Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57/5a09fc74-2dfe-3556-85bc-283d9f18821c.roa
File:                     5a09fc74-2dfe-3556-85bc-283d9f18821c.roa (raw, json)
Hash identifier:          5Xk8zjZV9jAZXPquHCCKlj63kiOg++nrjoeqTMNqdjc=
Subject key identifier:   E9:E0:40:B1:F9:E9:27:E8:FA:40:EE:3D:0D:96:9B:0D:E2:57:59:D3
Certificate issuer:       /CN=55031a70-6ea8-4521-acbd-0217ada4cf57
Certificate serial:       010D0C9F432858479AABF41EBAF938DB418BF670
Authority key identifier: 69:40:BA:02:73:9A:6F:7E:97:63:19:0E:44:61:29:E9:8C:E2:C7:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57/5a09fc74-2dfe-3556-85bc-283d9f18821c.roa
Signing time:             Sun 20 Oct 2024 13:00:42 +0000
ROA not before:           Sun 20 Oct 2024 13:00:42 +0000
ROA not after:            Sat 18 Jan 2025 14:00:42 +0000
asID:                     396504
IP address blocks:        2602:814:7000::/40 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57/55031a70-6ea8-4521-acbd-0217ada4cf57.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57/55031a70-6ea8-4521-acbd-0217ada4cf57.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9a:ab:f4:1e:ba:f9:38:db:41:8b:f6:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55031a70-6ea8-4521-acbd-0217ada4cf57
        Validity
            Not Before: Oct 20 13:00:42 2024 GMT
            Not After : Jan 18 14:00:42 2025 GMT
        Subject: CN=953d5327-99f9-4bb9-912b-916890f7521e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ba:6b:62:6f:8f:95:52:b5:00:21:b6:99:4d:
                    54:c1:c5:b8:74:f3:a1:14:03:1b:88:39:da:07:0a:
                    5d:8f:9d:bc:a1:b3:8b:b3:1e:c2:5f:91:fa:8f:8a:
                    70:33:a3:90:f0:81:ee:b7:e9:9a:e3:87:31:7f:f9:
                    87:18:84:47:74:2a:f4:f3:9c:bb:cc:f5:77:fd:56:
                    e8:e3:18:94:c5:f8:89:f2:c6:f8:e8:75:8e:34:4d:
                    a4:a5:0a:f2:00:2c:a9:44:9a:d2:68:ce:5b:ed:90:
                    f9:76:aa:79:76:54:76:9f:5b:c7:ea:7c:5a:71:fe:
                    0d:68:1f:4f:3e:bb:c8:5c:50:aa:38:bb:3c:70:37:
                    69:8a:98:dc:ab:84:1b:16:48:f9:82:84:9d:d2:a4:
                    73:ea:5c:f9:b2:12:60:c6:bd:06:9a:ed:07:b5:e8:
                    37:a9:eb:35:e9:3c:f6:84:a2:55:83:71:f4:81:92:
                    ab:6d:82:28:c9:12:42:17:89:b5:54:71:fa:35:93:
                    c3:6e:2b:dc:25:2d:b3:53:4a:b1:96:fa:f0:1a:6d:
                    5d:68:36:04:29:6f:b8:c3:0f:1c:25:50:04:7b:27:
                    b4:00:86:70:e8:a1:6e:51:fc:fc:11:d4:d7:e1:01:
                    4c:4d:08:ec:0d:aa:4e:50:39:0a:a2:7a:d5:33:3f:
                    e2:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:E0:40:B1:F9:E9:27:E8:FA:40:EE:3D:0D:96:9B:0D:E2:57:59:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57/5a09fc74-2dfe-3556-85bc-283d9f18821c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57/55031a70-6ea8-4521-acbd-0217ada4cf57.crl

            X509v3 Authority Key Identifier:
                keyid:69:40:BA:02:73:9A:6F:7E:97:63:19:0E:44:61:29:E9:8C:E2:C7:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:814:7000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:d1:19:79:98:d7:cc:a2:2c:9b:c5:bb:93:53:db:14:96:ae:
         e1:92:db:fc:1b:0c:75:78:49:ea:4a:32:07:eb:a2:35:87:76:
         bd:45:37:1d:ab:09:dc:26:12:4e:65:af:cc:2d:13:fe:0c:23:
         4c:8e:d8:51:71:db:90:29:3d:6c:69:6d:6f:5c:8e:27:8c:94:
         9e:0e:73:2f:40:4e:91:d8:62:b0:f0:88:51:14:a4:13:a7:3c:
         94:e3:3d:8d:31:94:ae:6f:73:fc:cd:6a:df:d9:cc:96:2f:33:
         92:51:d8:2c:8e:49:3c:62:9a:1b:f8:ce:2a:f4:83:e8:94:41:
         75:83:75:5c:b1:fe:86:50:18:82:aa:28:5b:d2:d9:5f:a6:9e:
         89:23:53:d0:77:44:81:4e:cb:c1:b1:10:06:d1:7b:78:39:a8:
         e6:71:15:a5:34:ae:1c:80:72:de:3e:fc:04:19:d9:00:f3:37:
         a4:2e:24:e3:f8:f5:7e:e5:a6:ad:b7:12:4d:7c:1b:95:38:aa:
         d9:69:2c:09:c6:55:e0:e8:f4:f0:09:41:21:e1:e2:2f:f7:6f:
         37:6e:34:35:25:ed:77:35:0a:1b:31:ed:0f:0c:e6:ea:f1:b2:
         56:ca:80:bc:e9:84:18:66:38:84:cc:af:ef:1b:9b:a4:db:da:
         73:7b:34:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:55:53 2024 by rpki-client on console-ams.rpki-client.org