Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/f9f7ea2b-614d-3bc9-8fa3-9843aebeefc1.roa
File:                     f9f7ea2b-614d-3bc9-8fa3-9843aebeefc1.roa (raw, json)
Hash identifier:          H4nCsjTaWw7B+tN2lC5dY25S3ECL4+HZucySe6R9WmE=
Subject key identifier:   53:4D:3B:16:62:13:F5:91:77:B6:A8:A1:6D:08:EA:13:0A:B3:1B:AF
Certificate issuer:       /CN=fdd711b5-d16f-4549-9e75-bd201f5b7a13
Certificate serial:       010D0C9F432858477EC11318377B1C9109B29900
Authority key identifier: 1C:72:86:4A:24:9C:83:B3:CC:03:93:D4:9C:B8:8D:82:A8:89:95:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/f9f7ea2b-614d-3bc9-8fa3-9843aebeefc1.roa
Signing time:             Thu 10 Oct 2024 13:00:41 +0000
ROA not before:           Thu 10 Oct 2024 13:00:41 +0000
ROA not after:            Wed 08 Jan 2025 14:00:41 +0000
asID:                     0
IP address blocks:        2602:fb78::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7e:c1:13:18:37:7b:1c:91:09:b2:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdd711b5-d16f-4549-9e75-bd201f5b7a13
        Validity
            Not Before: Oct 10 13:00:41 2024 GMT
            Not After : Jan  8 14:00:41 2025 GMT
        Subject: CN=282eca70-cc3e-4822-8829-1e67f24b7c23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:dc:36:73:84:6c:18:20:80:4f:3a:47:73:13:
                    5b:69:58:af:2d:a5:82:0a:70:35:83:ef:c3:d4:e5:
                    e3:f1:51:ac:f3:ed:cc:e5:c3:11:cf:f0:ef:7f:6f:
                    ac:e1:f4:fe:f4:63:6b:24:3b:49:c4:35:f4:15:7b:
                    1c:ad:a6:7d:17:ff:cf:67:95:91:63:64:72:e0:07:
                    7d:6b:b7:d5:57:0e:04:43:66:f0:4c:17:51:4e:6a:
                    96:e5:62:6a:4b:93:6a:3c:65:ce:21:b6:c1:cf:d7:
                    d2:5d:09:d4:a4:80:e1:65:0e:ce:6d:9d:69:a4:ad:
                    15:6f:da:a6:5e:39:54:8b:b1:42:15:4b:56:af:80:
                    41:d5:e4:b4:96:d2:11:8e:6e:cd:41:55:b3:ad:0c:
                    d7:c1:69:92:4a:41:6d:1a:9a:4f:69:04:75:be:73:
                    7b:84:9c:28:f9:87:02:77:88:cc:ca:cd:c2:b7:be:
                    5e:6c:39:23:0a:f8:15:25:44:c4:ab:29:8a:aa:a5:
                    5d:8f:3e:fc:2a:63:ec:1a:cd:0e:90:b4:1b:ae:d0:
                    b9:09:6c:37:d4:3d:74:f8:64:11:6d:62:06:4c:76:
                    cf:d0:15:87:ca:27:82:87:7b:e4:c7:02:f3:f8:b9:
                    94:6d:53:22:13:28:23:8e:ba:d1:e8:cd:c2:c8:d0:
                    07:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:4D:3B:16:62:13:F5:91:77:B6:A8:A1:6D:08:EA:13:0A:B3:1B:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/f9f7ea2b-614d-3bc9-8fa3-9843aebeefc1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.crl

            X509v3 Authority Key Identifier:
                keyid:1C:72:86:4A:24:9C:83:B3:CC:03:93:D4:9C:B8:8D:82:A8:89:95:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb78::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:c6:fa:09:ba:8a:07:19:5c:20:08:e3:f1:9c:e1:40:6c:45:
         91:3f:53:89:3d:dc:d2:05:85:f1:aa:d3:19:3f:a4:3b:74:88:
         81:4c:34:83:d7:6e:95:2d:1a:fe:03:85:82:70:96:78:c4:f0:
         54:5c:1a:da:04:59:29:35:e1:ea:8b:99:e4:bb:5c:a6:bf:6d:
         9f:db:3c:be:dc:7a:b2:b0:e5:36:e6:7c:fe:d5:d9:54:ea:51:
         d6:f6:51:30:bc:e1:e1:23:02:63:1a:89:a3:dd:71:3b:3e:33:
         38:83:74:5b:82:63:79:a6:c9:8d:44:4b:91:1d:a8:42:18:74:
         b5:65:9c:cb:69:18:29:09:ad:76:1f:78:ec:3b:76:87:c2:dc:
         7b:29:66:58:f4:5d:69:8b:47:21:59:85:a9:b6:90:79:1c:b2:
         cb:d0:fb:0e:ac:df:99:67:96:4b:a1:e6:88:22:4a:96:f5:7e:
         99:10:1d:0e:81:f7:06:cb:6b:d5:35:14:1f:86:b1:92:b6:2b:
         08:69:bd:a1:10:93:fb:e0:9c:d2:76:91:39:77:66:4e:50:7d:
         2b:bb:60:dd:2f:8d:64:89:ab:a1:66:f6:0c:53:6f:d1:bf:eb:
         07:54:64:9b:29:3c:8d:45:4a:e9:ba:40:cd:9a:b9:41:b1:6e:
         5a:99:9c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:21:36 2024 by rpki-client on console-ams.rpki-client.org