Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961/5b2f3d47-01c0-385d-80b6-55e854983c66.roa
File:                     5b2f3d47-01c0-385d-80b6-55e854983c66.roa (raw, json)
Hash identifier:          fRh/vZ9UGBzd0esxdYsYsPpBPT2GriPpCJkTPv48B8w=
Subject key identifier:   6E:39:5C:03:F7:A4:5A:BC:4E:E2:71:5F:72:FF:9D:E5:F4:8B:DC:44
Certificate issuer:       /CN=4ba03064-0288-4ec4-b73f-d6ba1d639961
Certificate serial:       010D0C9F43285847BAC6B23DE4E0D87DF702CDC0
Authority key identifier: D5:B0:A1:F6:E8:C8:0C:9B:0D:B8:6F:3D:78:20:2F:7B:79:D4:AD:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961/5b2f3d47-01c0-385d-80b6-55e854983c66.roa
Signing time:             Fri 01 Nov 2024 01:00:30 +0000
ROA not before:           Fri 01 Nov 2024 01:00:30 +0000
ROA not after:            Thu 30 Jan 2025 02:00:30 +0000
asID:                     174
IP address blocks:        2602:fa3d:a93::/48 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961/4ba03064-0288-4ec4-b73f-d6ba1d639961.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961/4ba03064-0288-4ec4-b73f-d6ba1d639961.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ba:c6:b2:3d:e4:e0:d8:7d:f7:02:cd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ba03064-0288-4ec4-b73f-d6ba1d639961
        Validity
            Not Before: Nov  1 01:00:30 2024 GMT
            Not After : Jan 30 02:00:30 2025 GMT
        Subject: CN=5d62eb3b-6e9c-48bd-9d9c-49fade247b57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ef:02:8c:05:71:49:13:e1:fc:32:06:ee:0c:
                    06:d4:d6:a0:ef:7c:ee:0d:c5:81:e9:a3:50:32:9d:
                    d7:ec:1b:f8:5a:1f:11:fe:c2:8d:5d:59:57:16:77:
                    76:59:c7:2e:f0:1a:db:66:ce:79:e0:ce:07:0d:95:
                    c0:ee:38:87:55:e0:94:2d:93:15:af:1d:61:84:87:
                    eb:f8:f8:34:42:34:d2:d1:a3:cb:4f:de:d0:60:e5:
                    72:b5:7d:1d:86:97:26:40:32:84:e2:bb:a0:56:ed:
                    45:25:c3:89:f4:da:9b:b8:13:b2:cc:a7:0d:26:3c:
                    ce:22:d3:ae:22:8a:d4:45:df:b7:f3:9b:03:f2:23:
                    7a:7f:32:4a:9d:cb:92:12:ff:28:ff:55:22:8f:1f:
                    2a:f7:89:81:89:43:3a:d3:de:e6:e9:15:2a:f4:0a:
                    c6:00:69:4d:a5:5a:07:39:1a:3e:f0:8c:e0:90:d6:
                    5c:56:b3:1b:a7:fd:dc:f9:a3:f9:cf:92:fd:c4:a4:
                    68:47:4a:fe:8f:40:85:b8:2e:06:ae:c3:6b:a5:8a:
                    6d:48:bb:79:4e:de:a1:06:75:2c:7e:80:8e:f1:d7:
                    14:88:b8:af:cc:15:48:2b:c6:22:73:6f:ee:ba:9f:
                    51:47:c6:92:1e:86:f9:fe:5e:b7:4b:f0:41:cb:14:
                    86:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:39:5C:03:F7:A4:5A:BC:4E:E2:71:5F:72:FF:9D:E5:F4:8B:DC:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961/5b2f3d47-01c0-385d-80b6-55e854983c66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961/4ba03064-0288-4ec4-b73f-d6ba1d639961.crl

            X509v3 Authority Key Identifier:
                keyid:D5:B0:A1:F6:E8:C8:0C:9B:0D:B8:6F:3D:78:20:2F:7B:79:D4:AD:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa3d:a93::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:4c:55:c9:eb:e4:a9:71:fb:cc:54:ac:23:c3:9f:c1:e8:e3:
         d7:cd:ce:71:42:dc:ef:98:75:cd:3d:5a:f7:26:e0:64:3f:3b:
         fd:3b:8d:0b:14:55:e6:65:bc:7f:81:41:8b:65:51:7f:65:e6:
         3a:24:57:4c:e2:dc:1c:e4:97:6d:eb:13:25:83:a1:d6:a5:4a:
         26:f7:42:75:4e:3f:53:41:c1:29:17:1d:33:ec:21:59:0a:42:
         01:31:2d:4d:fd:6a:32:50:22:1f:e3:f1:32:75:02:10:32:c5:
         6f:af:82:bf:75:8c:4a:85:c1:61:56:b1:59:15:aa:74:ab:4d:
         d5:2e:ab:ec:9c:e1:c1:b4:ad:04:a2:31:fe:15:13:bf:58:38:
         87:96:db:06:ca:8f:20:c2:c1:db:7d:71:9e:11:dc:52:07:07:
         03:22:c7:f1:53:3f:3c:63:f4:85:a5:7d:87:98:ff:ef:ba:1e:
         74:0b:36:77:af:09:82:b0:51:10:ec:05:c2:26:b5:ca:27:02:
         75:be:9a:d7:96:84:4a:e7:17:a9:a8:3a:9a:ed:e2:5d:70:8e:
         c6:eb:e6:09:56:34:f9:4c:cf:7e:f4:c4:c5:52:73:f4:8f:c9:
         10:36:60:55:8e:1b:07:3a:1f:6e:1d:ce:eb:d7:64:c9:ea:35:
         00:97:cd:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:35:20 2024 by rpki-client on console-fra.rpki-client.org