.org