Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b/5a6c99b5-0f9c-330e-91eb-b2bddf673fa3.roa
File:                     5a6c99b5-0f9c-330e-91eb-b2bddf673fa3.roa (raw, json)
Hash identifier:          rUdS3VJFfUlQOPITlR0mjb770fdEQXoLD0VvLC5pcoI=
Subject key identifier:   9D:2D:C0:B4:C6:36:61:EE:D0:2C:E0:F9:B5:F9:A5:74:6A:67:E1:17
Certificate issuer:       /CN=c057d9a7-8f3f-4c97-9503-e2a936c27c7b
Certificate serial:       010D0C9F43285847600B8DC821C7E4E76E6AEC80
Authority key identifier: 5F:FC:6F:16:2F:93:08:ED:CA:F2:1D:62:E6:3C:59:3D:85:58:13:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b/5a6c99b5-0f9c-330e-91eb-b2bddf673fa3.roa
Signing time:             Sun 29 Sep 2024 13:00:41 +0000
ROA not before:           Sun 29 Sep 2024 13:00:41 +0000
ROA not after:            Sat 28 Dec 2024 14:00:41 +0000
asID:                     3653
IP address blocks:        2602:fc2d::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b/c057d9a7-8f3f-4c97-9503-e2a936c27c7b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b/c057d9a7-8f3f-4c97-9503-e2a936c27c7b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:60:0b:8d:c8:21:c7:e4:e7:6e:6a:ec:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c057d9a7-8f3f-4c97-9503-e2a936c27c7b
        Validity
            Not Before: Sep 29 13:00:41 2024 GMT
            Not After : Dec 28 14:00:41 2024 GMT
        Subject: CN=bd89d6ae-dc01-401f-9605-c095391d76ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3f:00:18:36:f0:fc:05:cd:de:a9:8b:df:0f:
                    ab:bc:d0:c3:c9:b4:90:6a:fa:a2:bd:56:63:28:85:
                    9e:7a:4b:55:bd:1a:1c:9e:e3:9d:34:f4:b1:60:5e:
                    c3:fa:3e:71:b6:f0:3e:6a:02:6b:db:2f:97:30:c2:
                    b6:d3:50:85:c4:07:b5:93:e6:59:fc:ec:d5:fd:a7:
                    64:7e:6c:24:63:7c:16:6b:a3:1b:1f:81:35:86:2d:
                    34:94:b3:c3:f4:65:22:75:ee:ef:a7:85:a6:42:30:
                    47:04:2d:96:ed:43:cc:ed:b7:17:a5:16:04:7d:5b:
                    2d:54:11:a3:08:68:39:2a:df:b6:5d:ba:bd:a9:8b:
                    68:27:77:f6:c8:11:c5:87:da:5e:d8:bb:a0:ef:fe:
                    67:71:45:ab:0b:5f:ca:1f:1e:29:63:1c:5e:f8:1f:
                    38:26:68:84:a9:20:65:f3:d9:af:60:32:75:63:3e:
                    a2:c4:d3:fa:2e:a5:99:65:9f:f3:c4:ea:cd:63:75:
                    bf:07:9e:4d:50:36:75:2d:2d:70:20:4e:f0:05:cc:
                    f6:b6:c4:86:c8:26:45:a2:26:99:b5:50:de:79:c1:
                    28:46:22:94:5d:82:c8:c5:c2:fc:1f:f7:66:8f:70:
                    4e:f4:07:8b:52:12:28:20:11:23:17:ce:14:fd:53:
                    6f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:2D:C0:B4:C6:36:61:EE:D0:2C:E0:F9:B5:F9:A5:74:6A:67:E1:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b/5a6c99b5-0f9c-330e-91eb-b2bddf673fa3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b/c057d9a7-8f3f-4c97-9503-e2a936c27c7b.crl

            X509v3 Authority Key Identifier:
                keyid:5F:FC:6F:16:2F:93:08:ED:CA:F2:1D:62:E6:3C:59:3D:85:58:13:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc2d::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:5e:60:ad:06:b8:3f:71:94:d3:61:41:3f:d0:c7:bb:a8:10:
         33:98:dd:0f:8d:dc:16:a7:89:cb:12:71:02:af:f2:ec:35:cd:
         82:a5:cd:69:4a:7c:e5:18:07:d6:b5:e7:56:85:7e:e3:8a:6b:
         a1:3e:f1:35:3a:07:b6:18:9a:55:b5:08:05:e1:72:a4:2b:40:
         d2:0b:8f:38:71:af:44:9c:f9:f4:f6:97:35:71:8c:b1:1f:c8:
         18:17:62:8d:82:a1:9f:f9:b9:4f:68:dc:76:a1:be:a4:ca:e7:
         77:7d:79:71:c6:a7:b0:6e:27:55:79:e9:50:ba:46:f3:de:73:
         14:63:96:d5:d7:c0:d2:1d:9c:97:51:fa:cb:4b:a0:8a:50:f8:
         51:f2:03:c7:13:8e:ed:7a:0c:36:ce:ab:5b:db:68:10:76:15:
         81:ae:ad:25:41:04:2f:ea:10:51:f3:5a:eb:18:03:d7:75:b8:
         92:8d:d2:79:b0:8f:52:df:22:2b:a0:5a:7a:50:16:22:3b:0a:
         6f:c0:e8:16:ef:2e:03:0a:da:fc:36:8a:97:a7:37:b5:ff:3f:
         26:fb:28:09:0a:6e:06:85:20:e9:8e:b3:6e:be:32:4f:f2:62:
         66:82:b2:a6:c6:f9:37:e5:2b:04:08:c2:f5:c1:a3:b0:52:f1:
         4c:28:6b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:39:20 2024 by rpki-client on console-ams.rpki-client.org