Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4/9682d34a-d558-35ce-b94a-c06ff912b18e.roa
File:                     9682d34a-d558-35ce-b94a-c06ff912b18e.roa (raw, json)
Hash identifier:          jf+A5SQqMO0khLRD/3DlK0II10kCYi2NqUZ9JmIoN3s=
Subject key identifier:   BC:55:16:21:ED:08:F1:98:BE:6F:38:A2:B4:68:29:20:D6:F0:DC:98
Certificate issuer:       /CN=cde39d3e-3837-4341-a8bd-86c74c06a6e4
Certificate serial:       010D0C9F43285847CFEE0ED5ACCEB8F509E1DE00
Authority key identifier: BE:E1:A9:58:D6:8A:ED:2B:7E:F2:AE:35:4D:3B:EC:EC:C2:2F:5B:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4/9682d34a-d558-35ce-b94a-c06ff912b18e.roa
Signing time:             Fri 08 Nov 2024 14:51:56 +0000
ROA not before:           Fri 08 Nov 2024 14:51:56 +0000
ROA not after:            Thu 06 Feb 2025 14:51:56 +0000
asID:                     46149
IP address blocks:        2602:fc25::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4/cde39d3e-3837-4341-a8bd-86c74c06a6e4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4/cde39d3e-3837-4341-a8bd-86c74c06a6e4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cf:ee:0e:d5:ac:ce:b8:f5:09:e1:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cde39d3e-3837-4341-a8bd-86c74c06a6e4
        Validity
            Not Before: Nov  8 14:51:56 2024 GMT
            Not After : Feb  6 14:51:56 2025 GMT
        Subject: CN=cb2f04f2-b6e0-488b-a34e-2275b1335f9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:54:c0:92:c4:5d:d1:4e:09:95:01:9a:10:16:
                    b7:df:f2:fb:10:0e:15:37:47:84:d7:5b:fd:43:ee:
                    46:83:a3:f6:51:76:b8:ed:48:21:46:ac:62:06:82:
                    9d:29:34:51:18:1a:1b:e8:9b:86:8b:1f:cf:2b:90:
                    df:90:dc:88:47:43:5d:4e:57:6b:55:7d:4c:3f:d6:
                    b2:d2:19:e9:ab:78:4d:91:6f:a5:85:ba:48:82:3b:
                    ce:93:7c:8c:bc:2c:e6:73:0d:5d:11:ed:a7:0f:42:
                    58:07:b6:41:e3:e8:88:b6:5d:42:12:27:7e:c5:43:
                    3c:63:d5:d4:5e:e8:70:6d:ee:9a:5c:b3:02:ff:d2:
                    69:a7:4d:33:ff:87:e7:e5:ed:eb:88:7d:92:53:8b:
                    ee:81:93:d7:92:8c:39:4d:f6:44:ca:a3:55:6a:ec:
                    ec:0a:71:b8:d8:f8:67:bd:b7:8d:39:14:62:98:1f:
                    18:40:40:8e:c1:44:c8:e6:a9:17:5a:55:b8:4e:f3:
                    5f:46:d4:b4:67:a1:b2:50:14:94:4b:59:4c:de:d9:
                    20:01:5e:a3:98:92:e5:63:80:1e:eb:01:fb:35:bb:
                    62:f7:b2:7c:f1:e0:14:e1:2c:e3:50:d2:14:e0:dd:
                    19:49:37:95:a8:f3:f9:78:d8:13:6f:d2:8e:fb:76:
                    0c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:55:16:21:ED:08:F1:98:BE:6F:38:A2:B4:68:29:20:D6:F0:DC:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4/9682d34a-d558-35ce-b94a-c06ff912b18e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4/cde39d3e-3837-4341-a8bd-86c74c06a6e4.crl

            X509v3 Authority Key Identifier:
                keyid:BE:E1:A9:58:D6:8A:ED:2B:7E:F2:AE:35:4D:3B:EC:EC:C2:2F:5B:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc25::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:65:6b:9b:66:e0:bb:dd:5f:8b:e3:66:0a:9f:e0:56:1f:1f:
         73:a9:9e:b7:75:5b:40:7d:73:22:f4:09:28:50:20:c9:89:60:
         65:1f:48:c2:fd:cc:42:5f:c3:17:e8:3a:13:92:80:ce:74:21:
         4e:0e:72:51:77:23:7a:37:1e:c5:a8:73:08:15:f4:92:fd:45:
         59:ce:06:32:53:43:d3:f4:de:83:40:ef:60:ca:eb:4e:5c:67:
         19:70:7b:27:51:6c:3c:4c:31:21:7d:61:4f:fa:5a:66:ff:8e:
         85:52:5c:8b:cd:ed:ad:5b:8a:29:43:5d:e8:30:a1:36:5d:e0:
         49:f6:57:cb:f1:71:37:75:21:aa:22:53:d4:70:db:d0:8a:f7:
         ad:12:7d:91:a8:d4:c0:9f:16:11:b8:20:9b:c3:f7:51:fd:4a:
         c7:36:84:60:b1:0d:d3:8c:63:e2:84:c8:31:63:e9:1b:d0:b5:
         93:6c:7a:d3:b1:d3:98:1b:8e:e7:e8:e6:f4:aa:e9:79:37:97:
         ee:a1:34:ea:05:ff:7a:7b:24:9c:93:d8:07:22:a3:a0:ce:56:
         9b:6d:57:be:5d:69:fd:ed:4c:d1:c1:61:80:40:87:34:5d:17:
         b8:83:c7:5b:c2:a2:1b:cd:1b:49:6d:f9:d4:4d:d0:fe:06:df:
         57:b7:6e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:39:21 2024 by rpki-client on console-ams.rpki-client.org